dns\u6b77\u53f2
\u65e9\u671f\u4f7f\u7528\/etc\/hosts\u6a94\u4f86\u5c0d\u61c9ip\u8207\u540d\u7a31\uff0c\u4f46\u56e0\u70ba\u73fe\u5728\u4e3b\u6a5f\u592a\u591a\u6240\u4ee5\u4f7f\u7528dns(domain name server)\u4f86\u505a\u81ea\u52d5\u7684\u5c0d\u61c9
BIND,berkeley internet name domain(www.isc.org)
\u5305\u542b\u4e09\u90e8\u4efd
1\uff0cDNS\u4f3a\u670d\u5668\uff1a\u53ef\u80fd\u9700\u984d\u5916\u5b89\u88dd\uff0c\u7531\u4ee5\u4e0b\u7d44\u6210
named\uff1a\u4f3a\u670d\u7a0b\u5f0f
\u8cc7\u6599\u6a94\uff1a\u6240\u6709\u7ba1\u8f44\u7db2\u57df\u7684\u7db2\u57df\u540d\u7a31\uff08\u542b\u6b63\u53cd\u89e3\u6a94\uff0croot\u6839\u8cc7\u6599\u6a94\uff0cloopback\u6a94\uff09
named.conf\uff1abind8\/9\u7684\u7d44\u614b\u6a94
2\uff0cDNS resolver library \uff1a\u7528\u4f86\u8f49\u63dbip\u53ca\u7db2\u57df\u7684\u51fd\u5f0f\u5eab\uff0c\u901a\u5e38\u5df1\u5167\u5efa\u5728\u7cfb\u7d71\u5167
3\uff0cDNS tool \uff1a \u9a57\u8b49dns\u7528\u7684\u7a0b\u5f0f\uff0c\u901a\u5e38\u7cfb\u7d71\u5167\u90fd\u6709
ex:nslookup,dig,whois<\/p>\n\n\n\n
…………………………………………………<\/p>\n\n\n\n
\u4ee5\u4e0b\u662f\u8cc7\u6599\u6a94\u8a2d\u5b9a<\/p>\n\n\n\n
\u6b63\u89e3\u6a94\u683c\u5f0f<\/strong> \u53cd\u89e3\u6a94\u683c\u5f0f<\/strong> loopback\u6a94<\/strong>\uff1alocalhost\u67e5\u8a62\u7528 \u4ee5\u4e0b\u662fnamed.conf\u7d44\u614b\u6a94\u8a2d\u5b9a type \u6709\u4ee5\u4e0b\u4e94\u7a2e \u88dc\u5145option ………………………………………………………..<\/p>\n\n\n\n dns\u66f4\u65b0<\/strong> ………………………………………………….<\/p>\n\n\n\n \u5b89\u5168\u6027\u5efa\u8b70<\/p>\n\n\n\n \u4ee5\u6700\u5c0f\u7684\u7279\u6b0a\u57f7\u884cbind<\/strong> \u95dc\u9589\u986f\u793a\u7248\u672c<\/strong> \u907f\u514d\u672a\u6388\u6b0a\u7684\u8f44\u5340\u8cc7\u6599\u50b3\u9001<\/strong> \u529f\u80fd\u5206\u96e2<\/strong> \u5176\u4ed6\u9078\u64c7\u6027\u5efa\u8b70 dns\u6b77\u53f2\u65e9\u671f\u4f7f\u7528\/etc\/hosts\u6a94\u4f86\u5c0d\u61c9ip\u8207\u540d\u7a31\uff0c\u4f46 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[21],"tags":[],"class_list":["post-694","post","type-post","status-publish","format-standard","hentry","category-linuxservice"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=694"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/694\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
$TTL 86400 \/\/\u55ae\u4f4d\u70ba\u79d2\uff0c\u67e5\u8a62\u5230\u7684\u8cc7\u6599\u653e\u5165\u5feb\u53d6\u53ef\u5132\u5b58\u6642\u9593
socket.idv.tw. IN SOA dns.socket.idv.tw. \/\/\u5ba3\u544asocket.idv.tw\u7db2\u57df\u7531dns.socket.idv.tw\u4f3a\u670d\u5668\u7ba1\u7406
