DNS主从同步
安装软件
主配置中完成DNS解析:192.168.131.134
[root@localhost ~]# mount /dev/sr0 /mnt
[root@localhost ~]# vim /etc/yum.repos.d/myrepo.repo
[base]
name=base
baseurl=/mnt/BaseOS
gpgchcek=0
enable=1
[base2]
name=base2
baseurl=/mnt/AppStream
gpgchcek=0
enable=1 //cat /etc/yum.repos.d/myrepo.repo可查看仓库
[root@localhost ~]# yum install bind -y
[root@localhost ~]# systemctl start named
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
allow-query { any; };
allow-transfer { 192.168.5.135; }; #转发给哪个从dns
}
zone "deng.com" IN {
type master;
file "named.deng.com";
};
zone "131.168.192.in-addr.arpa" IN {
type master;
file "named.192.168.131.zone";
};
[root@localhost ~]# cp -a /var/named/named.localhost /var/named/named.deng.com
[root@localhost ~]# cp -a /var/named/named.localhost /var/named/named.192.168.131.zone
[root@localhost ~]# vim /var/named/named.deng.com
[root@localhost ~]# vim /var/named/named.192.168.131.zone
[root@localhost ~]# systemctl restart named
[root@localhost ~]# systemctl stop firewalld
从配置:192.168.131.135
[root@localhost ~]# yum install bind -y
(若安装有问题则:# rpm --import /mnt/RPM-GPG-KEY-redhat-*)
[root@localhost ~]# systemctl start named
[root@localhost ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
directory "/var/named";
allow-query { any; };
}
zone "deng.com." IN {
type slave;
masters{192.168.131.134;};
file "slaves/named.deng.com";
};
zone "131.168.192.in-addr.arpa" IN {
type slave;
masters { 192.168.5.129; };
file "slaves/named.192.168.5.zone";
};
[root@localhost ~]# systemctl restart named
[root@localhost ~]# systemctl stop firewalld
测试:
主
[root@localhost ~]# nslookup www 192.168.131.135
Server: 192.168.131.135
Address: 192.168.131.135#53
** server can't find www: NXDOMAIN
从
[root@localhost ~]# nslookup xixi.deng.com 192.168.131.134
Server: 192.168.131.134
Address: 192.168.131.134#53
Name: xixi.deng.com
Address: 192.168.131.135
增量传输:
增量同步
主:
[root@localhost ~]#vim /var/named/named.deng.com
1 ; serial
[root@localhost ~]# vim /var/named/named.192.168.131.zone
1 ; serial
[root@localhost ~]# systemctl restart named
从:
手动增量同步
[root@localhost ~]# rndc refresh 131.168.192.in-addr.arpa
zone refresh queued
[root@localhost ~]# rndc refresh deng.com
zone refresh queued