DNS2

发布时间:2020-07-30 02:46:53 作者:Taxing祥
来源:网络 阅读:265

访问主机用户过多,开启分机减轻负担
主机
zone "taxing.com" IN {
        type master;
        file "taxing.com.zone";
        allow-update { none; };
        allow-transfer {172.25.254.224;};
从机
zone "taxing.com" IN {
        type slave;
        masters {172.25.254.124;};
        file "slaves/taxing.com.zone";
        allow-update { none; };
时时同步
主机
vim /var/namedtaxing.com.zone
$TTL 1D
@       IN SOA  dns.taxing.com. root.taxing.com. (
                                        201611261       ; serial        #
最大为十位  文件在更新时查看比较的值,不同则更新 (rm -rf /var/name/slaves/taxing.com.zone; systemctl restart named)
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      dns
dns     A       172.25.254.124
www     A       172.25.254.138
~                 
每次修改ip的时候都要修改serial值

vim /etc/name.rfc1912.zones
zone "taxing.com" IN {
        type master;
        file "taxing.com.zone";
        allow-update { none; };
        allow-transfer {172.25.254.224;};
        also-notify {172.25.254.224;};     ##
修改完通知从机
};
远程控制修改
客户端
setenforce 0
[root@localhost slaves]# nsupdate
> server 172.25.254.124
> update delete www.taxing.com
> update add www.taxing.com 86400 A 172.25.254.138   #86400s
缓存时间
> send
> quit
主机
setenforc 0
vim /etc/named.rfc1912.zones
zone "taxing.com" IN {
        type master;
        file "taxing.com.zone";
        allow-update { 172.25.254.224; };
};
chmod 770 /var/name/
reboot
后会同步更新后的内容,先备份cp -p taxing.com.zone /mnt 重起后再删除taxing.com.zone.jnl 和已经同步了的taxing.com.zone 把备份了的taxing.com.zone 复制回来 cp -p /mnt/taxing.com.zone .
密钥匙认证

主机
 dnssec-keygen -a HMAC-MD5 -b 128 -n HOST taxing
cat Ktaxing.+157+22634.key
cat Ktaxing.+157+22634.private
cp -p /etc/rndc.key /etc/taxing.key
vim /etc/taxing.key
key "taxing" {
        algorithm hmac-md5;
        secret "YtJ6Y7kyfL5moClanMIS6Q==";
};

vim /etc/named.rfc1912.zones
zone "taxing.com" IN {
        type master;
        file "taxing.com.zone";
        allow-update { key taxing; };
};

systemctl restart named
scp Ktaxing.+157+22634.* root@172.25.254.224:/mnt/

客户机
[root@localhost mnt]# nsupdate -k Ktaxing.+157+22634.private
> server 172.25.254.124
> update delete www.taxing.com
> send
> quit

花生壳动态dhcp DNS获取
主机
vim /etc/dhcp/dhcpd.conf
# Use this to enble / disable dynamic dns updates globally.
ddns-update-style interim;
subnet 172.25.254.0 netmask 255.255.255.0 {
  range 172.25.254.224 172.25.254.242;
  option routers 172.25.254.124;
}
key taxing {
        algorithm hmac-md5;
        secret YtJ6Y7kyfL5moClanMIS6Q==;
        };
zone taxing.com.{
        primary 127.0.0.1;
    key taxing;
    }
vim /var/name/taxing.com.zone
                                                            41,1-8        90%
客户端
打开动态获取dhcp

hostnamectl set-hostname timo.taxing.com

dig timo.taxing.com

gnome-screenshot -a    #截图


 

推荐阅读:
  1. 用户与用户组管理
  2. 10g/11g创建scott样例用户

免责声明:本站发布的内容(图片、视频和文字)以原创、转载和分享为主,文章观点不代表本网站立场,如果涉及侵权请联系站长邮箱:is@yisu.com进行举报,并提供相关证据,一经查实,将立刻删除涉嫌侵权内容。

用户 file master

上一篇:spark调优

下一篇:提升60%基础资源利用率!中国联通的容器化大数据平台实践

相关阅读

您好,登录后才能下订单哦!

密码登录
登录注册
其他方式登录
点击 登录注册 即表示同意《亿速云用户服务条款》