DNS的服务器的编译安装，及缓存名称服务器配置

青旅半醒 2022-01-14 01:29 305阅读 0赞

**DNS的服务器的编译安装，及缓存名称服务器配置**

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#废话不多说直接上货\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

\#\#\#\#\#\#\#\#\#\#\#这里我编译安装的版本是bind-9.10

实验前准备：

[root@localhost local]# yum groupinstall "server platform development"
    [root@localhost ~]# yum groupinstall "development tools" -y
    [root@localhost local]# groupadd -r -g 53 named
    [root@localhost local]# useradd -r -g 53 -u 53 named
    [root@localhost local]# id named
    uid=53(named) gid=53(named) groups=53(named)

[root@localhost src]# tar -xf bind-9.10.1-P1.tar.gz -C /usr/local/
    [root@localhost bind-9.10.1-P1]# ./configure  --prefix=/usr/local/bind9 --sysconfdir=/etc/named/ --disable-chroot --enable-threads --disable-ipv6
    [root@localhost bind-9.10.1-P1]#make && make install
    [root@localhost init.d]# vim /etc/profile.d/named.sh     ############添加环境变量
     1 PATH=/usr/local/bind9/bin:/usr/local/bind9/sbin:$PATH
    [root@localhost init.d]# . /etc/profile.d/named.sh

注意：到此为止我们编译的named全部处理完毕但是，此时的named是没有配置文件的，根域的解析文件也没有。

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#提供man文件\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

1，一次性查看man文件的方式
    [root@localhost man]# man -M /usr/local/bind9/share/man/ named
    2，通过添加man文件的方式
    [root@localhost man1]# cp * /usr/share/man/man1/
    [root@localhost man3]# cp * /usr/share/man/man3/
    [root@localhost man5]# cp * /usr/share/man/man5/
    [root@localhost man8]# cp * /usr/share/man/man8/
    3，通过指明man的文件变量的方式
    43 MANPATH /usr/man
     44 MANPATH /usr/share/man
     45 MANPATH /usr/local/man
     46 MANPATH /usr/local/share/man
     47 MANPATH /usr/X11R6/man
     48 MANPATH /usr/local/bind9/share/man    ###添加路径，但是不会立即生效

[root@localhost man1]# mkdir /var/named/                    #########创建跟区域解析库目录
    [root@localhost ~]# dig -t NS . @172.16.0.1 > /var/named/named.ca   ###生成根域解析文件
    [root@localhost ~]# ls /var/named/
    named.ca
    [root@localhost ~]# cd /var/named/
    [root@localhost named]# ls
    named.ca
    [root@localhost named]# cat named.ca
     
    ; <<>> DiG 9.10.1-P1 <<>> -t NS . @172.16.0.1
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49896
    ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1
     
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;.                                IN        NS
    ;; ANSWER SECTION:
    .                        473316        IN        NS        i.root-servers.net.
    .                        473316        IN        NS        h.root-servers.net.
    .                        473316        IN        NS        j.root-servers.net.
    .                        473316        IN        NS        l.root-servers.net.
    .                        473316        IN        NS        m.root-servers.net.
    .                        473316        IN        NS        e.root-servers.net.
    .                        473316        IN        NS        b.root-servers.net.
    .                        473316        IN        NS        k.root-servers.net.
    .                        473316        IN        NS        a.root-servers.net.
    .                        473316        IN        NS        g.root-servers.net.
    .                        473316        IN        NS        d.root-servers.net.
    .                        473316        IN        NS        f.root-servers.net.
    .                        473316        IN        NS        c.root-servers.net.
     
    ;; Query time: 2 msec
    ;; SERVER: 172.16.0.1#53(172.16.0.1)
    ;; WHEN: Wed Feb 11 03:57:36 CST 2015
    ;; MSG SIZE  rcvd: 239

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#生成本地解析文件\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#生成缓存名称服务器\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[root@localhost named]# vim /var/named/named.localhost   ###正向解析文件
      1 $TTL 1D
      2 @           IN SOA  @  rname.invalid. (
      3                                         0;
      4                                         1D;
      5                                         1H;
      6                                         1W;
      7                                         3H);
      8             NS      @
      9             A       127.0.0.1
     
    [root@localhost named]# vim /var/named/named.loopback   ###反向解析文件
      1 $TTL 1D
      2 @   IN SOA   @  rname.invalid. (
      3                             0;
      4                             1D;
      5                             1H;
      6                             1W;
      7                             3H);
      8         NS    localhost.
      9 1       PTR   localhost.