admin.dns.socket.idv.tw. ( \/\/\u7cfb\u7d71\u7ba1\u7406\u8005\u7684\u96fb\u90f5
1; \/\/\u5e8f\u865f,\u8fa6\u5225\u8a2d\u5b9a\u6a94\u7248\u672c
10800; \/\/\u66f4\u65b0\u6642\u9593\uff0c\u63a7\u5236slave\u591a\u4e45\u4f86master\u4e0b\u8f09\u65b0\u7684\u8cc7\u6599\u6a94
3600; \/\/\u91cd\u8a66\u6642\u9593\uff0c\u82e5slave\u4e0b\u8f09\u5931\u6557\uff0c\u591a\u4e45\u5728\u91cd\u8a66
604800; \/\/\u903e\u671f\u6642\u9593\uff0cslave\u4e0b\u8f09\u6642\u6240\u9650\u5b9a\u7684\u6642\u9593
86400 ); \/\/mini ttl \uff0cslave\u53ef\u4fdd\u5b58\u591a\u4e45\u4e0b\u8f09\u7684\u8cc7\u6599
socket.idv.tw. IN NS dns.socket.idv.tw. \/\/socket.idv.tw\u7db2\u57df\u7684dns\u4f3a\u670d\u5668\u662fdns.socket.idv.tw
www.socket.idv.tw. IN A 192.192.6.2 \/\/\u8a2d\u5b9awww.socket.idv.tw\u7684\u5c0d\u61c9ip\u70ba192.192.6.2
www2 IN A 192.192.6.22 \/\/www2.socket.idv.tw\u5c0d\u61c9\u5230192.192.6.22\u7684\u7c21\u5beb
dns.socket.idv.tw. IN A 192.192.6.3
study.socket.idv.tw. IN CNAME www.socket.idv.tw. \/\/\u70bawww.socket.idv.tw\u53d6\u4e00\u500b\u5225\u540dstudy.socket.idv.tw
study2IN CNAME www2 \/\/www2.socket.idv.tw\u7684\u5225\u540dstudy2.socket.idv.tw\u7684\u7c21\u5beb
socket.idv.tw. IN MX 10 www.socket.idv.tw. \/\/\u5bc4\u7d66user@socket.idv.tw\u6642,\u4fe1\u4ef6\u6703\u7d66www.socket.idv.tw\u9019\u90e8\u4e3b\u6a5f,\u5f8c\u9762\u7684\u4e3b\u6a5f\u540d\u7a31\u8868\u793a\u4e0a\u6e38\u7684\u90f5\u4ef6\u4e3b\u6a5f\u540d\u7a31
socket.idv.tw. IN MX 20 mail.socket.idv.tw. \/\/\u5bc4\u7d66user@socket.idv.tw\u4fe1\u4ef6\u7d66www.socket.idv.tw\u8655\u7406\u4e0d\u6210\u529f\u6642,\u5c31\u6703\u7d66mail.socket.idv.tw\u8655\u7406
web.systw.net IN A 192.168.1.1 \/\/\u8a2d\u5b9a\u8ca0\u8f09\u5e73\u8861,user\u67e5\u8a62web.systw.net\u6642\u6703\u5f97\u52303\u500bip\u7684\u5176\u4e2d\u4e4b\u4e00
web.systw.net IN A 192.168.1.2
web.systw.net IN A 192.168.1.3<\/p>\n\n\n\n
$TTL 86400
6.192.192.in-addr.arpa. IN SOA dns.socket.idv.tw. \/\/\u5ba3\u544a192.192.6\u7db2\u57df\u7531dns.socket.idv.tw\u4f3a\u670d\u5668\u7ba1\u7406
admin.dns.socket.idv.tw. (
1;
10800;
3600;
604800;
86400 );
6.192.192.in-addr.arpa. IN NS dns.socket.idv.tw. \/\/192.192.6\u7db2\u57df\u7684dns\u4f3a\u670d\u5668\u662fdns.socket.idv.tw
2.6.192.192.in-addr.arpa. IN PTR www.socket.idv.tw. \/\/\u8a2d\u5b9a192.192.6.2\u7684ip\u7db2\u57df\u540d\u7a31\u70bawww.socket.idv.tw
3.6.192.192.in-addr.arpa. IN PTR dns.socket.idv.tw.<\/p>\n\n\n\n
$TTL 86400
0.0.127.in-addr.arpa. IN SOA dns.socket.idv.tw. admin.dns.socket.idv.tw. (
1;
10800;
3600;
604800;
86400);
0.0.127.in-addr.arpa. IN NS dns.socket.idv.tw.
