09-02 搭建并实现智能DNS-CFANZ编程社区

09-02 搭建并实现智能DNS

1.环境

名称	IP	DNS
node1 DNS服务器	192.168.100.11 / 10.0.0.11	-
node2 北京客户端	192.168.100.13	192.168.100.11
node3 上海客户端	10.0.0.13	10.0.0.11
node4 Web服务器1	192.168.100.15	-
node5 Web服务器2	10.0.0.15	-

如下图所示：

09-02 搭建并实现智能DNS_vim

2.DNS服务器配置

2.1 修改配置

[root@node1 ~]# yum install  -y bind
[root@node1 ~]# vim /etc/named.conf 
# acl访问控制列表（地址集合表）写上面
acl beijing{
        192.168.100.0/24;
};

acl shanghai{
        10.0.0.0/24;
};

acl other{
        any;
};

# 注释掉
#listen-on port 53 { 127.0.0.1; };
#allow-query     { localhost; };

# 尾部写view
view beijingview {
        match-clients { beijing;};
        include "/etc/named.rfc1912.zones.bj";
};
view shanghaiview {
        match-clients { shanghai;};
        include "/etc/named.rfc1912.zones.sh";
};
view otherview {
        match-clients { other;};
        include "/etc/named.rfc1912.zones.other";
};
#删除原有include "/etc/named.rfc1912.zones 保留include "/etc/named.root.key";

2.2 区域配置文件

[root@node1 ~]# vim /etc/named.rfc1912.zones.bj
zone "." IN {
  type hint;
  file "named.ca";
};
zone "feifa.cn" {
  type master;
  file "feifa.cn.zone.bj";
};
[root@node1 ~]# vim /etc/named.rfc1912.zones.sh
zone "." IN {
  type hint;
  file "named.ca";
};
zone "feifa.cn" {
  type master;
  file "feifa.cn.zone.sh";
};
[root@node1 ~]# vim /etc/named.rfc1912.zones.other 
zone "." IN {
  type hint;
  file "named.ca";
};
zone "feifa.cn" {
  type master;
  file "feifa.cn.zone.other";
};
#修改权限
[root@node1 ~]# chgrp named /etc/named.rfc1912.zones.*

2.3 区域数据库文件

[root@node1 ~]# cp -p /var/named/named.localhost /var/named/feifa.cn.zone.bj
[root@node1 ~]# cp -p /var/named/named.localhost /var/named/feifa.cn.zone.sh
[root@node1 ~]# cp -p /var/named/named.localhost /var/named/feifa.cn.zone.other
[root@node1 ~]# vim /var/named/feifa.cn.zone.bj
$TTL 1D
@       IN SOA   master admin.feifa.cn (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      master
master  A       10.0.0.11
websrv  A       192.168.100.15
www     CNAME   websrv
[root@node1 ~]# vim /var/named/feifa.cn.zone.sh
$TTL 1D
@       IN SOA   master admin.feifa.cn (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      master
master  A       10.0.0.11
websrv  A       10.0.0.15
www     CNAME   websrv
[root@node1 ~]# vim /var/named/feifa.cn.zone.other 
$TTL 1D
@       IN SOA   master admin.feifa.cn (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      master
master  A       10.0.0.11
websrv  A       127.0.0.1
www     CNAME   websrv

#赋权、检查配置、启动（加载配置rndc reload）
[root@node1 ~]# chgrp named /var/named/feifa.cn.zone.*
[root@node1 ~]# named-checkconf
[root@node1 ~]# systemctl restart named

3.创建web服务

# 这里只创建了2台服务器other没创建
[root@node4 ~]# yum -y install httpd
[root@node4 ~]# echo www.feifa.cn in BeiJing > /var/www/html/index.html
[root@node4 ~]# systemctl start httpd

[root@node5 ~]# yum -y install httpd
[root@node5 ~]# echo www.feifa.cn in ShangHai > /var/www/html/index.html
[root@node5 ~]# systemctl start httpd

4.客户端测试

[root@node2 ~]# curl www.feifa.cn
www.feifa.cn in BeiJing

[root@node3 ~]# curl www.feifa.cn
www.feifa.cn in ShangHai