bind主从搭建
安装主节点bind
yum -y install gcc gcc-c++ openssl-devel openssh-clients wget net-tools pcre-devel make lrzsz unzip zip xz ntpdate lsof python-setuptools python-devel telnet vim tree wget ftp://ftp.isc.org/isc/bind9/9.6.1/bind-9.6.1.tar.gz ./configure --prefix=/data/server/bind --enable-threads --enable-largefile Make && make install /data/server/bind/sbin/rndc-confgen > /data/server/bind/etc/rndc.conf cd /data/server/bind/etc tail -10 rndc.conf | head -9 | sed s/#\ //g > named.conf
vim /data/server/bind/etc/named.conf
key "rndc-key" { algorithm hmac-md5; secret "/HtAntfnCIY55pG8+RM7aQ=="; }; controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; }; }; options { directory "/data/server/bind/etc"; pid-file "/data/server/bind/var/run/named.pid"; allow-query { any; }; version "unsupported on this platform"; // 隐藏版本信息 recursion yes; // 允许递归 allow-transfer { 10.9.180.152; }; // 允许从节点同步zone also-notify { 10.9.180.152; }; // 当新的zone文件被调入系统,通知从节点 managed-keys-directory "/data/server/bind/var/run/named"; }; logging{ channel named.log { file "/data/logs/bind/named.log" versions 5 size 20m; severity info; print-time yes; print-severity yes; print-category yes; }; category default { named.log; }; category lame-servers { null; }; }; zone "." IN { type hint; file "/data/server/bind/etc/named.root"; }; include "/data/server/bind/etc/named.dns.missfresh.zones"; include "/data/server/bind/etc/named.root.key";
cat /data/server/bind/etc/named.dns.missfresh.zones
zone "dns.missfresh.net" IN { type master; file "/data/server/bind/etc/named.dns.missfresh.net"; allow-update { none; }; notify yes; }; zone "10.in-addr.arpa" IN { type master; file "/data/server/bind/etc/named.dns.missfresh.local"; allow-update { none; }; }; zone "dns.missfresh.cn" IN { type master; file "/data/server/bind/etc/named.dns.missfresh.cn"; allow-update { none; }; notify yes; }; zone "2.10.in-addr.arpa" IN { type master; file "/data/server/bind/etc/named.dns.missfresh.cn.local"; allow-update { none; }; };
cat /data/server/bind/etc/named.dns.missfresh.net
$TTL 1D @ IN SOA ns.dns.missfresh.net. root.dns.missfresh.net. ( 2017040503 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum IN NS ns.dns.missfresh.net. ns IN A 10.9.183.92 idc01-sre-dns-00 IN A 10.9.183.92 idc01-sre-dns-01 IN A 10.9.180.152 idc01-as-web-00 IN A 10.10.101.246 idc01-as-web-01 IN A 10.10.112.46
cat /data/server/bind/etc/named.dns.missfresh.local
$TTL 1D @ IN SOA ns.dns.missfresh.net. root.dns.missfresh.net. ( 2017040503 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum IN NS ns.dns.missfresh.net. 92.183.9 IN PTR idc01-sre-dns-00.dns.missfresh.net. 152.180.9 IN PTR idc01-sre-dns-01.dns.missfresh.net. 246.101.10 IN PTR idc01-as-web-00.dns.missfresh.net. 46.112.10 IN PTR idc01-as-web-01.dns.missfresh.net.
