Linux：DNS的多向解析配置_b610 dns

Linux：DNS的多向解析

这个实验是在其以及配置DNS解析服务器的前提下进行的

安装bind软件

[root@server100 ~]# dnf install bind -y
1

启动named服务并且设置开机自启

[root@server100 ~]# sysemctl enable --now named
1

首先添加一个IP，因为实验需要两个IP

[root@server100 ~]# vim /etc/NetworkManager/system-connections/eth0.nmconnection
# 具体修改内容如下：

[connection]
id=eth0
type=ethernet
interface-name=eth0

[ipv4]
method=manual
address1=172.25.254.100/24,172.25.254.2
address2=192.168.0.100/24,172.25.254.2
dns=114.114.114.114;

[root@server100 ~]# nmcli connection reload
[root@server100 ~]# nmcli connection up eth0

# 检查是否添加成功
[root@server100 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:0c:29:19:96:ef brd ff:ff:ff:ff:ff:ff
    altname enp3s0
    altname ens160
    inet 172.25.254.100/24 brd 172.25.254.255 scope global noprefixroute eth0
       valid_lft forever preferred_lft forever
    inet 192.168.0.100/24 brd 192.168.0.255 scope global noprefixroute eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::67a0:8915:dfbb:2f8b/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

修改主配置文件，添加配置段

# 最重要的一部分修改主配置文件，添加配置段
[root@server100 ~]# vim /etc/named.conf
# 翻到配置文件的后面
# 先屏蔽这段
/*
zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
*/

# 添加172.25.254.0/24网段的配置段
view localnet{
        match-clients { 172.25.254.0/24 ;};

        zone "." IN {
                type hint;
                file "named.ca";
        };

        include "/etc/named.rfc1912.zones";
};

# 添加其它网段的配置段
view inter {
        match-clients { any ;};

        zone "." IN {
                type hint;
                file "named.ca";
        };

        include "/etc/named.rfc1912.inter";
};

include "/etc/named.root.key";
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

拷贝索引目录位置文件，并修改其内容

[root@server100 ~]# cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.inter
[root@server100 ~]# vim /etc/named.rfc1912.inter
zone "timinglee.org" IN {
        type master;
        file "timinglee.org.inter";
        allow-update { none; };
};
1
2
3
4
5
6
7

拷贝IP与域名具体映射的文件，并修改其内容

[root@server100 ~]# cp -p /var/named/timinglee.org.zone /var/named/timinglee.org.inter
[root@server100 ~]# vim /var/named/timinglee.org.inter
$TTL 1D
@       IN SOA  ns.timinglee.org. rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.timinglee.org.
ns      A       192.168.0.100
bbs     A       192.168.0.200
1
2
3
4
5
6
7
8
9
10
11
12

测试访问不同网段的IP看是否可以切换DNS服务器来解析

# 测试
[root@server100 ~]# dig -t A timinglee.org @172.25.254.100

; <<>> DiG 9.16.23-RH <<>> -t A timinglee.org @172.25.254.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50784
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 01dad8fa3b61025b01000000663a091624149100391ebf42 (good)
;; QUESTION SECTION:
;timinglee.org.                 IN      A

;; AUTHORITY SECTION:
timinglee.org.          10800   IN      SOA     ns.timinglee.org. rname.invalid. 0 86400 3600 604800 10800

;; Query time: 2 msec
;; SERVER: 172.25.254.100#53(172.25.254.100)
;; WHEN: Tue May 07 18:57:26 CST 2024
;; MSG SIZE  rcvd: 122

[root@server100 ~]# dig -t A timinglee.org @192.168.0.100

; <<>> DiG 9.16.23-RH <<>> -t A timinglee.org @192.168.0.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7606
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 0982d433340d2d3401000000663a092926a7987fab452b3d (good)
;; QUESTION SECTION:
;timinglee.org.                 IN      A

;; AUTHORITY SECTION:
timinglee.org.          10800   IN      SOA     ns.timinglee.org. rname.invalid. 0 86400 3600 604800 10800

;; Query time: 0 msec
;; SERVER: 192.168.0.100#53(192.168.0.100)
;; WHEN: Tue May 07 18:57:45 CST 2024
;; MSG SIZE  rcvd: 122
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44