CentOS7配置域名解析服务DNS

吴荻發表於 2019-11-3 21:45:00

<h1>前言</h1>
DNS（Domain Name System），域名系统，提供由域名解析到ip的服务，是互联网的重要基础服务。 
下面我们就来在CentOS7上使用bind配置一下DNS服务器
<hr>
 
<h1>一、安装配置DNS</h1>
<h2>（一）安装域名服务程序</h2>
<pre><code class="language-bash">yum install bind-chroot -y</code></pre>
 
<img id="img1572779484567" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442700-2081756402.png" alt="" width="468" height="488">
 
<h2>（二）修改相关配置文件</h2>
 
域名解析服务Bind的程序名称叫做named，服务程序的配置文件如下：
<table class="Table" style="background: rgba(255, 255, 255, 1); border-collapse: collapse; border: none; width: 17cm" cellspacing="0">
<tbody>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)">主程序</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 396.3pt">/usr/sbin/named</td>
</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)">主配置文件</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 396.3pt">/etc/named.conf</td>
</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)">区域配置文件</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 396.3pt">/etc/named.rfc1912.zones</td>
</tr>
</tbody>
</table>
修改主配置文件
# vim /etc/named.conf
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS 
// server as a caching only nameserver (as a localhost DNS resolver only). 
// See /usr/share/doc/bind*/sample/ for example named configuration files. 
options { 
//将下行中的127.0.0.1修改为any，代表允许监听任何IP地址。 
listen-on port 53 { 127.0.0.1; }; 
listen-on-v6 port 53 { ::1; }; 
directory "/var/named"; 
dump-file "/var/named/data/cache_dump.db"; 
statistics-file "/var/named/data/named_stats.txt"; 
memstatistics-file "/var/named/data/named_mem_stats.txt"; 
//将下行中的localhost修改为any，代表允许任何主机查询。 
allow-query { localhost; }; 
recursion yes; 
dnssec-enable yes; 
dnssec-validation yes; 
dnssec-lookaside auto; 
/* Path to ISC DLV key */ 
bindkeys-file "/etc/named.iscdlv.key"; 
managed-keys-directory "/var/named/dynamic"; 
pid-file "/run/named/named.pid"; 
session-keyfile "/run/named/session.key"; 
}; 
logging { 
channel default_debug { 
file "data/named.run"; 
severity dynamic; 
}; 
}; 
 
//此文件内定义了全球13台根DNS服务器的IP地址 
zone "." IN { 
type hint; 
file "named.ca"; 
}; 
 
//此文件保存着正向与反向解析的区域信息，非常的重要。 
include "/etc/named.rfc1912.zones"; 
include "/etc/named.root.key"; 
 
修改后的文件： 
<img id="img1572782261286" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442705-59891060.png" alt="" width="466" height="496">
<h1>二、解析实验</h1>
<h2>（一）将系统的DNS地址修改为本机</h2>

<img id="img1572783422373" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442683-597347828.png" alt="" width="459" height="508">
<h2>（二）正向地址解析实验</h2>

 
<h3>1.修改区域配置文件</h3>

正向解析的作用是根据主机名(域名)查找到对应的IP地址，区域文件中已有一些默认信息，可不必理会，直接在下面追加即可： 
# vim /etc/named.rfc1912.zones 
zone "centos.com" IN { 
type master; 
file "centos.com.zone"; 
allow-update {none;}; 
 
}<img id="img1572784667882" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442702-1506759370.png" alt="" width="446" height="440">
<h3>2.配置解析数据</h3>
可以直接复制正向解析模板文件:”/var/named/named.localhost“，填写信息后即可直接使用。
切换工作目录到bind(named)数据目录：
# cd /var/named/
查看区域数据文件的权限：

# ls -al named.localhost 
-rw-r-----. 1 root named 152 Jun 21 2007 named.localhost 
执行cp命令时加入-a，代表连通复制原来文件的属性、所有者、组等信息： 
# cp -a named.localhost centos.com.zone 
编辑centos.com域名的区域数据文件： 
# vim centos.com.zone 
如图: 
<img id="img1572785148885" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442648-193834477.png" alt="" width="431" height="102"> 
 