1.0.0.127.in-addr.arpa. IN PTR loc
root\u6a94<\/strong>\uff1a\u6700\u4e0a\u5c64dns\u4f3a\u670d\u5668\u6e05\u55ae\uff0c\u9700\u4e0a\u7db2\u4e0b\u8f09\uff0c\u5982ftp.rs.inernic.net\/domain\/db.cache
……………………………………………..<\/p>\n\n\n\n
\/usr\/local\/bind\/etc\/named.conf \/\/bind9\u7684\u7d44\u614b\u6a94\u53ef\u80fd\u4f4d\u7f6e
\/etc\/named.conf \/\/bind8\u7684\u7d44\u614b\u6a94\u53ef\u80fd\u4f4d\u7f6e
\/\/\u8a2d\u5b9a\u8cc7\u6599\u6a94\u6240\u5728\u76ee\u9304<\/strong>
options{
directory “\/usr\/local\/bind\/etc”; \/\/\u6307\u5b9a\u5f9e\/usr\/local\/bind\/etc\u76ee\u9304\u53d6\u51fa\u8cc7\u6599\u6a94
};
\/\/\u8b80\u53d6\u6839\u8f44\u5340\u6a94<\/strong>
zone “.” in {
type hint;
file “db.cache”; \/\/\u8b80\u53d6db.cache\u7684root\u6a94
};
\/\/\u8b80\u53d6\u666e\u901a\u8f44\u5340\u6a94<\/strong>
zone “socket.idv.tw” in{ \/\/\u7ba1\u7406\u7684\u7db2\u57df\u662fsocket.idv.tw
type master;
file “db.socket.idv.tw”; \/\/\u8a2d\u5b9asocket.idv.tw\u7db2\u57df\u7684\u6b63\u89e3\u6a94\u662fdb.socket.idv.tw
};
zone “6.192.192.in-addr-arpa” in{
type master;
file “db.192.192.6”; \/\/\u8a2d\u5b9a192.192.6\u7db2\u57df\u7684\u53cd\u89e3\u6a94\u662fdb.192.192.6
};
zone “0.0.127.in-addr-arpa” in{
type master;
file “db.127.0.0”; \/\/\u8a2d\u5b9a127.0.0\u7db2\u57df\u7684\u53cd\u89e3\u6a94\u662fdb.127.0.0
};<\/p>\n\n\n\n
master:\u4e3b\u8981\u4f3a\u670d\u5668
slave:\u6b21\u8981\u4f3a\u670d\u5668,\u6703\u548cmaster\u505azone transfer\u5b9a\u671f\u8907\u88fd\u8cc7\u6599
stub:\u53ea\u8907\u88fdmaster\u7684ns\u8a18\u9304
hint:\u8868\u793aroot\u4f3a\u670d\u5668
forwarder:\u5c07client\u8981\u6c42\u8f49\u9001\u5230\u5176\u4ed6dns<\/p>\n\n\n\n
dump-file<\/strong> \u6307\u5b9adns cache\u8981\u5b58\u653e\u5728\u90a3\u4e00\u500b\u6a94\u6848
statistics-file<\/strong> \u6307\u5b9adns\u7d71\u8a08\u8cc7\u6599\u8981\u5beb\u5165\u90a3\u500b\u6a94\u6848
pid-file<\/strong> \u6307\u5b9anamed pid
forward-only<\/strong> \u53ea\u5141\u8a31\u8f49\u9001
forwarders<\/strong> \u6307\u5b9a\u67e5\u8a62\u6642\u8981\u554f\u90a3\u500bmaster dns
allow-query{ address }<\/strong> \u662f\u5426\u5141\u8a31\u7528\u6236\u7aef\u67e5\u8a62,\u4e5f\u5c31\u662f\u8a2d\u5b9aacl
address\u5e38\u898b\u683c\u5f0f\u70ba
1\u5141\u8a31\u6240\u6709client\u67e5\u8a62
