部署DNS slave

开启另一台服务器：步骤和原来的差不多 

• 安装

yum install bind-utils bind bind-devel bind-chroot

• 编辑配置文件/etc/named.conf

slave 的named.conf要和主DNS的配置文件一样（建议）。

cat /etc/named.conf
 options {
  version "1.1.1";
  listen-on port 53 {any;};
  directory "/var/named/chroot/etc/";
  pid-file "/var/named/chroot/var/run/named/named.pid";
  allow-query { any; };
  Dump-file "/var/named/chroot/var/log/binddump.db";
  Statistics-file "/var/named/chroot/var/log/named_stats";
  zone-statistics yes;
  memstatistics-file "log/mem_stats";
  empty-zones-enable no;
  forwarders {202.106.196.115;8.8.8.8; };
};
key "rndc-key" {
        algorithm hmac-md5;
        secret "Eqw4hClGExUWeDkKBX/pBg==";
};
controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
};
logging {
  channel warning {
    file "/var/named/chroot/var/log/dns_warning" versions 10 size 10m;
    severity warning;
    print-category yes;
    print-severity yes;
    print-time yes;
  };
  channel general_dns {
    file "/var/named/chroot/var/log/dns_log" versions 10 size 100m;
    severity info;
    print-category yes;
    print-severity yes;
    print-time yes;
  };
  category default {
    warning;
  };
  category queries {
    general_dns;
  };
};
include "/var/named/chroot/etc/view.conf";

• vim /etc/rndc.key

key "rndc-key" {
        algorithm hmac-md5;
        secret "Eqw4hClGExUWeDkKBX/pBg==";
};

• vim /etc/rndc.conf

key "rndc-key" {
        algorithm hmac-md5;
        secret "Eqw4hClGExUWeDkKBX/pBg==";
};
options {
        default-key "rndc-key";
        default-server 127.0.0.1;
        default-port 953;
};

• vim /var/named/chroot/etc/view.conf

 view "SlaveView" { 
        zone "lnh.com" {    #master如何写我们这里也写就可以
             type    slave;    #代表从库
             masters {192.168.56.13; };  #可以写多个主,逗号分隔
             file    "slave.lnh.com.zone";
        };
};

• 修改MASTER的相关配置

# vim /var/named/chroot/etc/view.conf 
"/var/named/chroot/etc/view.conf" 14L, 252C                1,1           All
view "View" {
  zone "lnh.com" {
        type    master;
        file    "lnh.com.zone";
        allow-transfer {
                192.168.56.14;
        };
        notify  yes;
        also-notify {
                192.168.56.14;
        };
  };
};

• 主DNS重载配置

# rndc reload
WARNING: key file (/etc/rndc.key) exists, but using default configuration file (/etc/rndc.conf)
server reload successful
没有报错代表成功

• 从DNS配置

# cd /var && chown -R named.named named/
# /etc/init.d/named start
Starting named:                                            [  OK  ]
# chkconfig named on

• 查看从DNS是否同步成功，对比下结果

# ll /var/named/chroot/etc/
total 44
-rw-r--r-- 1 root  root   388 May  1 04:32 localtime
drwxr-x--- 2 root  named 4096 May 11 07:07 named
-rw-r----- 1 root  named 1122 Aug 17 02:12 named.conf
-rw-r--r-- 1 root  named 2389 May 11 07:07 named.iscdlv.key
-rw-r----- 1 root  named  931 Jun 21  2007 named.rfc1912.zones
-rw-r--r-- 1 root  named  487 Jul 19  2010 named.root.key
drwxr-x--- 3 named named 4096 May  5 09:59 pki
-rw-r--r-- 1 root  root   196 Aug 17 02:13 rndc.conf
-rw-r--r-- 1 root  root    91 Aug 17 02:13 rndc.key
-rw-r--r-- 1 named named  312 Aug 17 02:17 slave.lnh.com.zone
-rw-r--r-- 1 named named  164 Aug 17 02:14 view.conf

 

以上是从DNS的搭建。后续笔记是写智能DNS配置等