搭建互联网DNS构架

author：JevonWei
版权声明：原创作品

---

构建"." DNS、"com" DNS及"danran.com",用户通过"电信运营商"DNS服务器转发到. DNS，然后分派到danran.com DNS上查询www.danran.com,130为120从DNS
拓扑图如下

192.168.198.120主DNS

1. 安装程序包

   yum -y install named
   systemctl start named
   systemctl enable named
   iptables -F
   setenforce 0

2. vim /etc/named.conf

   options {
   listen-on port 53 { localhost; };
   allow-query { any; };

3. vim /etc/named.rfc1912.zones

   zone "danran.com" IN {
   type master;
   file "danran.zone";
   };

4. vim /var/named/danran.zone

   $TTL 1D
   @ IN SOA ns1.danran.com. dnsadmin.danran.cam. (
   0 ; serial
   1D ; refresh
   1H ; retry
   1W ; expire
   3H ) ; minimum
   NS ns1.danran.com.
   ns1 A 192.168.198.120
   www A 192.168.198.150

5. chgrp named /var/named/danran.zone

6. 修改DNS指向的根DNS

   vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

    .            3600000      NS    A.ROOT-SERVERS.NET.
    A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
   

7. systemctl restart named

192.168.198.130 从DNS

1. 安装程序包

   yum -y install bind
   systemctl start named
   systemctl enable named
   iptables -F
   setenforce 0

2. vim /etc/named.conf

   options {
   listen-on port 53 { localhost; };
   allow-query { any; };；
   }

3. vim /etc/named.rfc1912.zones

   从DNS的正向解析文件记录
   zone "danran.com" IN {
   type slave; DNS类型为从属DNS
   master { 192.168.198.120;}; 主DNS为192.168.198.134
   file "slaves/danran.slave"; 从DNS的数据库文件为slaves/danran.slave
   };

4. 修改DNS指向的根DNS

   vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

    .            3600000      NS    A.ROOT-SERVERS.NET.
    A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
   

5. systemctl restart named

6. rndc reload

192.168.198.110 com DNS

1. 安装程序包

   yum -y install bind
   systemctl start named
   systemctl enable named
   iptables -F
   setenforce 0

2. vim /etc/named.conf

   options {
   listen-on port 53 { localhost; };
   allow-query { any; };
   dnssec-enable no；
   dnssec-validation no；
   }

3. vim /etc/named.rfc1912.zones

   zone "com" IN {
   type master;
   file "com.zone";
   };

4. vim /var/named/com.zone

   $TTL 1D
   @ IN SOA ns1.com. dnsadmin.cam. (
   0 ; serial
   1D ; refresh
   1H ; retry
   1W ; expire
   3H ) ; minimum
   NS ns1.com.
   ns1 A 192.168.198.110

    danran  NS      ns2
    ns2     A       192.168.198.120 \子域委派
    danran  NS      ns3
    ns3     A       192.168.198.130
   

5. chgrp named /var/named/com.zone

6. 修改DNS指向的根DNS

   vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

    .            3600000      NS    A.ROOT-SERVERS.NET.
    A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
   

7. systemctl restart named

192.168.198.100 .根 DNS

1. 安装程序包

   yum -y install bind
   systemctl start named
   systemctl enable named
   iptables -F
   setenforce 0

2. vim /etc/named.conf

   options {
   listen-on port 53 { localhost; };
   allow-query { any; };
   dnssec-enable no；
   dnssec-validation no；
   }

3. 将vim /etc/named.conf配置文件中的.DNS的zone类型修改为master

   zone "." IN {
   type master;
   file "root.zone"; . 根文件名修改为root.zone
   };

4. 修改.根文件对应的zone文件

   vim /etc/named.rfc1912.zones
   zone "." IN {
   type master;
   file "root.zone"; . 根文件名修改为root.zone
   };

3.4 二选一

5. vim /var/named/root.zone

   $TTL 1D
   @ IN SOA ns1. dnsadmin (
   0 ; serial
   1D ; refresh
   1H ; retry
   1W ; expire
   3H ) ; minimum
   NS ns1
   ns1 A 192.168.198.100

    com     NS      ns2
    ns2     A       192.168.198.110 \子域委派为com域
   

6. chgrp named /var/named/com.zone

7. systemctl restart named

192.168.198.200 电信 DNS

1. 安装程序包

   yum -y install bind
   systemctl start named
   systemctl enable named
   iptables -F
   setenforce 0

2. vim /etc/named.conf

   options {
   listen-on port 53 { localhost; };
   allow-query { any; };
   dnssec-enable no；
   dnssec-validation no；
   }

3. 修改DNS指向的根DNS

   vim /var/named/named.ca 将DNS的根DNS指向自定义的192.168.198.100

    .            3600000      NS    A.ROOT-SERVERS.NET.
    A.ROOT-SERVERS.NET.      3600000      A     192.168.198.100
   

4. systemctl restart named

192.168.198.10 访问测试

dig www.danran.com @192.168.198.200      

DNS的相关内容点击链接

http://119.23.52.191/dns服务/

创建子域及view

http://119.23.52.191/创建dns子域及view/

搭建转发及从DNS

http://119.23.52.191/主从及转发dns搭建/