架构图
1、本节架构
2、安装bind(在hdss7-11上执行)
yum -y install bind-utils
3、配置/etc/named.conf
13 listen-on port 53 { 10.4.7.11; };
14 listen-on-v6 port 53 { ::1; };
21 allow-query { any; };
22 forwarders { 10.4.7.254; };
36 dnssec-enable no;
37 dnssec-validation no;
4、配置区域配置文件 /etc/named.rfc1912.zones
cat >> /etc/named.rfc1912.zones <<'eof' zone "host.com" IN { type master; file "host.com.zone"; allow-update { 10.4.7.11; }; }; zone "od.com" IN { type master; file "od.com.zone"; allow-update { 10.4.7.11; }; }; > eof
5、配置主配置文件
cat > /var/named/host.com.zone << 'EOF' $ORIGIN host.com. $TTL 600 ; 10 minutes @ IN SOA dns.host.com dnsadmin.host.com. ( 2020092701 ; serial 10800 ; refresh (3 hours) 900 ; retry (15 minutes) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) NS dns.host.com. $TTL 60 ; 1 minute dns A 10.4.7.11 HDSS7-11 A 10.4.7.11 HDSS7-12 A 10.4.7.12 HDSS7-21 A 10.4.7.21 HDSS7-22 A 10.4.7.22 HDSS7-200 A 10.4.7.200 EOF
6、配置区域数据配置文件
cat > /var/named/od.com.zone <<'eof' $ORIGIN od.com. $TTL 600 ; 10 minutes @ IN SOA dns.od.com dnsadmin.od.com. ( 2020092701 ; serial 10800 ; refresh (3 hours) 900 ; retry (15 minutes) 604800 ; expire (1 week) 86400 ; minimum (1 day) ) NS dns.od.com. $TTL 60 ; 1 minute dns A 10.4.7.11 harbor A 10.4.7.200 eof
7、添加权限chown -R named: /var/named/
8、启动检查bind
named-checkconf named-checkzone host.com /var/named/host.com.zone named-checkzone od.com /var/named/od.com.zone systemctl start named systemctl enable named netstat -tulnp | grep 53 dig -t A hdss7-21.host.com @10.4.7.11 +short
9、所有服务器配置指向dns
cat > /etc/resolv.conf <<'eof' search host.com nameserver 10.4.7.11 eof
10、验证dns
ping hdss7-11 ping hdss7-11.host.com
11、Windows dns指向配置