DNS

第一、实现智能DNS

安装模板配置文件软件
# yum install caching-nameserver -y

基本准备：
hostname
hosts
同步时间

1、安装一个工具包：

 ripe-dbase-client-v3.tar.gz


[root@dns whois-3.1]# whois3 -h whois.apnic.net -l -i mb MAINT-CNCGROUP > /var/named/chroot/var/named/cnc

[root@dns whois-3.1]# whois3 -h whois.apnic.net -l -i mb MAINT-CHINANET > /var/named/chroot/var/named/china

我们只能模拟这些IP数据


[root@dns chroot]# vim /var/named/chroot/var/named/cnc_acl
acl cnc {
10.1.1.1;
10.1.1.2;
192.168.1/24;
10.1.1.21;
10.1.1.93;
10.1.1.42;
10.1.1.84;
10.1.1.142;
10.1.1.56;
10.1.1.72;
};

[root@dns chroot]# vim /var/named/chroot/var/named/china_acl
acl china {
10.1.1.151;
10.1.1.152;
10.1.1.158;
10.1.1.191;
10.1.1.196;
10.1.1.213;
10.1.1.231;
10.1.1.241;
};

 


2、配置模板文件

# mv /var/named/chroot/etc/named.conf /var/named/chroot/etc/named.conf.bk

视图view


# vim /var/named/chroot/etc/named.caching-nameserver.conf

options {
        listen-on port 53 { 127.0.0.1;10.1.1.20; };
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query { any; };
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
        match-clients { localhost; };
        match-destinations { localhost; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};


include "cnc_acl";
include "china_acl";

view cnc_resolver {
        match-clients { cnc; };
        zone "upl.com" IN {
                type master;
                file "data/cnc.master.upl.com.zone";
        };
};

view china_resolver {
        match-clients { china; }; # 写acl的名字
        zone "upl.com" IN {
                type master;
                file "data/china.master.upl.com.zone";
        };
};

view other_resolver {
        match-clients { any; };
        zone "upl.com" IN {
                type master;
                file "data/other.master.upl.com.zone";
        };
};

 

 

 


if [ 网通的客户 ];then
 返回网通机房的IP

elif [ 电信的客户 ];then
 返回电信机房的IP
fi
......


3、配置区域文件
# vim var/named/data/cnc.master.upl.com.zone
$TTL 86400
@ IN SOA upl.com. root. (
                                                01
                                                15M
                                                10M
                                                1D
                                                1H
                                                )


@ IN NS dns.upl.com.
dns IN A 10.1.1.20
web IN A 10.1.1.10
www IN CNAME web

 

 

# vim china.master.upl.com.zone
$TTL 86400
@ IN SOA upl.com. root. (
                                                01
                                                15M
                                                10M
                                                1D
                                                1H
                                                )


@ IN NS dns.upl.com.
dns IN A 10.1.1.20
web IN A 10.1.1.11
www IN CNAME web

 

# vim other.master.upl.com.zone
$TTL 86400
@ IN SOA upl.com. root. (
                                                01
                                                15M
                                                10M
                                                1D
                                                1H
                                                )


@ IN NS dns.upl.com.
dns IN A 10.1.1.20
web IN A 10.1.1.12
www IN CNAME web

 

注意修改所有数据文件包括acl文件的权限，属主等 660


测试：

 找一台客户端，把nameserver执行自己的 DNS服务器，然后测试


第二、实现子域服务器


1、分别修改主域名DNS服务器的区域文件，进行子域授权

upl.com ---授权子域--> sz.upl.com

 

 

[root@dns chroot]# cat var/named/data