\u3000allow-query{ any; };
2\u642d\u914dtrusted\u8a2d\u5b9a\u53ef\u67e5\u8a62\u7684\u540d\u55ae
\u3000acl “trusted” {
\u3000localhost;
\u3000203.71.0.0\/16;
\u3000};
\u3000allow-query{ trusted; }
3\u6307\u5b9a\u53ef\u67e5\u8a62\u7684\u540d\u55ae
\u3000allow-query{ localhost;10.10.10.0\/24;};
\u6b64\u9805\u76ee\u4e5f\u53ef\u7528\u5728\u7279\u5b9a\u8f44\u5340,\u5982\u4e0b
zone “systw.net” {
allow-query { address }
}
allow-transfer<\/strong>{ address } \u662f\u5426\u5141\u8a31zone transfer,\u7528\u4f86\u8a2d\u5b9aslave dns
1\u82e5\u70bamaster\u901a\u5e38\u5982\u4e0b\u8a2d\u5b9a
\u3000allow-transfer{slavednsip1;,slavedns2;,…};
2\u82e5\u70baslave\u4e14\u4e0b\u9762\u4e5f\u6c92\u4efb\u4f55dns,\u901a\u5e38\u5982\u4e0b\u8a2d\u5b9a,\u5426\u5247\u6703\u5c0d\u5927\u5bb6\u958b\u653etransfer
<\/strong>\u3000allow-transfer{none;};<\/strong><\/p>\n\n\n\n
\u5b89\u88dd\u4e26\u6e2c\u8a66dns server\u662f\u5426\u67b6\u8a2d\u6210\u529f<\/strong>
1,\u9023\u5230ftp.rs.internic.net(\u8f38\u5165anonymous,\u53caemail\u7576\u5bc6\u78bc\u5f8c\u9032\u5165domain\u76ee\u9304)\u6216\u5176\u4ed6\u5730\u65b9\uff0c\u4e0b\u8f09db.cache(root\u6839\u8cc7\u6599\u6a94)
2,\u5c07db.cache\u8907\u88fd\u5230named.conf\u5167\u6240\u6307\u5b9a\u76ee\u9304\uff0c\u4e26\u91cd\u555fdns server
3,\u6253nslookup\u5f8c\uff0c\u4e0bserver dnsserver\u76ee\u524dip(server\u6307\u4ee4\u7528\u4f86\u8a2d\u5b9a\u9810\u8a2ddns\u4e3b\u6a5f)
4,\u8f38\u5165\u5404\u7db2\u57df\uff0c\u82e5\u5f97\u5230\u5c0d\u61c9\u4f4d\u7f6e\u8868\u793adnsserver\u67b6\u8a2d\u6210\u529f
ps:\u91cd\u555fbind\u6642,\u82e5\u7a0b\u5f0f\u6709\u554f\u984c\u624d\u6703\u7121\u6cd5\u555f\u52d5,\u82e5\u7d44\u614b\u8a2d\u932f\u662f\u53ef\u4ee5\u555f\u52d5\u7684,\u56e0\u6b64\u555f\u52d5\u5f8c\u9084\u9700\u9a57\u8b49\u7d44\u614b\u662f\u5426\u6b63\u5e38\u904b\u4f5c<\/p>\n\n\n\n
1\u5728zone file\u5167\u4fee\u6539\u6b32\u66f4\u65b0\u7684ip\u548c\u7db2\u57df
2\u66f4\u6539zone file\u7684\u5e8f\u865f
3\u91cd\u65b0dns
ps:\u5728unix\u4e2d,\u53ef\u57f7\u884ckill -1 < dns process id><\/p>\n\n\n\n
named\u555f\u52d5\u5f8c,\u8b8a\u66f4\u5176uid\u6216gid\u5c07\u6b0a\u9650\u8a2d\u70ba\u6700\u5c0f
ex:
\u5c07named\u7684\u64c1\u6709\u8005\u8b8a\u70ba\u4f7f\u7528\u8005bind
named -u bind
