DNS主从服务器配置实现

时间:2023-03-10 06:21:27
DNS主从服务器配置实现

主服务器-centos7-IP:192.168.184.201

从服务器-centos7-IP:192.168.184.202

客户端-ubuntu1804-IP:192.168.184.150

①客户端网卡配置

 1 network:
2 version: 2
3 renderer: networkd
4 ethernets:
5 ens33:
6 addresses:
7 - 192.168.184.150/24
8 gateway4: 192.168.184.2
9 nameservers:
10 search: [ magedu.com,magedu.org ]
11 addresses: [ 192.168.184.201,192.168.184.202 ]

重启网卡

netplan apply

查看DNS地址生效

cat /etc/resolv.conf
systemd-resolve --status

②主服务器配置

先修改DNS主服务器的主配置文件/etc/named.conf,注释掉以下两行

vim /etc/named.conf
options {
// listen-on port 53 { localhost; };
// allow-query { any; };
需要域名解析就需要在主配置文件上做zone(区域),一般是域解析在放在/etc/named.rfc1912.zones上面
vim /etc/named.rfc1912.zones
zone "magedu.org" IN {
type master;
file "magedu.org.zone";
};

需要创建/var/named/magedu.org.zone该区域文件

vim /var/named/magedu.org.zone
$TTL 1D
@ IN SOA master admin.magedu.org. ( 20201231 1H 10M 3D 12H )
NS master
NS slave
master A 192.168.184.201
slave A 192.168.184.202
www A 192.168.184.202
node1 A 192.168.184.10
db1 A 192.168.184.11

修改区域文件的权限和所属组

[root@localhost named]# ll
total 20
drwxrwx--- 2 named named 23 Jan 1 14:38 data
drwxrwx--- 2 named named 60 Jan 1 22:11 dynamic
-rw-r--r-- 1 root root 153 Jan 1 22:38 magedu.org.zone
-rw-r----- 1 root named 2253 Apr 5 2018 named.ca
-rw-r----- 1 root named 152 Dec 15 2009 named.empty
-rw-r----- 1 root named 152 Jun 21 2007 named.localhost
-rw-r----- 1 root named 168 Dec 15 2009 named.loopback
drwxrwx--- 2 named named 6 Dec 16 00:32 slaves [root@localhost named]# chmod 640 magedu.org.zone
[root@localhost named]# chown .named magedu.org.zone

重启DNS主服务器

systemctl restart named 或者 rndc reload

③从服务器配置

先修改DNS从服务器的主配置文件/etc/named.conf,注释掉以下两行

vim /etc/named.conf
options {
// listen-on port 53 { localhost; };
// allow-query { any; };
需要域名解析就需要在主配置文件上做zone(区域),一般是域解析在放在/etc/named.rfc1912.zones上面
zone "magedu.org" IN {
type slave;
masters {192.168.184.201;};
file "slaves/magedu.org.zone.slave"; 该文件放在/var/named/下面,不需要去创建,同步过来自动生成
};

从服务器开启服务

systemctl start named

配置文件已经同步过来

ll /var/named/slaves/
total 4
-rw-r--r-- 1 named named 405 Jan 1 23:22 magedu.org.zone.slave

④客户端测试

dig www.magedu.org
www.magedu.org. 86400 IN A 192.168.184.201 #我们可以发现从DNS主服务器进行域名解析

把主服务器关闭

systemctl stop named

客户端进行缓存清理,并再次进行域名解析

systemd-resolve --flush-caches
dig www.magedu.org
www.magedu.org. 86400 IN A 192.168.184.202 #我们可以发现从DNS从服务器进行域名解析

⑤主从服务器同步

主服务器的区域文件进行修改

vim /var/named/magedu.org.zone
$TTL 1D
@ IN SOA master admin.magedu.org. ( 20201232 1H 10M 3D 12H ) #此时需要在主服务器上zone文件中修改数据版本序列号,一般是递增
NS master
NS slave
master A 192.168.184.201
slave A 192.168.184.202
www A 192.168.184.202
node1 A 192.168.184.10
db1 A 192.168.184.11
db2 A 192.168.184.12
@ MX 10 mail
mail A 192.168.184.13

主服务器再次重启

systemctl start named

此时从服务器同步成功,时间已经发生改变

ll /var/named/slaves/
total 4
-rw-r--r-- 1 named named 543 Jan 1 23:40 magedu.org.zone.slave