毕业设计之dns搭建：

[apps@dns_sever ~]$ sudo yum install -y bind
[apps@dns_sever ~]$ sudo vim /etc/named.conf
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
    listen-on port 53 { 127.0.0.1; any;};
    listen-on-v6 port 53 { ::1; };
    directory     "/var/named";
    dump-file     "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { localhost; any;};
    recursion yes;

    dnssec-enable no;
    dnssec-validation no;

    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";

    managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
    type hint;
    file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

注意：上面修改了 加入两个any

　　将dnssec 相关的都设置为no

Domain Name System Security Extensions (DNSSEC)DNS安全扩展，是由IETF提供的一系列DNS安全认证的机制

DNSSEC是为解决DNS欺骗和缓存污染而设计的一种安全机制。
由于内网dns,只用于内网的域名解析，所以不用添加

修改子配置文件：

[root@dnssever.quan.bbs ~]$vim /etc/named.rfc1912.zones 

// (c)2007 R W Franks
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

zone "localhost.localdomain" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
};

zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "1.0.0.127.in-addr.arpa" IN {
        type master;
        file "named.loopback";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.empty";
        allow-update { none; };
};

zone "quan.bbs" IN {
        type master;
        file "quan.bbs.zone";
        allow-update { none; };
};

编辑详细的dns解析文件：

[root@dnssever.quan.bbs ~]$vim /var/named/quan.bbs.zone 

$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
@       NS      dns.quan.bbs.
dns     A       192.168.111.222
lvsA.load      A       192.168.111.131
lvsB.load    A       192.168.111.132
webone  A       192.168.111.141
webtwo  A       192.168.111.142
mysql   A       192.168.111.151
mysql.bkone     A       192.168.111.152
mysql.bktwo     A       192.168.111.153
ansz    A       192.168.111.111
jp      A       192.168.111.122
dnsserver       A       192.168.111.222

解析：

zone 通常具有以下几种标志：

SOA：开始验证 (Start of Authority)；
NS：名称服务器 (NameServer)，后面记录的数据是 DNS 服务器的意思；
A：地址 (Address)，后面记录的是 IP 的对应 (最重要)。

测试：

[root@dnssever.quan.bbs ~]$yum install bind-utils
[root@dnssever.quan.bbs ~]$vim /etc/resolv.conf

; generated by /sbin/dhclient-script
search localdomain one.bbs
nameserver 192.168.111.222
nameserver 8.8.8.8

检测
[root@dnssever.quan.bbs ~]$nslookup webone.quan.bbs
Server:        192.168.111.222
Address:    192.168.111.222#53

Name:    webone.quan.bbs
Address: 192.168.111.141

另外一个测试工具dig(也是再bind-utils包里面的)

！！！可以指定dns服务器进行域名解析：

[root@dnssever.quan.bbs ~]$dig @8.8.8.8 webone.quan.bbs

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3 <<>> @8.8.8.8 webone.quan.bbs
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53714
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;webone.quan.bbs.        IN    A
####没记录
;; AUTHORITY SECTION:
.            86396    IN    SOA    a.root-servers.net. nstld.verisign-grs.com. 2020021600 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Feb 16 23:36:25 2020
;; MSG SIZE  rcvd: 108

[root@dnssever.quan.bbs ~]$dig @192.168.111.222 webone.quan.bbs

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3 <<>> @192.168.111.222 webone.quan.bbs
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33348
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;webone.quan.bbs.        IN    A

;; ANSWER SECTION:
webone.quan.bbs.    86400    IN    A    192.168.111.141

;; AUTHORITY SECTION:
quan.bbs.        86400    IN    NS    dns.quan.bbs.

;; ADDITIONAL SECTION:
dns.quan.bbs.        86400    IN    A    192.168.111.222

;; Query time: 0 msec
;; SERVER: 192.168.111.222#53(192.168.111.222)
;; WHEN: Sun Feb 16 23:36:28 2020
;; MSG SIZE  rcvd: 83

将其他服务器加上dns服务器即可

注：建议直接再网卡上加dns服务器，按照小范围和大范围设置

dns配置文件解析：

主配置文件：

options {
    listen-on port 53 { 127.0.0.1; };  监听方式：ip地址为指定监听 any为全网监听
    listen-on-v6 port 53 { ::1; };            是指当主机有多个网卡的时候，无论客户端连接哪个ip
    directory     "/var/named";                如果为any 都得到回应
    dump-file     "/var/named/data/cache_dump.db";  dns缓存
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query     { localhost; };   允许哪些人查询，any为任何人，可以ip指定谁，分号结尾
    recursion yes;  是否递归

    dnssec-enable yes;        DNS安全扩张机制——签名认证
    dnssec-validation yes;

    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";

    managed-keys-directory "/var/named/dynamic";
};

    zone "." IN {  跟域服务器
    type hint;
    file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

子配置文件
/etc/named.rfc1912.zones

正向解析区域文件的模板
    zone "localhost.localdomain" IN {
    type master;
    file "named.localhost";
    allow-update { none; };
};

    反向
    zone "1.0.0.127.in-addr.arpa" IN {
    type master;
    file "named.loopback";
    allow-update { none; };
};

cat /var/named/named.localhost

$TTL 1D
@    IN SOA    @ rname.invalid. (
                    0    ; serial      *主从才有用     跟新序列号
                    1D    ; refresh        *            更新间隔-从服务器下载数据
                    1H    ; retry            *            失败重试
                    1W    ; expire        *            区域文件的过期时间
                    3H )    ; minimum    *           缓存的最小生存时间
    NS    @
    A    127.0.0.1
    AAAA    ::1

    里面需要认识的符号：$TTL    缓存的生存时间
                        @ 当前域，域子配置文件有关
                        IN     互联网
                        SOA     开始授权
                        NS        dns服务器  name server
                        A          ipv4
                        AAAA    IPV6
                        CNAME     别名
                        MX         邮件交互记录 5 苏子代表优先级，数字越小，优先级越高