公司使用BIND9 作为内部DNS服务器用于日常内外网的域名解析，后期我们也会打算在外网部署DNS服务器用于解析外网服务器的内部域名，为后期自动化运维做好准备。所以对DNS的监控很有必要。
- 监控原理描述
监控BIND主要通过rndc这个工具来监控，不同版本的BIND，使用rndc显示的信息会有所不同。
[[email protected] ~]# whereis rndc rndc: /usr/sbin/rndc /etc/rndc.conf /etc/rndc.key /usr/share/man/man8/rndc.8.gz [[email protected] ~]# whatis rndc rndc (8) - name server control utility rndc-confgen (8) - rndc key generation tool rndc.conf [rndc] (5) - rndc configuration file
CentOS5系列默认的BIND版本是9.3，CentOS6系列默认的BIND版本是9.8
[[email protected] ~]# cat /etc/issue.net CentOS release 5.10 (Final) Kernel \r on an \m [[email protected] ~]# named -v BIND 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6 [[email protected] ~]# rndc stats [[email protected] ~]# cat /var/named/chroot/var/named/data/named_stats.txt +++ Statistics Dump +++ (1419998880) success 59887 referral 0 nxrrset 7457 nxdomain 8143 recursion 36479 failure 2358 --- Statistics Dump --- (1419998880)
[[email protected] ~]# cat /etc/issue.net CentOS release 6.4 (Final) Kernel \r on an \m [[email protected] ~]# named -v BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 [[email protected] ~]# rndc status version: 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6_6.1 CPUs found: 2 worker threads: 2 number of zones: 19 debug level: 0 xfers running: 0 xfers deferred: 0 soa queries in progress: 0 query logging is OFF recursive clients: 0/0/1000 tcp clients: 0/100 server is up and running [[email protected] ~]# rndc stats [[email protected] ~]# cat /var/named/data/named_stats.txt +++ Statistics Dump +++ (1419998423) ++ Incoming Requests ++ ++ Incoming Queries ++ ++ Outgoing Queries ++ [View: default] 20 A 12 NS 21 AAAA 14 DNSKEY [View: _bind] ++ Name Server Statistics ++ ++ Zone Maintenance Statistics ++ ++ Resolver Statistics ++ [Common] [View: default] 37 IPv4 queries sent 30 IPv6 queries sent 24 IPv4 responses received 36 query retries 13 query timeouts 12 IPv4 NS address fetches 15 IPv6 NS address fetches 3 IPv4 NS address fetch failed 2 IPv6 NS address fetch failed 4 DNSSEC validation attempted 4 DNSSEC validation succeeded 10 queries with RTT 10-100ms 14 queries with RTT 100-500ms [View: _bind] ++ Cache DB RRsets ++ [View: default] 49 A 11 NS 29 AAAA 8 DS 17 RRSIG 2 DNSKEY [View: _bind (Cache: _bind)] ++ Socket I/O Statistics ++ 38 UDP/IPv4 sockets opened 31 UDP/IPv6 sockets opened 2 TCP/IPv4 sockets opened 2 TCP/IPv6 sockets opened 37 UDP/IPv4 sockets closed 30 UDP/IPv6 sockets closed 11 TCP/IPv4 sockets closed 30 UDP/IPv6 socket connect failures 37 UDP/IPv4 connections established 12 TCP/IPv4 connections accepted 30 UDP/IPv6 send errors ++ Per Zone Query Statistics ++ --- Statistics Dump --- (1419998423)
2.
参考文章
http://dl528888.blog.51cto.com/2382721/1341799
https://www.netmess.org/monitoring-bind9-dns-server-with-zabbix/
时间： 2024-10-01 14:08:04