ps:named.conf\u53ea\u6703\u5728\u555f\u52d5\u6642\u8b80\u53d6\u4e00\u6b21,\u4f46\u8f44\u5340\u8cc7\u6599\u6a94\u53ef\u80fd\u6703\u88ab\u8b80\u53d6\u591a\u6b21,\u56e0\u6b64\u8f44\u5340\u8cc7\u6599\u6a94\u7684\u6b0a\u9650\u5fc5\u9808\u78ba\u5b9a\u4f7f\u7528\u8005bind\u53ef\u8b80\u53d6<\/p>\n\n\n\n
\u5728named.conf\u7684option\u4e2d\u8a2d\u5b9aversion none<\/strong> ,\u4f7f\u7528dig\u6642\u4e0d\u6703\u986f\u793a\u7248\u672c\u8cc7\u8a0a,\u53ef\u907f\u514d\u88ab\u653b\u64ca\u8005\u77e5\u9053\u7248\u672c<\/p>\n\n\n\n
allow-transfer\u9810\u8a2d\u5141\u8a31\u4efb\u4f55\u4f86\u6e90\u8981\u6c42\u8cc7\u6599\u50b3\u9001
\u82e5dns\u7368\u7acb\u904b\u4f5c
\u5247\u5728named.conf\u7684option\u9700\u8a2d\u5b9aallow-transfer {none;};\u62d2\u7d55\u6240\u6709\u4e3b\u6a5f\u8981\u6c42\u8cc7\u6599\u50b3\u9001
\u82e5dns\u70bamaster\/slave\u67b6\u69cb
\u5728master,named.conf\u7684option\u9700\u65bcallow-transfer\u6307\u5b9aslave\u4e3b\u6a5f
\u5728slave,named.conf\u7684option\u9700\u8a2d\u5b9aallow-transfer {none;};\u62d2\u7d55\u6240\u6709\u4e3b\u6a5f\u8981\u6c42\u8cc7\u6599\u50b3\u9001
<\/p>\n\n\n\n
\u5c07dns\u8a2d\u5b9a\u70ba\u516c\u4f48\u7528\u53ca\u89e3\u6790\u7528
advertising(\u516c\u4f48\u7528)dns<\/strong>
\u8ca0\u8cac\u56de\u61c9internet\u975e\u905e\u8ff4\u7684\u8a62\u554f\u8981\u6c42
\u5b89\u5168\u8a2d\u5b9a:\u9700\u95dc\u9589\u905e\u8ff4\u529f\u80fd,ex:\u5728option\u5167\u8a2d\u5b9arecursion no;
resolving(\u89e3\u6790\u7528)dns<\/strong>
\u8ca0\u8cac\u56de\u61c9client\u6216\u5176\u4ed6dns\u505a\u905e\u8ff4\u7684\u8a62\u554f\u8981\u6c42
\u5b89\u5168\u8a2d\u5b9a:\u9700\u9650\u5236\u67e5\u8a62,ex:\u5728option\u5167\u8a2d\u5b9aquery-allow
\u6574\u5408\u516c\u4f48\u7528\u53ca\u89e3\u6790\u7528dns<\/strong>
bind9\u53ef\u4f7f\u7528allow-recursion
ex:
\u8a2d\u5b9a10.0.0.0\u53ef\u4ee5\u4f7f\u7528\u905e\u8ff4\u67e5\u8a62(\u89e3\u6790\u7528dns),\u4e14\u5916\u7db2\u4e5f\u53ef\u975e\u905e\u8ff4\u67e5\u8a62systw.net(\u516c\u4f48\u7528dns)
acl “trust” {
10.0.0.0;
};
option{
directory “\/var\/named”;
allow-recursion { “trust”; };
}
zone “systw.net” {
type master;
file “db.systw.net”;
}<\/p>\n\n\n\n
\u9650\u5236query\u8981\u6c42
<\/strong>\u5728named.conf\u7684option\u4e2d\u8a2d\u5b9aallow-query<\/p>\n","protected":false},"excerpt":{"rendered":"