Linux运维实战之DNS（bind）服务器的安装与配置

[root@Centos~]#yuminstall-ybind

Loadedplugins:fastestmirror,security

Loadingmirrorspeedsfromcachedhostfile

SettingupInstallProcess

ResolvingDependencies

-->Runningtransactioncheck

--->Packagebind.x86_6432:9.8.2-0.17.rc1.el6willbeinstalled

-->ProcessingDependency:portreserveforpackage:32:bind-9.8.2-0.17.rc1.el6.x86_64

-->Runningtransactioncheck

--->Packageportreserve.x86_640:0.0.4-9.el6willbeinstalled

-->FinishedDependencyResolution

DependenciesResolved

==========================================================================================

PackageArchVersionRepositorySize

==========================================================================================

Installing:

bindx86_6432:9.8.2-0.17.rc1.el6cdrom4.0M

Installingfordependencies:

portreservex86_640.0.4-9.el6cdrom23k

TransactionSummary

==========================================================================================

Install2Package(s)

Totaldownloadsize:4.0M

Installedsize:7.3M

DownloadingPackages:

------------------------------------------------------------------------------------------

Total34MB/s|4.0MB00:00

Runningrpm_check_debug

RunningTransactionTest

TransactionTestSucceeded

RunningTransaction

Installing:portreserve-0.0.4-9.el6.x86_641/2

Installing:32:bind-9.8.2-0.17.rc1.el6.x86_642/2

Verifying:32:bind-9.8.2-0.17.rc1.el6.x86_641/2

Verifying:portreserve-0.0.4-9.el6.x86_642/2

Installed:

bind.x86_6432:9.8.2-0.17.rc1.el6

DependencyInstalled:

portreserve.x86_640:0.0.4-9.el6

Complete!

[root@CentOS02~]#cat/etc/named.conf

//C/C++风格的语法，注释用//或/**/

//named.conf

//

//ProvidedbyRedHatbindpackagetoconfiguretheISCBINDnamed(8)DNS

//serverasacachingonlynameserver(asalocalhostDNSresolveronly).

//

//See/usr/share/doc/bind*/sample/forexamplenamedconfigurationfiles.

//

options{

	listen-onport53{127.0.0.1;};

	listen-on-v6port53{::1;};

	directory	"/var/named";//指明存放区域文件根目录，下面给出的相对路径都是相对此目录

	dump-file	"/var/named/data/cache_dump.db";

statistics-file"/var/named/data/named_stats.txt";

memstatistics-file"/var/named/data/named_mem_stats.txt";

	allow-query{localhost;};//允许哪些主机查询

	recursionyes;//是否允许递归查询

	dnssec-enableyes;

	dnssec-validationyes;

	dnssec-lookasideauto;

	/*PathtoISCDLVkey*/

	bindkeys-file"/etc/named.iscdlv.key";

	managed-keys-directory"/var/named/dynamic";

};

logging{//定义日志

channeldefault_debug{

file"data/named.run";

severitydynamic;

};

};

zone"."IN{//定义根区域文件名称

	typehint;

	file"named.ca";//使用的是相对路径，默认存放在/var/named/named.ca

};

//把另外两个文件也包含进来，作为主配置文件的一部分

include"/etc/named.rfc1912.zones";//定义区域配置文件

include"/etc/named.root.key";//根区域的key文件，与事务签名相关

zone"区域名称"IN{
typemaster|slave|forward;//注意每个语句要以分号结尾
file"ZONE_NAME.zone";
};//注意要以分号结尾

$TTL600;

name[TTL]INRR_Typevalue

（1）一个FQDN可对应同多个IP；(负载均衡)

（2）多个FQDN可对应一个IP：(一台主机有多个名称，且可以用CNAME定义)

rndc[-baddress][-cconfig][-sserver][-pport]

[-kkey-file][-ykey][-V]command

commandisoneofthefollowing:

reloadReloadconfigurationfileandzones.#重新加载配置文件和区域文件

reconfigReloadconfigurationfileandnewzonesonly.#重新加载配置文件和新的区域文件

freezeSuspendupdatestoalldynamiczones.

statsWriteserverstatisticstothestatisticsfile.#将服务器统计信息写入统计文件中

stopSavependingupdatestomasterfilesandstoptheserver.

haltStoptheserverwithoutsavingpendingupdates.

flushFlushesalloftheserver'scaches.#清空DNS缓存

statusDisplaystatusoftheserver.#显示bind服务器的工作状态

zone“区域名称”IN{

typeslave;#区域类型为辅助

file"slaves/ZONE_NAME.zone";#区域文件必须保存在slaves目录下，放在其他目录没有权限

masters{#指出主服务器是谁，注意：花括号前后要有一个空格

MASTER_DNS_IP;

MASTER_DNS2_IP;

};

};