zoukankan      html  css  js  c++  java
  • ORALCE RAC之DNS设定

    1.安装DNS包

    yum -y install bind

    2.配置

    设定/etc/named.conf, 只更改颜色标示部分

    cat /etc/named.conf |grep -v ^#|grep -v ^$|grep -v ^//
    options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory     "/var/named";
        dump-file     "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file    "/var/named/data/named.secroots";
        recursing-file    "/var/named/data/named.recursing";
        allow-query     { any; };
    
        recursion yes;
        dnssec-enable yes;
        dnssec-validation yes;
        managed-keys-directory "/var/named/dynamic";
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
        /* https://fedoraproject.org/wiki/Changes/CryptoPolicy */
        include "/etc/crypto-policies/back-ends/bind.config";
    };
    logging {
            channel default_debug {
                    file "data/named.run";
                    severity dynamic;
            };
    };
    zone "." IN {
        type hint;
        file "named.ca";
    };
    include "/etc/named.rfc1912.zones";
    include "/etc/named.root.key";

    2.设定区域解析定向文件,我这里一个域 有三个网段,所以对不同的网段指定了不同的解析文件,蓝色标识的是解析文件

    cat /etc/named.rfc1912.zones |grep -v ^//
    
    zone "localhost.localdomain" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
    };
    
    zone "inno.com" IN {
        type master;
        file "inno.com.zone";
        allow-update { none; };
    };
    
    zone "localhost" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
    };
    
    zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
    };
    
    zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
    };
    
    zone "1.168.192.in-addr.arpa" IN {
        type master;
        file "1.168.192.arpa";
    };
    
    zone "100.168.192.in-addr.arpa" IN {
        type master;
        file "100.168.192.arpa";
    };
    
    zone "10.10.10.in-addr.arpa" IN {
        type master;
        file "10.10.10.arpa";
    };
    
    zone "0.in-addr.arpa" IN {
        type master;
        file "named.empty";
        allow-update { none; };
    };

    3.域解析文件在目录、/var/named

    copy -a /var/named/named.localhost  /var/named/inno.com.zone

    更改如下,请注意标颜色部分的格式,否则会出错

    [root@love named]# cat inno.com.zone 
    $TTL 1D
    @    IN SOA    inno.com root.inno.com. (
                        0    ; serial
                        1D    ; refresh
                        1H    ; retry
                        1W    ; expire
                        3H )    ; minimum
    @           IN  NS ns.inno.com.
    ns          IN     A 192.168.1.100
    gzcity      IN     A 192.168.1.51
    hzcity      IN     A 192.168.1.52
    gzcity-vip    IN     A 192.168.1.55
    hzcity-vip    IN     A 192.168.1.56
    myscan      IN     A 192.168.1.60
    myscan      IN     A 192.168.1.61
    gzcity-priv1  IN     A 10.10.10.2
    gzcity-priv2  IN     A 192.168.100.3
    hzcity-priv1  IN     A 10.10.10.4
    hzcity-priv2  IN     A 192.168.100.5

    4.IP反向解析文件

    copy -a /var/named/named.loopback /var/name/100.168.192.arpa 注意标点符号,以下只是一个例子,有几个网段就可以建几个网段的文件,但是要注册到/etc/named.rfc1912.zones 文件中

    root@love named]# cat 100.168.192.arpa 
    $TTL 1D
    @    IN SOA    inno.com. root.inno.com. (
                        0    ; serial
                        1D    ; refresh
                        1H    ; retry
                        1W    ; expire
                        3H )    ; minimum
           NS    ns.inno.com.
    ns     A    192.168.100.100
    3     PTR    gzcity-priv2.inno.com.
    5     PTR    hzcity-priv2.inno.com.
    7     PTR    nycity-priv2.inno.com.
    9     PTR    xacity-priv2.inno.com.

    5. 重新起动 域名解析服务

    systemctl restart named

     6. 域名解析地址

    [root@win200 named]# cat /etc/resolv.conf 
    # Generated by NetworkManager
    search inno.com
    nameserver 192.168.68.100
  • 相关阅读:
    Wiin10 深色模式 暗色 省电 经济 护眼dark mode energy saving ecol
    云主机终端现实中文
    systemctl enable与systemctl start的区别
    centos技巧
    用国内的vps登录亚马逊的ec2
    小米 redmi note 8 打开开发者选项
    javascript数组、对象和Null的typeof同为object,区分解决办法
    组件中是否可以判断slot是否有内容?
    xlsx-style 行高设置
    修改xlsx-style 源码 解决报错
  • 原文地址:https://www.cnblogs.com/tingxin/p/13956800.html
Copyright © 2011-2022 走看看