Linux上部署DNS解析服务相对来说比较简单的。安装一个named，然后编辑一下全局配置文件和区域配置文件就可以了。
主要难点都在对DNS服务的了解上。
安装
yum insatll -y named bind
编辑全局配置文件
vim /etc/named.cn//// named.conf//// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS// server as a caching only nameserver (as a localhost DNS resolver only).//// See /usr/share/doc/bind*/sample/ for example named configuration files.//// See the BIND Administrator's Reference Manual (ARM) for details about the// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.htmloptions {// 监听端口listen-on port 53 { any; };listen-on-v6 port 53 { ::1; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";recursing-file "/var/named/data/named.recursing";secroots-file "/var/named/data/named.secroots";//允许那些网络访问该主机的DNS服务allow-query { any; };/*- If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.- If you are building a RECURSIVE (caching) DNS server, you need to enablerecursion.- If your recursive DNS server has a public IP address, you MUST enable accesscontrol to limit queries to your legitimate users. Failing to do so willcause your server to become part of large scale DNS amplificationattacks. Implementing BCP38 within your network would greatlyreduce such attack surface*/recursion yes;dnssec-enable yes;dnssec-validation yes;/* Path to ISC DLV key */bindkeys-file "/etc/named.root.key";managed-keys-directory "/var/named/dynamic";pid-file "/run/named/named.pid";session-keyfile "/run/named/session.key";};logging {channel default_debug {file "data/named.run";severity dynamic;};};// 配置根域主机zone "." IN {type hint;file "named.ca";};//配置我们自己的域zone "example.com" IN {type master;// 域文件file "/etc/named/example.com.named.zone";};include "/etc/named.rfc1912.zones";include "/etc/named.root.key";
创建根域文件
首先导入根域，配置文件来自 ICANN 。
tee /etc/named/name.ca <<- 'EOF'; This file holds the information on root name servers needed to; initialize cache of Internet domain name servers; (e.g. reference this file in the "cache . <file>"; configuration file of BIND domain name servers).;; This file is made available by InterNIC; under anonymous FTP as; file /domain/named.cache; on server FTP.INTERNIC.NET; -OR- RS.INTERNIC.NET;; last update: August 17, 2021; related version of root zone: 2021081701;; FORMERLY NS.INTERNIC.NET;. 3600000 NS A.ROOT-SERVERS.NET.A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4A.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:ba3e::2:30;; FORMERLY NS1.ISI.EDU;. 3600000 NS B.ROOT-SERVERS.NET.B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b;; FORMERLY C.PSI.NET;. 3600000 NS C.ROOT-SERVERS.NET.C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12C.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2::c;; FORMERLY TERP.UMD.EDU;. 3600000 NS D.ROOT-SERVERS.NET.D.ROOT-SERVERS.NET. 3600000 A 199.7.91.13D.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2d::d;; FORMERLY NS.NASA.GOV;. 3600000 NS E.ROOT-SERVERS.NET.E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10E.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:a8::e;; FORMERLY NS.ISC.ORG;. 3600000 NS F.ROOT-SERVERS.NET.F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241F.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:2f::f;; FORMERLY NS.NIC.DDN.MIL;. 3600000 NS G.ROOT-SERVERS.NET.G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4G.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:12::d0d;; FORMERLY AOS.ARL.ARMY.MIL;. 3600000 NS H.ROOT-SERVERS.NET.H.ROOT-SERVERS.NET. 3600000 A 198.97.190.53H.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:1::53;; FORMERLY NIC.NORDU.NET;. 3600000 NS I.ROOT-SERVERS.NET.I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17I.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fe::53;; OPERATED BY VERISIGN, INC.;. 3600000 NS J.ROOT-SERVERS.NET.J.ROOT-SERVERS.NET. 3600000 A 192.58.128.30J.ROOT-SERVERS.NET. 3600000 AAAA 2001:503:c27::2:30;; OPERATED BY RIPE NCC;. 3600000 NS K.ROOT-SERVERS.NET.K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129K.ROOT-SERVERS.NET. 3600000 AAAA 2001:7fd::1;; OPERATED BY ICANN;. 3600000 NS L.ROOT-SERVERS.NET.L.ROOT-SERVERS.NET. 3600000 A 199.7.83.42L.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:9f::42;; OPERATED BY WIDE;. 3600000 NS M.ROOT-SERVERS.NET.M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33M.ROOT-SERVERS.NET. 3600000 AAAA 2001:dc3::35; End of fileEOF
创建自定义域名的配置文件
tee /etc/named/example.com.named.zone <<-'EOF'$TTL 600@ IN SOA dns.example. email.example.com. (2022032801 3H 15M 1W 1D )@ IN NS dns.example.IN MX 5 mx1.example.com.IN TXT "v=spf1 include:spf.example.com -all"www IN A 192.168.10.11bda IN A 192.168.10.12cloud IN A 192.168.10.13dap IN A 192.168.10.14doc IN A 192.168.10.15EOF
| TTL | time to live 生存时间，默认为秒 |
|---|---|
| @ | 当不带任何次级域名，直接访问example.com的时候，会使用@的A记录进行解析。 同时针对该域的一些配置信息也会在这里面。 |
| IN | 表示后面的数据使用的是INTERNET标准 |
| SOA | 此区域的管理信息 |
| dns.example. | 该域的主域名服务器 |
| email.example.com. | 管理员邮件地址（这里的邮件地址中的用.来代替常见的邮件地址的@.） |
| 2022032801 | serial（d. adams）表示配置文件的修改版本，格式是年月日当日修改的次数，每次修改时都应该修改这个数字，要不然所做修改的不会更新到网上的其它DNS服务器的数据库上，即你所做的更新很可能对于不以你你的所配置的DNS服务器数据库上，即你所做的更新很可能对于不以你的所配置的DNS服务器为DNS服务器的客户端来说就不会反映出你的更新，也就对他们来说你更新是没意义的 |
| 3H | refresh，定义以单位（M分，H时，W周，默认是秒即不带单位）的刷新频率，即规定从域名服务器多长时间查 询一个主服务器，以服务器的数据的是最新的 |
| 15M | retry，以30分钟的时间间隔重试，即当从服务器试图在主服务器上查询更新时，而连接失败了，则这个值规定 了从服务器多长时间后重试 |
| 1W | expire，规定从服务器在向主服务器更新失败之后清除记录的时间 |
| 1D | minimum TTL，规定缓冲服务器不能与主服务器联系上的清除记录时间 |
| NS | net server，表示该主机是域名服务器 |
| TXT | 文本记录，一般情况下用来为其他服务提供配置信息 |
| A | address，定义了一条A记录，表示该主机名到IP地址的对应记录 |
| MX | mail exchange，定义一条邮件记录 |
| CNAME | 定义了对应主机的一个别名 |
添加方法
只要在后面追加记录就可以了
记录值 IN 记录类型 主机地址www IN A 192.168.10.11index IN CNAME www.example.com
使用以下命令可以让配置的DNS立即生效
rndc reconfigrndc flush
若有收获，就点个赞吧
0 人点赞
