DNS服务配置及拓展（2）

1. 辅助DNS：
   1. 主dns操作：

      vim /etc/named.rfc1912.zones

      

      systemctl restart named

   2. 辅助dns操作：
   3. yum install bind -y            安装服务
   4. vim /etc/named.conf            修改配置文件
   5. options {
   6. listen-on port 53 { any; };
   7. listen-on-v6 port 53 { ::1; };
   8. directory       "/var/named";
   9. dump-file       "/var/named/data/cache_dump.db";
   10. statistics-file "/var/named/data/named_stats.txt";
   11. memstatistics-file "/var/named/data/named_mem_stats.txt";
   12. allow-query     { any; };
   13. dnssec-validation no;            同主机一致

       vim /etc/named.rfc1912.zones

       

       systemctl restart named

2.DNS修改同步：

主dns操作：

vim /etc/named.rfc1912.zones

zone "asd.com" IN {

type master;

file "westos.com.zone";

allow-update { none; };

allow-transfer { 172.25.254.100; };

also-notify { 172.25.254.100; }

};

vim /var/named/westos.com.zone

$TTL 1D

@       IN SOA  dns.westos.com. root.westos.com. (

01      ;serial

1D      ; refresh

1H      ; retry

1W      ; expire

3H )    ; minimum

NS      dns.westos.com.

dns         A       172.25.254.100

www         A         172.25.254.101

systemctl restart named

辅助dns操作：

systemctl stop firewalld.service

3.DNS远程更新

服务器端操作：

setenforce 0

chmod 770 /var/named/

vim /etc/named.rfc1912.zones

zone "asd.com" IN {

type master;

file "westos.com.zone";

allow-update { 172.25.254.200; };

};

发送端操作：

注：当完成> server 172.25.254.100

> update delete www.asd.com

> send

后主机端的/var/named/会出一个westos.com.zone.jnl

当systemctl retsart named 后 该文件会覆盖原本的westos.com.zone，所以建议提前备份

4.DNS远程更新（密钥登录）

主机：

dnssec-keygen -a HMAC-MD5 -b 100 -n HOST westos  （-a 加密类型 -b加密字节 -n 加密用途）

获得公钥和私钥

cp -p /etc/rndc.key /etc/westos.key        复制模版

vim /etc/westos.key                  编写内容

key "westos" {                            加密名称

algorithm hmac-md5;               格式

secret "/pLHdCuATXkKuZNjGQ==";         密码

};

vim /etc/named.conf

vim /etc/named.rfc1912.zones                     修改配置文件

scp Kwestos.+157+64442.* [email protected]:/mnt       远程发送密码给用户以更新dnsderen

systemctl restart named                        重启服务

发送端：

5.DDNS(花生壳)动态DNS获取

yum install dhcp  -y                       安装dhcp

cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example  /etc/dhcp/dhcpd.conf        复制模版

vim /etc/dhcp/dhcpd.conf                  配置文件

6 # option definitions common to all supported networks...

7 option domain-name "westos.com";                                域名

8 option domain-name-servers 172.25.254.100;    dns ip

vim /var/named/westos.com.zone               复原该文件

systemctl restart named

systemctl restart dhcpd                 重启服务

客户端：

更改ip获取方式为dhcp

hostnamectl set-hostname  slave.westos.com     更改主机名（必须属于asd域）

systemctl restart network