Linux platform to build DNS domain name service and common configuration

Source: Internet
Author: User
Tags dns2 domain name server dnssec

Environmental requirements: A server equipped with Linux system, I here with VMware virtual a redhat6.5 to give a demonstration;
Experiment: Build a common domain name server;
1. Install bind, such as:

650) this.width=650; "title=" 1.jpg "alt=" wkiom1qi6wlt-_ilaafpczgzumm714.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 4a/1d/wkiom1qi6wlt-_ilaafpczgzumm714.jpg "/>

2. Configure the BIND service, such as:

650) this.width=650; "title=" 2.jpg "alt=" wkiom1qi612jv-o1aabv-gk6rlq956.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 4a/1d/wkiom1qi612jv-o1aabv-gk6rlq956.jpg "/>

650) this.width=650; "title=" 3.png "alt=" wkiol1qi657jjdtkaaglfew1qes834.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 4a/1e/wkiol1qi657jjdtkaaglfew1qes834.jpg "/>

650) this.width=650; "title=" 4.jpg "alt=" wkiol1qi7cvripxlaaddpin5chy102.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 4a/1f/wkiol1qi7cvripxlaaddpin5chy102.jpg "/>650" this.width=650; "title=" 5.jpg "alt=" Wkiom1qi7cfhelvaaahrbbhazm4129.jpg "src=" http://s3.51cto.com/wyfs02/M00/4A/1D/ Wkiom1qi7cfhelvaaahrbbhazm4129.jpg "/>

650) this.width=650; "title=" 6.png "style=" Float:none; "alt=" wkiol1qi7h3xtvcpaacbylu9_ta563.jpg "src=" http:/ S3.51cto.com/wyfs02/m01/4a/1f/wkiol1qi7h3xtvcpaacbylu9_ta563.jpg "/>

650) this.width=650; "title=" 7.jpg "style=" Float:none; "alt=" wkiom1qi7fudwr-saaem1916gtc696.jpg "src=" http:/ S3.51cto.com/wyfs02/m02/4a/1d/wkiom1qi7fudwr-saaem1916gtc696.jpg "/>

650) this.width=650; "title=" 9.jpg "style=" Float:none; "alt=" wkiom1qi7fur57tmaacsnojhkjg382.jpg "src=" http:/ S3.51cto.com/wyfs02/m01/4a/1d/wkiom1qi7fur57tmaacsnojhkjg382.jpg "/>

650) this.width=650; "title=" 10.png "style=" Float:none; "alt=" wkiol1qi7idcw7yjaadsxlbtcr4571.jpg "src=" http:/ S3.51cto.com/wyfs02/m02/4a/1f/wkiol1qi7idcw7yjaadsxlbtcr4571.jpg "/>

650) this.width=650; "title=" 11.jpg "alt=" wkiom1qi7ipaxqznaak5jpbqfts594.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 4a/1d/wkiom1qi7ipaxqznaak5jpbqfts594.jpg "/>

650) this.width=650; "title=" 12.jpg "style=" Float:none; "alt=" wkiol1qi7nhanr44aaduhs7atig209.jpg "src=" http:/ S3.51cto.com/wyfs02/m02/4a/1f/wkiol1qi7nhanr44aaduhs7atig209.jpg "/>

650) this.width=650; "title=" 13.png "style=" Float:none; "alt=" wkiol1qi7ngxd52gaacsgcftfru765.jpg "src=" http:/ S3.51cto.com/wyfs02/m00/4a/1f/wkiol1qi7ngxd52gaacsgcftfru765.jpg "/>

650) this.width=650; "title=" 14.jpg "style=" Float:none; "alt=" wkiom1qi7k7j8qdhaabyqjqgyrm418.jpg "src=" http:/ S3.51cto.com/wyfs02/m00/4a/1d/wkiom1qi7k7j8qdhaabyqjqgyrm418.jpg "/>

650) this.width=650; "title=" 16.jpg "alt=" wkiom1qi7miqce5uaackuq6kjp4376.jpg "src=" http://s3.51cto.com/wyfs02/M02/ 4a/1d/wkiom1qi7miqce5uaackuq6kjp4376.jpg "/>

3. Verify the domain Name service, such as:

650) this.width=650; "title=" 17.jpg "alt=" wkiol1qi7udsnjjmaadpeqrt5jo602.jpg "src=" http://s3.51cto.com/wyfs02/M01/ 4a/1f/wkiol1qi7udsnjjmaadpeqrt5jo602.jpg "/>

Configure the master-slave DNS as follows:
Edit the Declaration domain positive database file on the primary DNS:
Run Command vim/var/named/data/long.com
$TTL 3H

@ in SOA dns.long.com. Root.long.com. (
2014092501 #版本号, the following is a variety of time, if not the master from the structure, the values of these times can be arbitrarily written
#slave {from the meaning} active contact master{The meaning of the Lord} interval
#slave从master更新失败的重试间隔
#在无法联系master的情况下多久slave停止服务
3600) #对否定回答的缓存时间
In NS dns1.long.com. #指定本域中权威DNS服务器
In NS dns2.long.com. #让主域知道还有个从域
Dns1 in NS 192.168.1.1
Dns2 in NS 192.168.1.2 #假设从域的IP地址是192.168.1.2
Liu in A 192.168.1.10
Test in A 192.168.1.15
Save, edit the primary domain's master profile/etc/named.conf
Run Command vim/etc/named.conf
Find the two dnssec-enables and dnssec-validation, change Yes to No, these two are about two DNS security configuration items
The primary domain is configured to complete, I only write forward parsing the master and slave, reverse parsing is also the same, followed by the configuration from the domain
To edit the declaration domain's configuration file from DNS
Run Command Vim/etc/named.rfc1912.zones
Add at the end of the file:
Zone "Long.com" in {
Type slave;
File "slaves/long.com";
Masters {192.168.1.1;}; #指明从那个服务器同步数据
};
Restart named service, master-slave configuration ok!
To configure a cache type domain:
Add two lines under the main profile/etc/named.conf
Forward only; #当本域没有定义某个域名时, will be forwarded
forward{8.8.8.8;}; #把请求转发给谷歌
Restart service, cache domain ok!












This article is from the "CentOS" blog, so be sure to keep this source http://longcentod.blog.51cto.com/9060910/1557921

Linux platform to build DNS domain name service and common configuration

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.