bind

发表于 | 分类于 |

bind开源的dns授权、缓存、转发、授权服务器，以其稳定性及功能丰富性，为广大dns厂商所青睐。

安装依赖

1
yum -y install gcc openssl-devel perl-devel

下载源码

1
https://www.isc.org/downloads/

编译安装

1
2
3
4
5
tar -xf bind-9.11.3.tar.gz
cd bind-9.11.3
./configure --prefix=/export/bind-9.11.3
make -j
make install

生成配置

1
2
3
4
1.rndc.conf
/export/bind-9.11.3/sbin/rndc-confgen > /export/bind-9.11.3/etc/rndc.conf 
2.named.conf
tail -n 10 /export/bind-9.11.3/etc/rndc.conf | head -n 9 | sed 's/#\ //g' > /export/bind-9.11.3/etc/named.conf

修改配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
# vim /export/bind-9.11.3/etc/named.conf 
...... 
options { 
directory "/export/bind-9.11.3/data"; 
pid-file "/export/bind-9.11.3/var/run/named.pid"; 
allow-query { any; };
recursion yes; 
notify yes; 
forwarders { 8.8.8.8; };
forward first; 
}; 

acl "tom" {
localhost;
192.168.2.9;
};

view netcom {
    match-clients { tom; };
    zone "." IN { 
        type hint; 
        file "db.ca";
     };
    zone "yourdomain.com" IN {
        type master;
        file "db.yourdomain.com";
    };
    zone "10.168.192.in-addr.arpa" IN { 
        type master; 
        file "db.192.168.10"; 
   }; 
}; 

logging{ 
channel default_log {file "/export/bind-9.11.3/log/default.log" versions 10 size 100m; severity info; print-time yes; print-severity yes; print-category yes; }; 
channel general_log {file "/export/bind-9.11.3/log/general.log" versions 10 size 100m; severity info; print-time yes; print-severity yes; print-category yes; }; 
channel query_log {file "/export/bind-9.11.3/log/query.log" versions 10 size 100m; severity info; print-time yes; print-severity yes; print-category yes; }; 
category default { default_log; };
category general { general_log; };
category queries { query_log; }; 
};

创建文件夹

1
2
mkdir -p /export/bind-9.11.3/data
mkdir -p /export/bind-9.11.3/log

配置根解析

1
dig > /export/bind-9.11.3/data/db.ca

配置正向解析

1
2
3
4
5
6
7
8
9
10
11
12
13
14
#vim /export/bind-9.11.3/data/db.yourdomain.com 
$TTL 86400 
@ IN SOA dns1.yourdomain.com. root.localhost. ( 
2017042011 ;Serial 
3H ;Refresh 
15M ;Retry 
1W ;Expiry 
1D ) ;Minimum 

@ IN NS dns1.yourdomain.com. 
dns1 IN A 192.168.10.10 
mail IN A 192.168.10.11
www IN A 192.168.10.12 
dell IN CNAME www

配置反向解析

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# vim /export/bind-9.11.3/data/db.192.168.10 
$TTL 86400 
@ IN SOA dns1.yourdomain.com. root.localhost. ( 
2017042011 ;Serial 
3H ;Refresh 
15M ;Retry 
1W ;Expiry 
1D ) ;Minimum 

@ IN NS dns1.yourdomain.com. 
10 IN PTR dns1.yourdomain.com. 
11 IN PTR mail.yourdomain.com. 
12 IN PTR www.yourdomain.com. 
12 IN PTR dell.yourdomain.com.

zone文件检查

1
/export/bind-9.11.3/sbin/named-checkzone /export/bind-9.11.3/data/db.yourdomain.com

config文件检查

1
/export/bind-9.11.3/sbin/named-checkconf  /export/bind-9.11.3/etc/named.conf

前台启动

1
/export/bind-9.11.3/sbin/named -c /export/bind-9.11.3/etc/named.conf -g

服务化

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
#vi /etc/systemd/system/named.service
[Unit]
Description=Berkeley Internet Name Domain (DNS)
Wants=nss-lookup.target
Before=nss-lookup.target
After=network.target

[Service]
Type=forking
Environment=NAMEDCONF=/export/bind-9.11.3/etc/named.conf
PIDFile=/run/named/named.pid

ExecStartPre=/bin/bash -c 'if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /export/bind-9.11.3/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi'
ExecStart=/export/bind-9.11.3/sbin/named -u named -c ${NAMEDCONF} $OPTIONS

ExecReload=/bin/sh -c '/export/bind-9.11.3/sbin/rndc reload > /dev/null 2>&1 || /bin/kill -HUP $MAINPID'

ExecStop=/bin/sh -c '/export/bind-9.11.3/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID'

PrivateTmp=true

[Install]
WantedBy=multi-user.target

服务启停

1
2
3
4
5
systemctl enable named  # 建立/etc/systemd/system/软链
systemctl daemon-reload # 配置文件生效
systemctl start named
systemctl reload named
systemctl stop named