编译安装bind-9.9.5
环境：Development Tools和Server Platform Development
[[email protected] ~]# tar xf bind-9.9.5.tar.gz #解压 [[email protected] ~]# cd bind-9.9.5 #进入目录
应该以普通用户运行，所以创建普通用户
[[email protected] bind-9.9.5]# id named #查看named用户是否存在 id: named: No such user [[email protected] bind-9.9.5]# groupadd -r -g 53 named #创建named组 [[email protected] bind-9.9.5]# useradd -g named -r -u 53 named #创建named用户 [[email protected] bind-9.9.5]# id named #查看named用户信息 uid=53(named) gid=53(named) groups=53(named) 编译安装 [[email protected] bind-9.9.5]# ./configure --prefix=/usr/local/bind9 --sysconfdir=/etc/named/ --enable-threads --disable-chroot --disable-ipv6 [[email protected] bind-9.9.5]# make && make install 选项： --enable-threads #启用多线程功能 --disable-chroot #不启用chroot功能 --disable-ipv6 #不启用ipv6
bind客户端工具：bind-libs,bind-utils在安装目录下bin下
定义环境变量：
[[email protected] bind9]# vim /etc/profile.d/bind.sh export PATH=/usr/local/bind9/bin:/usr/local/bind9/sbin:$PATH [[email protected] bind9]# . /etc/profile.d/bind.sh [[email protected] bind9]# dig -v DiG 9.9.5
导出MAN文档：
[[email protected] named]# vim /etc/man.config MANPATH /usr/local/bind9/share/man
导出头文件
如果基于软件进行二次开发，则需要导出头文件和库文件。但named不需要。
导出库文件
[[email protected] bind9]# ls lib libbind9.a libdns.a libisc.a libisccc.a libisccfg.a liblwres.a 由于都是静态库，所以不用导出，否则需要编辑/etc/ld.so.conf.d/bind9.conf文件写入库目录
配置文件：
[[email protected] ~]# cd /etc/named
[[email protected] named]# vim named.conf
options {
directory "/var/named"; #区域文件所在目录
recursion yes; #是否允许递归
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "127.0.0.zone";
allow-update { none; };
};
更改属主属组
[[email protected] named]# chown root:named named.conf [[email protected] named]# chmod 640 named.conf [[email protected] named]# mkdir /var/named/slaves -pv mkdir: created directory `/var/named‘ mkdir: created directory `/var/named/slaves‘ [[email protected] named]# chown root:named /var/named [[email protected] named]# chown named:named /var/named/slaves/ [[email protected] named]# chmod 750 /var/named [[email protected] named]# chmod 770 /var/named/slaves/
提供ca文件
[[email protected] named]# dig -t NS . @a.root-servers.net > /var/named/named.ca
创建正反向解析文件：
[[email protected] named]# vim localhost.zone $TTL 86400 @ IN SOA localhost. admin.localhost. ( 2015072301 3H 15M 7D 1D ) IN NS localhost. IN A 127.0.0.1 [[email protected] named]# vim 127.0.0.zone $TTL 86400 @ IN SOA localhost. admin.localhost. ( 2015072301 3H 15M 7D 1D ) IN NS localhost. IN PTR localhost.
更改属主属组
[[email protected] named]# chgrp named 127.0.0.zone localhost.zone named.ca [[email protected] named]# chmod 640 127.0.0.zone localhost.zone named.ca [[email protected] named]# ll total 16 -rw-r-----. 1 root named 133 Jul 23 19:50 127.0.0.zone -rw-r-----. 1 root named 129 Jul 23 19:48 localhost.zone -rw-r-----. 1 root named 2177 Jul 23 19:45 named.ca drwxrwx---. 2 named named 4096 Jul 23 19:39 slaves
检查配置文件、区域文件语法错误
[[email protected] named]# named-checkconf /etc/named/named.conf [[email protected] named]# named-checkzone "localhost" /var/named/localhost.zone zone localhost/IN: loaded serial 20150723 OK [[email protected] named]# named-checkzone "0.0.127.in-addr.arpa" /var/named/127.0.0.zone zone 0.0.127.in-addr.arpa/IN: loaded serial 20150723 OK
启动
[[email protected] named]# named -g -u named -c /etc/named/named.conf
添加区域解析库文件
[[email protected] named]# vim /etc/named/named.conf
zone "school.com" IN {
type master;
file "school.com.zone";
allow-transfer {192.168.0.0/24; 127.0.0.1; };
allow-update { none; };
};
[[email protected] named]# vim /var/named/school.com.zone
$TTL 3600
@ IN SOA ns.school.com. admin.school.com. (
2015072301
1H
10M
7D
1D )
IN NS ns
ns IN A 192.168.0.9
www IN A 192.168.0.15
更改属主属组
[[email protected] named]# chown :named school.com.zone [[email protected] named]# chmod 640 school.com.zone
启动
[[email protected] named]# named -u named -c /etc/named/named.conf
[[email protected] named]# ss -tunl
重启后测试
[[email protected] named]# dig -t A www.school.com @192.168.0.9 ; <<>> DiG 9.9.5 <<>> -t A www.school.com @192.168.0.9 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53521 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.school.com.INA ;; ANSWER SECTION:
生成rndc
[[email protected] named]# rndc-confgen -r /dev/urandom > /etc/named/rndc.conf
[[email protected] named]# cat /etc/named/rndc.conf
添加rndc信息
[[email protected] named]# vim /etc/named/named.conf
key "rndc-key" {
algorithm hmac-md5;
secret "tXqZXfssZ1HPhn28T+GhUA==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};
重读配置文件
[[email protected] named]# killall -HUP named [[email protected] named]# rndc reload server reload successful [[email protected] named]# rndc status version: 9.9.5 <id:f9b8a50e> CPUs found: 4 worker threads: 4 UDP listeners per interface: 4 number of zones: 101 debug level: 0 xfers running: 0 xfers deferred: 0 soa queries in progress: 0 query logging is OFF recursive clients: 0/0/1000 tcp clients: 0/100 server is up and running
改属主属组
[[email protected] named]# chmod 440 rndc.conf [[email protected] named]# chgrp named rndc.conf
提供脚本
/etc/rc.d/init.d/functions函数很经典，应该多读
压力测试
bind-9.9.5/contrib/queryperf
编译
./configure
make不用make install
cp queryperf /usr/bin安装成功
建立一个测试文件
格式
ns.school.com A mail.school.com A pop.school.com A
测试
[[email protected] ~]# queryperf -d test.txt -s 192.168.0.9 DNS Query Performance Testing Tool Version: $Id: queryperf.c,v 1.12 2007/09/05 07:36:04 marka Exp $ [Status] Processing input data [Status] Sending queries (beginning with 192.168.0.9) [Status] Testing complete Statistics: Parse input file: once Ended due to: reaching end of file Queries sent: 257664 queries Queries completed: 257664 queries Queries lost: 0 queries Queries delayed(?): 0 queries RTT max: 0.019282 sec RTT min: 0.000038 sec RTT average: 0.000383 sec RTT std deviation: 0.000590 sec RTT out of range: 0 queries Percentage completed: 100.00% Percentage lost: 0.00% Started at: Thu Jul 23 22:13:32 2015 Finished at: Thu Jul 23 22:13:39 2015 Ran for: 6.266114 seconds Queries per second: 41120.222198 qps
时间： 2024-11-09 00:48:13