高速缓存DNS2
##实验需要关闭firewalld，在每次进行测试之前需重启相关服务###
一.DNS服务的信息说明
A ：正向记录
PTR：反向，IP到域名
host -l example.com : 查看域中所有主机
dig -t soa example.com :辅助DNS
软件包 ：bind
DNS主配置目录： /var/named/
DNS主配置文件： /etc/name.conf
DNS A记录存放目录 ： /var/named/westos.com.zone
二.如何配置DNS正向解析：
1.vim /etc/named.conf #编辑主配置文件
2.vim /etc/named.rfc1912.zones
3.编写A记录文件
cp -p /var/named/localhost /var/named/westos.come.zone #生成A记录模版
完成后重启服务 systemclt restart named
在客户端 vim /etc/resolv.conf ==> nameserver 172.25.254.218
用dig www.westos.com 进行测试
辅助dns
在虚拟控制台配置双虚拟网卡
cd /etc/sysconfig/network-scripts/
cp ifcfg-eth0 ifcfg-eth1
vim ifcfg-eth1
然后重启网络，用ifconfig进行查看
cp -p /etc/named.rfc1912.zones /etc/named.rfc1912.inter
vim /etc/named.rfc1912.inter
cp -p /var/named/westos.com.zone /var/named/westos.com.inter
vim /var/named/westos.com.inter
vim /etc/named.conf
systemctl restart named
在客户端 vim /etc/resolv.conf ==> nameserver 172.25.18.218
进行检测
dns反向解析
cp -p /var/named/loopback /var/named/westos.com.ptr
vim /var/named/westos.com/ptr
vim /etc/named.rfc1912.zones
客户端vim /etc/resolv.conf ==> nameserver 172.25.254.218
进行检验
DNS 更新
cp -p /etc/named/westos.com.zone /mnt
vim /etc/named.rfc1912.zones
chmod 770 /var/named
setsebool -P named_write_master_zones 1
在客户端进行检测
DNS加key
rm -rf /var/named/westos.com.zone
rm -rf /var/named/westos.com.zone.jnl
cp -p /mnt/westos.com.zone /var/named/
cd /mnt
dnssec-****** -a HMAC-MD5 -b 256 -n HOST westoskey
cp -p /etc/rndc.key /etc/westos.key
vim /etc/westos.key
vim /etc/named.conf
43 include "/etc/westos.key";
vim /etc/named.rfc1912.zones
25 zone "westos.com" IN {
26 type master;
27 file "westos.com.zone";
28 allow-update { key westoskey; }; #这里进行改变
29 };
检验
scp Kwestoskey.+157+48027.* [email protected]:/mnt
动态DNS
服务端 yum install dhcp -y
cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf
vim /etc/dhcp/dhcpd.conf
删除27，28行和36行以后
vim /etc/named.conf
systemctl restart dhcpd
systemctl restart named
检测
拔掉网线，在客户端中vim /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes
:wq
systemctl resetart network
hostnamectl set-hostname test.westos.com