<table class="Table" style="background: rgba(255, 255, 255, 1); border-collapse: collapse; border: none; width: 484.05pt" cellspacing="0">
<tbody>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)">$TTL 1D</td>
<td style="background-color: rgba(249, 249, 249, 1)">#生存周期为1天</td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1); width: 105.75pt"> </td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)">@</td>
<td style="background-color: rgba(255, 255, 255, 1)">IN SOA</td>
<td style="background-color: rgba(255, 255, 255, 1)">centos.com.</td>
<td style="background-color: rgba(255, 255, 255, 1)">root.centos.com.</td>
<td style="background-color: rgba(255, 255, 255, 1)">(</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 105.75pt"> </td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)">#授权信息开始:</td>
<td style="background-color: rgba(249, 249, 249, 1)">#DNS区域的地址</td>
<td style="background-color: rgba(249, 249, 249, 1)" colspan="2">#域名管理员的邮箱(不要用@符号)</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 105.75pt"> </td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)">0;serial</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 105.75pt">#更新序列号</td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)">1D;refresh</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 105.75pt">#更新时间</td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)">1H;retry</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 105.75pt">#重试延时</td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)">1W;expire</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 105.75pt">#失效时间</td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)"> </td>
<td style="background-color: rgba(255, 255, 255, 1)">3H;minimum</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 105.75pt">#无效解析记录的缓存时间</td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)">NS</td>
<td style="background-color: rgba(249, 249, 249, 1)" colspan="2">ns.centos.com.</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 171.45pt" colspan="2">#域名服务器记录</td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)">ns</td>
<td style="background-color: rgba(255, 255, 255, 1)">IN A</td>
<td style="background-color: rgba(255, 255, 255, 1)" colspan="2">192.168.20.100</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 171.45pt" colspan="2">#地址记录(ns.centos.com.)</td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)"> </td>
<td style="background-color: rgba(249, 249, 249, 1)">IN MX 10</td>
<td style="background-color: rgba(249, 249, 249, 1)" colspan="2">mail.centos.com.</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 171.45pt" colspan="2">#邮箱交换记录</td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)">mail</td>
<td style="background-color: rgba(255, 255, 255, 1)">IN A</td>
<td style="background-color: rgba(255, 255, 255, 1)" colspan="2">192.168.20.100</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 171.45pt" colspan="2">#地址记录(mail.centos.com.)</td>

</tr>
<tr>
<td style="background-color: rgba(249, 249, 249, 1)">www</td>
<td style="background-color: rgba(249, 249, 249, 1)">IN A</td>
<td style="background-color: rgba(249, 249, 249, 1)" colspan="2">192.168.20.100</td>
<td style="background-color: rgba(249, 249, 249, 1); width: 171.45pt" colspan="2">#地址记录(www.centos.com.)</td>

</tr>
<tr>
<td style="background-color: rgba(255, 255, 255, 1)">bbs</td>
<td style="background-color: rgba(255, 255, 255, 1)">IN A</td>
<td style="background-color: rgba(255, 255, 255, 1)" colspan="2">192.168.20.100</td>
<td style="background-color: rgba(255, 255, 255, 1); width: 171.45pt" colspan="2">#地址记录(bbs.centos.com.)</td>

</tr>

</tbody>

</table>

 
如图： 
<img id="img1572786456299" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442651-2040116747.png" alt=""> 
重启named服务让配置文件立即生效: 
# systemctl restart named<img id="img1572788621763" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442532-1510017199.png" alt="" width="465" height="19">
<h3>3.检验解析结果</h3>

nslookup命令用于检测能否从网络DNS服务器中查询到域名与IP地址的解析记录，检测named服务的解析能否成功。 
此为查询DNS服务器的信息： 
# nslookup 
> www.centos.com 
Server: 127.0.0.1 
Address: 127.0.0.1#53 
顺利的将域名的对应IP地址解析出来了： 
Name: www.centos.com 
Address: 192.168.10.10 
> bbs.centos.com 
<img id="img1572788527300" src="https://img2018.cnblogs.com/other/1835658/201911/1835658-20191103214442562-2024777637.png" alt="" width="384" height="123"> 
来源：https://www.cnblogs.com/arisskz6/p/11789342.html

頁: [1]

琼殿技术论坛's Archiver

CentOS7配置域名解析服务DNS