DNS服务器集群部署
一.部署
主从服务器上安装
yum install bind-chroot
二.配置主DNS:zabbixA139.224.35.152
1.配置vim /etc/named.conf
options {
listen-on port 53 { 139.224.35.152; };
directory \"/var/named\";
dump-file \"/var/named/data/cache_dump.db\";
statistics-file \"/var/named/data/named_stats.txt\";
memstatistics-file \"/var/named/data/named_mem_stats.txt\";
allow-query { 0.0.0.0/0; };
recursion yes;
allow-recursion { 0.0.0.0/0; };
forward first;
forwarders {
114.114.114.114; #当本地解析不到时,转发DNS请求至第三方DNS服务器
8.8.8.8;
};
dnssec-enable no;
dnssec-validation no;
bindkeys-file \"/etc/named.iscdlv.key\";
managed-keys-directory \"/var/named/dynamic\";
pid-file \"/run/named/named.pid\";
session-keyfile \"/run/named/session.key\";
};
zone \".\" IN {
type hint;
file \"named.ca\";
};
zone \"shshcom.com\" IN {
type master; #设置为主DNS服务器模式
file \"/var/named/shshcom.com.zone\"; #该域名的配置文件
allow-transfer { 106.14.69.11; }; 从DNS服务器访问权限
allow-query { any; };
};
include \"/etc/named.rfc1912.zones\";
include \"/etc/named.root.key\";
2.域名的配置文件vim /var/named/shshcom.com.zone
$TTL 1D
@ IN SOA @ shshcom.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS @
A 127.0.0.1
AAAA ::1
center IN A 120.55.163.192
dl IN A 120.55.163.192
im IN A 120.55.163.192
h5 IN A 120.55.163.192 #开始不能有空格,否则dns服务启动报错
3.启动主DNS并加入自启动
systemctl start named
systemctl enable named
三.配置从DNS:zabbixB106.14.69.11
1.配置vim /etc/named.conf
同主服务器的/named.conf,唯不同的配置:
zone \"shshcom.com\" IN {
type slave; #设置为从DNS服务器模式
file \"slaves/shshcom.com.zone\";#不需要创建,直接是从主DNS服务器上同步过来
masters { 139.224.35.152; }; #主DNS服务器
allow-query { any; };
};
2.启动主DNS并加入自启动
systemctl start named
systemctl enable named
四.客户端配置测试
日志维护路径:/var/named/data/named.run