DNS(bind)添加A、CNAME、MX、PTR记录、智能DNS(ACL)

1、添加一条A记录(记得更改serial):

vim /var/named/chroot/etc/lnh.com.zone

技术分享图片

重启一下:

rndc reload

 

查看从服务器:

技术分享图片

测试结果:

master结果:

技术分享图片

第一种方法:是用resolv.conf中定义的DNS服务器查出百度主机的IP。

第二种方法(上述方法):是用本地的DNS(127.0.0.1)来查cc.lnh.com主机的IP。

slave结果(在master上看的):

技术分享图片

2、CNAME记录(如上)

cname		CNAME	a.lnh.com.

技术分享图片

3、MX记录(如上)

mx		MX 5	192.168.123.123
mx		MX 10 	191.1.1.1

4、PTR记录(反向解析)

MASTER:

[root@localhost etc]# cat view.conf 
view "View" {
  zone "lnh.com" {
        type    master;
        file    "lnh.com.zone";
        allow-transfer {
                192.168.222.146;
        };
        notify  yes;
        also-notify {
                192.168.222.146;
        };
  };
  zone "168.192.in-addr.arpa" {
        type    master;
        file    "168.192.zone";
        allow-transfer {
                192.168.222.146;
        };
        notify  yes;
        also-notify {
                192.168.222.146;
        };
  };

};
”168.192.in-addr.arpa“固定格式,ip反过来了。
[root@localhost etc]# cat 168.192.zone 
$TTL 3600       ; 1 hour
@                  IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
102.122		IN	PTR	a.lnh.com.
1.1		IN	PTR	B.lnh.com.

此时要看看权限:chown named.named 168.192.zone

Slave配置:
[root@localhost etc]# cat view.conf 
view "SlaveView" {
        zone "lnh.com" {
             type    slave;
             masters {192.168.222.145; };
             file    "slave.lnh.com.zone";
        };
        zone "168.192.in-addr.arpa" {
             type    slave;
             masters {192.168.222.145; };
             file    "slave.168.192.zone";
        };
 
};

 

这个是同步过来的:

[root@localhost etc]# cat slave.168.192.zone 
$ORIGIN .
$TTL 3600	; 1 hour
168.192.in-addr.arpa	IN SOA	op.lnh.com. dns.lnh.com. (
				2030       ; serial
				900        ; refresh (15 minutes)
				600        ; retry (10 minutes)
				86400      ; expire (1 day)
				3600       ; minimum (1 hour)
				)
			NS	op.lnh.com.
$ORIGIN 168.192.in-addr.arpa.
1.1			PTR	B.lnh.com.
102.122			PTR	a.lnh.com.

 

注意:a.lnh.com. 后面一定要有.

查看:

[root@localhost etc]# host 192.168.122.102 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases: 

102.122.168.192.in-addr.arpa domain name pointer a.lnh.com.

 

5、通过DNS实现负载均衡,,就是多加一条A记录,,这个有个问题,当这个后端服务器挂了,他也会解析,所以不建议用,,轮询的调度算法,没有健康监测。

[root@localhost etc]# host cc.lnh.com 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases: 

cc.lnh.com has address 123.123.123.124
cc.lnh.com has address 123.123.123.123

6、配置DNS视图(智能DNS),当DNS服务器接到请求时会匹配这两个组的ip,下面的加在include上,,此时就可以根据group来区分不用运营商分到不同的ip。

/var/named/chroot/etc
[root@localhost etc]# vim named.conf 
acl group1 {
  192.168.222.145;
};
acl group2 {
  192.168.222.146;
};
[root@localhost etc]# >view.conf
[root@localhost etc]# vim view.conf
[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# cat view.conf
view "GROUP1" {
  match-clients { group1; };
  zone "viewlnh.com" {
     type master;
     file "group1.viewlnh.com.zone";
 };
};
view "GROUP2" {
  match-clients { group2; };
  zone "viewlnh.com" {
     type master;
     file "group2.viewlnh.com.zone";
 };
};
[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# vim group1.viewlnh.com.zone

$ORIGIN .
$TTL 3600       ; 1 hour
viewlnh.com                     IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
$ORIGIN viewlnh.com.
op              A       192.168.122.1
view            A       192.168.122.1
[root@localhost etc]# pwd
/var/named/chroot/etc
[root@localhost etc]# vim group2.viewlnh.com.zone

$ORIGIN .
$TTL 3600       ; 1 hour
viewlnh.com                     IN SOA  op.lnh.com. dns.lnh.com. (
                                2030       ; serial
                                900        ; refresh (15 minutes)
                                600        ; retry (10 minutes)
                                86400      ; expire (1 day)
                                3600       ; minimum (1 hour)
                                )
                        NS      op.lnh.com.
$ORIGIN viewlnh.com.
op              A       192.168.122.2
view            A       192.168.122.2

 

修改权限

[root@localhost etc]# chown named.named group*

 

查看,在192.168.222.145上看

[root@localhost etc]# dig @192.168.222.145 view.viewlnh.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.5 <<>> @192.168.222.145 view.viewlnh.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49593
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;view.viewlnh.com.		IN	A

;; ANSWER SECTION:
view.viewlnh.com.	3600	IN	A	192.168.122.1

;; AUTHORITY SECTION:
viewlnh.com.		3600	IN	NS	op.lnh.com.

;; Query time: 1 msec
;; SERVER: 192.168.222.145#53(192.168.222.145)
;; WHEN: Wed Mar 21 18:33:51 2018
;; MSG SIZE  rcvd: 71

 

在192.168.222.146上看

[root@localhost etc]# dig @192.168.222.145 view.viewlnh.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.5 <<>> @192.168.222.145 view.viewlnh.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11962
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;view.viewlnh.com.		IN	A

;; ANSWER SECTION:
view.viewlnh.com.	3600	IN	A	192.168.122.2

;; AUTHORITY SECTION:
viewlnh.com.		3600	IN	NS	op.lnh.com.

;; Query time: 3 msec
;; SERVER: 192.168.222.145#53(192.168.222.145)
;; WHEN: Wed Mar 21 18:36:16 2018
;; MSG SIZE  rcvd: 71

 

文章来自:https://www.cnblogs.com/bill2014/p/8618896.html
© 2021 jiaocheng.bubufx.com  联系我们
ICP备案:鲁ICP备09046678号-3