测试bind启动：
/data/server/bind/sbin/named -gc /data/server/bind/etc/named.conf
启动bind服务：
/data/server/bind/sbin/named -c /data/server/bind/etc/named.conf
注意一：每次更改完master节点解析配置时，2017040503 ; serial +1 注意二：需配置search
cat /etc/resolv.conf
options timeout:2
search dns.missfresh.net
从节点配置
vim /data/server/bind/etc/named.conf
key "rndc-key" { algorithm hmac-md5; secret "/HtAntfnCIY55pG8+RM7aQ=="; }; controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "rndc-key"; }; }; options { directory "/data/server/bind/etc"; pid-file "/data/server/bind/var/run/named.pid"; allow-query { any; }; version "unsupported on this platform"; // 隐藏版本信息 recursion yes; // 允许递归 managed-keys-directory "/data/server/bind/var/run/named"; }; logging{ channel named.log { file "/data/logs/bind/named.log" versions 5 size 20m; severity info; print-time yes; print-severity yes; print-category yes; }; category default { named.log; }; category lame-servers { null; }; }; zone "." IN { type hint; file "/data/server/bind/etc/named.root"; }; include "/data/server/bind/etc/named.dns.missfresh.zones"; include "/data/server/bind/etc/named.root.key";
vim /data/server/bind/etc/named.dns.missfresh.zones
zone "dns.missfresh.net" IN { type slave; file "/data/server/bind/etc/named.dns.missfresh.net"; masters { 10.9.183.92; }; }; zone "10.in-addr.arpa" IN { type slave; file "/data/server/bind/etc/named.dns.missfresh.local"; masters { 10.9.183.92; }; }; zone "dns.missfresh.cn" IN { type slave; file "/data/server/bind/etc/named.dns.missfresh.cn"; masters { 10.9.183.92; }; }; zone "2.10.in-addr.arpa" IN { type slave; file "/data/server/bind/etc/named.dns.missfresh.cn.local"; masters { 10.9.183.92; }; };
配置named以服务启动:
vim /etc/init.d/named
#!/bin/bash # # named This shell script takes care of starting and stopping # named (BIND DNS server). # # chkconfig: - 13 87 # description: named (BIND) is a Domain Name Server (DNS) \ # that is used to resolve host names to IP addresses. # Source function library. . /etc/rc.d/init.d/functions # Source networking configuration. [ -r /etc/sysconfig/network ] && . /etc/sysconfig/network named=named ROOTDIR="/data/server/bind" CHKCONF="$ROOTDIR/sbin/named-checkconf" CHKZONE="$ROOTDIR/sbin/named-checkzone" named_conf="$ROOTDIR/etc/named.conf" RNDC="$ROOTDIR/sbin/rndc" start() { echo -n $"Starting $named: " if [ -n "`/sbin/pidof -o %PPID $named`" ]; then echo -n $"$named: already running" failure echo return 1 fi conf_ok=0; if [ -x $CHKCONF ] && [ -x $CHKZONE ] && $CHKCONF ${named_conf} >/dev/null 2>&1; then conf_ok=1; else RETVAL=$?; fi if [ $conf_ok -eq 1 ]; then daemon $ROOTDIR/sbin/$named -c $named_conf RETVAL=$?; [ $RETVAL -eq 0 ] && touch /var/lock/subsys/named echo return $RETVAL fi } stop() { echo -n $"Stopping $named: " $RNDC stop >/dev/null 2>&1 RETVAL=$? [ "$RETVAL" -eq 0 ] || killproc "$named" -TERM >/dev/null 2>&1 if [ $RETVAL -eq 0 ]; then rm -f /var/lock/subsys/named &> /dev/null rm -f $ROOTDIR/var/run/named.pid &> /dev/null fi; if [ $RETVAL -eq 0 ]; then success else failure fi; echo return $RETVAL } restart() { stop sleep 2 start } status() { $RNDC status return $? } reload() { echo -n $"Reloading $named: " p=`/sbin/pidof -o %PPID $named` RETVAL=$? if [ "$RETVAL" -eq 0 ]; then $RNDC reload >/dev/null 2>&1 || /bin/kill -HUP $p; RETVAL=$? fi [ "$RETVAL" -eq 0 ] && success $"$named reload" || failure $"$named reload" echo return $RETVAL } checkconfig() { if [ -x $CHKCONF ] && [ -x $CHKZONE ] && $CHKCONF ${named_conf} ; then return 0; else return 1; fi } case "$1" in start) start ;; stop) stop ;; status) status ;; restart) restart ;; reload) reload ;; checkconfig|configtest|check|test) checkconfig ;; *) echo $"Usage: $0 {start|stop|status|restart|condrestart|reload|configtest|probe}" exit 2 ;; esac exit $?
