Intelligent access to Web sites based on DNS implementation

Intelligent DNS has a higher intelligent choice than traditional DNS, can be based on different IP address to determine which region of the IP from, so as to reach the server according to IP can access to the region, the benefit is to reduce network latency and improve access speed. However, now generally small and medium-sized enterprises in the absence of too much capacity will be entrusted to the third party DNS management (cdn:content Delivery Network service providers: Blue Flood, web, Dili, etc.) this can greatly reduce the cost of building a room.

The network topology diagram is as follows 650) this.width=650; "Src=" https://s4.51cto.com/wyfs02/M00/08/47/ Wkiom1ne52aw-btnaaci1kxx2g8468.png "title=" 1.png "alt=" Wkiom1ne52aw-btnaaci1kxx2g8468.png "/>

Specific steps:

Prepare two virtual machines, one when the client, one when the server side.

Firewall, SELinux shutdown, install bind package and start.

Suppose the Beijing regional client IP network segment is 192.168.18.0/24

Shanghai Regional Network segment is 172.17.88.0/24

I use CENTOS7 when the server side, rh7.4 when the client. 650) this.width=650; "src=" Https://s4.51cto.com/wyfs02/M01/A6/FA/wKioL1nexXezsBW-AAC9yNaykxk889.png "title=" 1.png "alt=" Wkiol1nexxezsbw-aac9ynaykxk889.png "/>

All of the above are experiments, just assume, do not delve, thank you.

① Configure ACLs on the server side.

Command: vim/etc/named.conf 650) this.width=650; "Src=" https://s4.51cto.com/wyfs02/M00/08/43/wKiom1neytqD4_BmAABjqX_ Gisw158.png "title=" 1.png "alt=" Wkiom1neytqd4_bmaabjqx_gisw158.png "/>

② continues to define view in this file.

650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M02/A6/FA/wKioL1ney1_wI5TLAACoj59me58003.png "title=" 1.png "alt=" Wkiol1ney1_wi5tlaacoj59me58003.png "/>

③ defines the database file.

Copy database file 650) this.width=650; "src=" Https://s5.51cto.com/wyfs02/M00/08/44/wKiom1ne0EmAK7SNAAEG64y7f3Q919.png "title = "1.png" alt= "Wkiom1ne0emak7snaaeg64y7f3q919.png"/>

Database files for the Beijing region

650) this.width=650; "src=" Https://s4.51cto.com/wyfs02/M00/A6/FB/wKioL1ne0TTDIbS5AABRc-ehpo4236.png "title=" 1.png "alt=" Wkiol1ne0ttdibs5aabrc-ehpo4236.png "/>

Database files for the Shanghai region

650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M02/08/45/wKiom1ne1Bbz3u_9AAAqWBXOGUA433.png "title=" 1.png "alt=" Wkiom1ne1bbz3u_9aaaqwbxogua433.png "/>

④ When the Beijing Regional Network segment (192.168.18.0/24) accesses www.zhongguo.com, the address given to the resolution is 6.6.6.6

when the Beijing Regional Network segment (192.168.18.0/ 24) When accessing www.zhongguo.com, the address given is 8.8.8.8; 6.6.6.6 and 8.8.8.8 two Web servers, of course, have exactly the same content, so that when a customer accesses it, it does not affect the speed of access. 650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M00/A6/FC/wKioL1ne2DKwqKTtAACTEGXMB_o216.png "title=" 1.png "alt=" Wkiol1ne2dkwqkttaactegxmb_o216.png "/>

650) this.width=650; "src=" Https://s3.51cto.com/wyfs02/M01/A6/FC/wKioL1ne2ELwZfvbAADlCJPYrmQ646.png "title=" 2.png "alt=" Wkiol1ne2elwzfvbaadlcjpyrmq646.png "/>

In the database file to add the DNS two IP address, as a resolution server, or two network segments can not ping, use 192.168.18.0/24 network segment to use 172.17.110.110 can not parse. While 192.168.18.0/24 uses the DNS server another IP address resolves successfully.

650) this.width=650; "src=" Https://s4.51cto.com/wyfs02/M02/08/46/wKiom1ne3_ezfX1GAABZ1TQV3G8762.png "title=" 1.png "alt=" Wkiom1ne3_ezfx1gaabz1tqv3g8762.png "/>

The above is the whole experiment.

Intelligent access to Web sites based on DNS implementation