当前位置：首页 > news >正文

主从服务器的正反向声明

news 2025/11/11 7:31:33

一、需要三个虚拟机

二、正向配置

# 1. 修改/etc/named.conf
listen-on port 53 { any; };
allow-query { xxx.xxx.xxx.200; };
# 2. 修改/etc/named.rfc1912.zones
# 新增以下内容
zone "openlab.com" IN {
type master;
file "openlab.com.zone";
allow-update { none; };
};

# 3.进入到/var/named目录中创建openlab.com.zone
$TTD 1D
openlab.com. IN SOA ns.openlab.com. admin.openlab.com (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
openlab.com. IN NS ns.openlab.com.
ftp                       IN A 172.25.254.101
bbs                       IN A 172.25.254.102
image                   IN A 172.25.254.103

三、反向配置

# 服务端
# 1.安装 bind
dnf install bind -y
# 2. 修改主配置文件让named服务可以监听任意地址服务任意ip
listen-on port 53 { any; };
allow-query { any; };
# 3.添加反向解析声明到named.rfc1912.zones
vim /etc/named.rfc1912.zones
#######3
zone "254.25.172.in-addr.arpa" IN { #双引号内的反向解析的区域名
type master;
file "172.25.254.arpa";#反向解析的文件/var/named/172.25.254.arpa
allow-update { none; };
};
########
# 4.去/var/named/去创建 172.25.254.arpa
$TTL 1D
@ IN SOA ns.openlab.com. 123.qq.com. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
NS ns.openlab.com. #声明域名解析服务地址
openlab.com. A 172.25.254.100 # 声明该区域的ip是什么
101 PTR www.openlab.com.
102 PTR bbs.openlab.com.
103 PTR image.openlab.com.
104 PTR timeline.openlab.com.

# 5.重启named服务
systemctl restart named
-----------------------------------------
# 客户端
# 1.安装 bind
dnf install bind -y

# 2.配置自己的dns服务到网络中
nmcli connection modify ens160 ipv4.dns 172.25.254.100
nmcli connection up ens160

# 3.nslookup
[root@localhost ~]# nslookup 172.25.254.104
104.254.25.172.in-addr.arpa name = timeline.openlab.com.

[root@localhost ~]# nslookup 172.25.254.103
103.254.25.172.in-addr.arpa name = image.openlab.com.

四、主从配置

# 1.配置主服务器修改声明文件，将正向和反向声明做转发处理，转发给从服务器
vim /etc/named.rfc1912.zonese
######
zone "openlab.com" IN {
type master;
file "openlab.com.zone";
allow-transfer{172.25.254.101;}; # 允许转发给从服务器
};
.....
zone "254.25.172.in-addr.arpa" IN {
type master;
file "172.25.254.arpa";
allow-transfer { 172.25.254.101; };
};
######

# 2.配置从服务器
# 2.1关闭防火墙
systemctl disable --now firewalld
setenforce 0

# 2.2修改/etc/named.conf
vim /etc/named.conf
#########
listen-on port 53 { any; };
allow-query { any; };
#########

# 2.3修改/etc/named.rfc1912.zones
vim /etc/named.rfc19212.zones
#########
zone "openlab.com" IN {
type slave; # 身份为从服务器
masters {172.25.254.100;}; # 从服务器的主为 172.25.254.100
file "slaves/openlab.com.zone"; # 从服务器的区域数据文件保存位置
};

zone "254.25.172.in-addr.arpa" IN {
type slave;
masters {172.25.254.100;};
file "slaves/172.25.254.arpa";
};
########

# 3.两边都重启服务
systemctl restart named

# 4.将主从ip写到客户端的dns中,然后使用nslookup 进行正反向解析测试
nmcli connection modify ens160 +ipv4.dns 172.25.254.101
nmcli connection up ens160

# 主从都在线时使用主进行解析
[root@client ~]# nslookup bbs.openlab.com
Server: 172.25.254.100
Address: 172.25.254.100#53

Name: bbs.openlab.com
Address: 172.25.254.101

# 当将主强制下线后从进行解析
[root@client ~]# nslookup bbs.openlab.com
Server: 172.25.254.101
Address: 172.25.254.101#53

Name: bbs.openlab.com
Address: 172.25.254.101

[root@client ~]# nslookup 172.25.254.101
101.254.25.172.in-addr.arpa name = www.openlab.com.