linux DNS高速緩存

配置名稱伺服器(本機ip：172.25.254.117)

1 安裝 bind 軟體包

2 編輯 /etc/named.conf

listen-on port  { any; };     ##開啟端口
    allow-query { any; };           ##允許通路
    forwarders { ; };     ##如果伺服器沒有這個位址就去通路250
           

3 啟動并啟用 DNS 伺服器

systemctl start named
 systemctl enable named
 firewall-cmd --permanent --add-server=dns
 firewall-cmd --reload
 firewall-cmd --list-all
 netstat -antlupe|grep 
           

4配置其他兩台機器dns

vim /etc/resolve.conf
    nameserver 
• 進行測試
– dig www.baidu.com
           

DNS正向解析

vim /etc/named.conf
    forwarders { ; };     ##删除這一行自己搭建一個DNS
vim /etc/named.rfc1912.zones
    zone "westos.com" IN {
         type master;
         file "westos.com.zone";
         allow-update { none; };
cd /var/named/
cp -p named.localhost westos.com.zone
vim westos.com.zone
   $TTL D
   @       IN SOA   westos.com.zone. root.westos.com. (    ##@如果後面不加. 自動補齊westos.com
                                                  ; serial
                                           D      ; refresh
                                           H      ; retry
                                           W      ; expire
                                           H )    ; minimum
           NS      dns.westos.com.
   dns     A       
  www     A       
systemctl restart named
           

測試：dig www.westos.com

@@@如果想讓DNS伺服器實作輪詢：

vim westos.com.zone

10 www CNAME sjw.westos.com.

11 sjw A 172.25.254.111

12 sjw A 172.25.254.222

systemctl restart named

DNS反向解析

vim /etc/named.rfc1912.zones 
  zone "254.25.172.in-addr.arpa" IN {
           type master;
           file "westos.com.ptr";
           allow-update { none; };
  };
cp -p named.loopback westos.com.ptr
vim westos.com.ptr

   $TTL D
   @       IN SOA  dns.westos.com. root.westos.com. (
                                                  ; serial
                                           D      ; refresh
                                           H      ; retry
                                           W      ; expire
                                           H )    ; minimum
           NS      dns.westos.com.
   dns     A       
       PTR     www.westos.com.
       PTR     sjw.westos.com.
systemctl restart named
           

測試：dig -x 172.25.254.111

dig -x 172.25.254.222

雙向解析

cp -p westos.com.zone westos.com.inter
vim westos.com.inter 
    %s///g
cp /etc/named.rfc1912.zones /etc/named.rfc1912.zones.inter -p
vim named.rfc1912.zones.inter 
      zone "westos.com" IN {
              type master;
              file "westos.com.inter";
              allow-update { none; };
       };
vim named.conf 
  #zone "." IN {
  #       type hint;
  #       file "named.ca";
  #};
  #
  #include "/etc/named.rfc1912.zones";
  #include "/etc/named.root.key";
  #
  view localnet{
          match-clients {; };   ##這裡填的是localhost
          zone "." IN{
          type hint;
          file "named.ca";
          };
  include "/etc/named.rfc1912.zones.inter";
  };
  
  view internet{
           match-clients {any; };
           zone "." IN{
           type hint;
           file "named.ca";
           };
   include "/etc/named.rfc1912.zones";
   };


vim /etc/resolv.conf 
nameserver 
           

測試：

在内網和外網測試dig www.westos.com