[root@localhost named]# chmod 640  *              ######修改权限       
    [root@localhost named]# chown .named *         ######注意这几个文件要求其他用户无权限访问，数组必须为named. 
    [root@localhost named]# ll
    total 12
    -rw-r-----. 1 root named 934 Feb 11 03:57 named.ca
    -rw-r-----. 1 root named 144 Feb 11 04:02 named.localhost
    -rw-r-----. 1 root named 127 Feb 11 04:52 named.loopback

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#生成配置文件\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[root@localhost named]# rndc-confgen -r /dev/urandom > /etc/named/rndc.conf ##生成配置文件秘钥
    [root@localhost named]# vim named.conf
    [root@localhost run]# vim /etc/named/named.conf
      1 options {
      2     directory "/var/named/";                  #########指定工作目录
      3
      4 };
      5 zone "." IN {                                              #########根域解析
      6     type hint;
      7     file "named.ca";
      8 };
      9 zone "localhost" IN {
     10     type master;
     11     file "name.localhost";
     12     allow-update {none;};
     13 };
     14 zone "0.0.127.in-addr.arpa" IN {
     15     type master;
     16     file "named.loopback";
     17     allow-update {none;};
     18 };
     19 key "rndc-key" {
     20     algorithm hmac-md5;
     21     secret "Ex9+5nYWlJ/y9xcAXzTxEg==";
     22 };
     23
     24 controls {
     25         inet 127.0.0.1 port 953
     26         allow { 127.0.0.1; } keys { "rndc-key"; };
     27 };
     28 # End of named.conf

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#检查这两个区域解析是否正常\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[root@localhost named]# named-checkzone "localhost" /var/named/named.localhost
    zone localhost/IN: loaded serial 0
    OK
    [root@localhost man8]# named-checkzone "0.0.127.in-addr.arpa" /var/named/named.loopback
    zone 0.0.127.in-addr.arpa/IN: loaded serial 0
    OK

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#以上就是生成了一个缓存缓存名称服务器了\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[root@localhost named]# man -M /usr/local/bind9/share/man/ named  ###一次查看man的方式
    [root@localhost man]# named -u named -g     ############# 前台启动
    [root@localhost named]# ss -tnlp | grep 53
    LISTEN     0      10             172.16.11.11:53                       *:*      users:(("named",19931,22))
    LISTEN     0      10                127.0.0.1:53                       *:*      users:(("named",19931,21))
    LISTEN     0      5             192.168.122.1:53                       *:*      users:(("dnsmasq",1444,6))
    LISTEN     0      128               127.0.0.1:953                      *:*      users:(("named",19931,23))

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#提供配置脚本\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[root@localhost init.d]# vim named
    [root@localhost run]# vim /etc/init.d/named
     
      1 #!/bin/bash
      2 #
      3 #description: named daemon
      4 pidfile=/usr/local/bind9/var/run/named/named.pid   ###定义pid文件位置变量，
      5 lockfile=/var/lock/subsys/named          ###锁文件，用于后面判断，程序是否在运行
      6 conffile=/etc/named/named.conf           ###指明配置文件位置  
      7 named=/usr/local/bind9/sbin/named 
      8 prog=named                               ######程序名
      9
     10 [ -r /etc/rc.d/init.d/functions ] && . /etc/rc.d/init.d/functions   #####调用函数
     11
     12 start() {
     13     if [ -e $lockfile ]; then            ####判断服务在不在启动就是判断锁文件在不在
     14         echo "$prog is already runnig"
     15         warning
     16         exit 0
     17     fi
     18     echo "start $prog:"
     19     daemon --pidfile $pidfile $named -u named -c $conffile         ####启动服务
     20     retval=$?
     21     echo
     22     if [ $retval -eq 0 ]; then
     23         touch $lockfile
     24         return $retval
     25     else
     26         rm -f $lockfile $pidfile
     27         return 1
     28         fi
     29 }  
     30 stop() {                                  ####停止服务的函数
     31     if [ ! -e $lockfile ];then
     32         echo "$prog is stopped"
     33         warning
     34         echo
     35         exit 0
     36     fi
     37         echo -n "stopping $prog:"
     38         killproc $prog                                                              ####killproc 停掉进程
     39         retval=$?
     40         echo
     41     if [ $retval -eq 0 ]; then
     42         rm -f $lockfile $pidfile
     43         return 0
     44     else
     45         echo "can not stop $prog"
     46         return 1
     47     fi
     48 }
     49 restart() {                                           ###重启的函数
     50     stop
     51     start
     52 }
     53 reload() {                                            ###重载的函数
     54     echo -n "Reload the $prog:"
     55     killproc -HUP $prog
     56     echo
     57     return $retval
     58
     59 }
     60 status() {                                             ####状态查看的函数
     61     if pidof $prog &> /dev/null; then
     62         echo -n "$prog id running"
     63         success
     64         echo
     65     else
     66         echo -n "$prog is stopped."
     67         success
     68         echo
     69     fi
     70 }
     71 usage() {                                             ####帮助页面的查看
     72     echo "Usage:named {start|stop|status|restart|reload}"
     73 }
     74
     75 case $1 in                                            ####case判断
     76 start)
     77     start;;
     78 stop)
     79     stop;;
     80 status)
     81     status;;
     82 restart)
     83     restart;;
     84 reload)
     85     reload;;
     86 *)
     87     usage
     88     exit 1;;
     89 esac
    [root@localhost init.d]# bash -n named                 ###########检查语法
    [root@localhost init.d]# chmod a+x named          ###########提供执行权限

\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#启动测试\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#\#

[![wKiom1TcqsWTDCZ2AACYYKyciKw054.jpg][]][wKiom1TcqsWTDCZ2AACYYKyciKw054.jpg]

至此DNS的缓存名称服务器和编译安装配置完毕！！！！！！！！！！！！！！！！！！！

转载于:https://blog.51cto.com/guanqianjian/1614148

[wKiom1TcqsWTDCZ2AACYYKyciKw054.jpg]: /images/20220113/70400ff5a37b471ea1dd6d7c04ce4b92.png