创建DNS子域及view

时间：2023-03-09 14:43:48
创建DNS子域及view

author：JevonWei

版权声明：原创作品

子域

子域同父域在同一个服务器上

新建子域jevon.danran.com

  1. vim /etc/named.rfc1912.zones

    zone "jevon.danran.com" IN {

    type master;

    file "jevon.danran.zone";

    allow-update { none; };

    };

  2. 编辑jevon.danran.com域的数据库文件

    1. 编辑正向解析文件

      cp -p /var/named/danran.zone /var/named/jevon.danran.zone \带权限复制数据库文件

      vim /var/named/jevon.danran.zone

      $TTL 1D

      @ IN SOA ns1.jevon.danaran.com. dnsadmin.jevon.danran.com. (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1.jevon.danran.com.

      NS ns2

       ns1     A       192.168.198.134
      
 ns2     A       192.168.198.11

 websrv  A       192.168.198.51
      
 ftpsrv  A       192.168.198.52
      
 www     CNAME   websrv

    2. 编辑反向解析文件

      cp -p /var/named/IP.danran.zone /var/named/IP.jevon.danran.zone

      vim /var/named/IP.jevon.danran.zone

      $TTL 1D

      @ IN SOA ns1.jevon.danran.com. admin.jevon.danran.com. (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS @

               A       192.168.198.134

 134     PTR     ns1.jevon.danran.com.
      
 131     PTR     ns2.jevon.danran.com.

 51      PTR     websrv.jevon.danran.com.
      
 52      PTR     ftpsrv.jevon.danran.com.

  3. 加载配置文件

    rndc reload

  4. 访问测试

    dig www.jevon.danran.com @192.168.198.134

子域同父域不在同一台服务器上

新建子域zijie.danran.com

  • 在主DNS上

    1. vim /etc/named.conf

      options {

      listen-on port 53 { localhost; }; \ 允许主机上的所有IP监听53号端口

      allow-query { any; }; \允许所有主机查询此DNS服务器

      dnssec-enable no; \与安全相关，设置为no

      dnssec-validation no; \与安全相关，设置为no

    2. vim /var/named/danran.zone

      $TTL 1D

      @ IN SOA ns1.danran.com. dnsadmin.danran.com. (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1.danran.com.

      zijie NS ns3

      ns3 A 192.168.198.11

      ns1 A 192.168.198.134

      dan A 192.168.198.40

      websrv A 192.168.198.51

      ftpsrv A 192.168.198.52

      www CNAME websrv

创建DNS子域及view

3. rndc reload

  • 子域服务端

    1. vim /etc/named.rfc1912.zones

      zone "zijie.danran.com" IN {

      type master;

      file "zijie.danran.zone";

      };

    2. vim /var/named/zijie.danran.zone

      @ IN SOA ns1.zijie.danran.com. dnsadmin (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1

      ns1 A 192.168.198.11

      dan A 192.168.198.140

      websrv A 192.168.198.151

      ftpsrv A 192.168.198.152

      www CNAME websrv

    3. vim /var/named/zijie.IP.danran.zone

      $TTL 1D

      @ IN SOA ns1 admin (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS @

           A       192.168.198.11

      11 PTR ns1

      150 PTR websrv

      151 PTR websrv

      152 PTR ftpsrv

      110 PTR test.com

    4. rndc reload //加载配置文件

    5. 客户端访问测试

      dig www.zijie.danran.com @192.168.198.134

view

从不同源地址发出的请求，返回不同的查询结果

  • 主DNS服务器

    1. 创建不同地区的数据库

      vim /var/named/danran.zone.bj

      $TTL 1D

      @ IN SOA ns1 dnsadmin (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1

       ns1     A       192.168.198.134

 websrv  A       192.168.198.51
      
 www     CNAME   websrv

      vim /var/named/danran.zone.bj

      $TTL 1D

      @ IN SOA ns1 dnsadmin.danran.com. (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1.danran.com.

       ns1     A       192.168.198.134
      
 websrv  A       192.168.198.251
      
 www     CNAME   websrv

      vim /var/named/danran.zone

      @ IN SOA ns1 dnsadmin (

      0 ; serial

      1D ; refresh

      1H ; retry

      1W ; expire

      3H ) ; minimum

      NS ns1

      ns1 A 192.168.198.134

      websrv A 192.168.198.60

      www CNAME websrv

    2. 编辑配置文件

      vim /etc/named.conf

      acl beijing {

      192.168.198.11;

      192.168.10.0/24;

      }; \beijing的IP访问

      acl zhengzhou {192.168.198.131;};\zhengzhou的IP访问

      acl other {any;};

       options {
      
     listen-on port 53 { any; };
      
     allow-query     { any; };
      
 view beijingview  {
      
     match-clients {beijing;}; \\同acl beijing {192.168.198.11;};中的北京一致
      
     include "/etc/named.beijingview.zones";
      
 };

 view zhengzhouview  {
      
     match-clients {zhengzhou;}; \\同acl zhengzhou {192.168.198.131;};中的zhengzhou一致
      
     include "/etc/named.zhengzhou.zones";
      
 };

 view otherview {
      
     match {other;};  \\acl other {any;};的客户端
      
     include "/etc/named.rfc1912.zones";
      
 };

    3. vim /etc/named.rfc1912.zones

      zone "." IN {

      type hint

      file "named.ca";

      };

      zone "danran.com" IN {

      type master;

      file "danran.zone";

      };

    4. cat /etc/named.beijingview.zones \编辑beijing地区的区域配置文件，同/etc/named.conf记录一致

      zone "danran.com" IN {

      type master;

      file "danran.zone.bj";

      };

    5. vim /etc/named.zhengzhouview.zones\编辑zhengzhou的区域配置文件

      zone "danran.com" IN {

      type master;

      file "danran.zone.zz";

      };

    6. rndc reload

DNS的相关知识请点击链接

http://119.23.52.191/dns服务/

相关文章