利用view实现智能DNS

需要五台主机

DNS主服务器和web服务器1：10.0.0.8/24，172.16.0.8/16

web服务器2：10.0.0.7/24

web服务器3：172.16.0.7/16

DNS客户端1：10.0.0.6/24

DNS客户端2：172.16.0.6/16

前提准备

关闭SElinux

关闭防火墙

时间同步

实现步骤：

1、DNS 服务器的网卡配置

#配置两个IP地址

#eth0：10.0.0.8/24

#eth1: 172.16.0.8/16

2、主DNS服务端配置文件实现 view

yum install bind -y

vim /etc/named.conf

#在文件最前面加下面行

acl beijingnet {

10.0.0.0/24;

};

acl shanghainet {

172.16.0.0/16;

};

acl othernet {

any;

};

#注释掉下面两行

// listen-on port 53 { 127.0.0.1; };

// allow-query { localhost; };

#其它略

# 创建view

logging {                                                                                  

        channel default_debug {

                file "data/named.run";

                severity dynamic;

        };

};

view    beijingview {

    match-clients   { beijingnet;};

    include "/etc/named.rfc1912.zones.bj";

};

view    shanghaiview {

    match-clients   { shanghainet;};

    include "/etc/named.rfc1912.zones.sh";

};

view    otherview {

    match-clients   { othernet;};

    include "/etc/named.rfc1912.zones.other";

};

include "/etc/named.root.key";

3、实现区域配置文件

vim /etc/named.rfc1912.zones.bj

zone "." IN {                                                                              

type hint;

file "named.ca";

};

zone "magedu.org" {

type master;

file "magedu.org.zone.bj";

};

vim /etc/named.rfc1912.zones.sh    

zone "." IN {                                                                              

type hint;

file "named.ca";

};

zone "magedu.org" {

type master;

file "magedu.org.zone.sh";

};

vim /etc/named.rfc1912.zones.other

zone "." IN {                                                                              

type hint;

file "named.ca";

};

zone "magedu.org" {

type master;

file "magedu.org.zone.other";

};

chgrp named /etc/named.rfc1912.zones.bj

chgrp named /etc/named.rfc1912.zones.sh

chgrp named /etc/named.rfc1912.zones.other

4、创建区域数据库文件

vim /var/named/magedu.org.zone.bj

$TTL 1D

@ IN SOA master admin.magedu.org. (

            2019042214 ; serial

            1D ; refresh

            1H ; retry

            1W ; expire

            3H ) ; minimum

        NS master

master  A   10.0.0.8

websrv  A   10.0.0.7

www CNAME   websrv        };

vim /var/named/magedu.org.zone.sh 

$TTL 1D

@ IN SOA master admin.magedu.org. (

            2019042214 ; serial

            1D ; refresh

            1H ; retry

            1W ; expire

            3H ) ; minimum

        NS master

master  A   10.0.0.8

websrv  A    172.16.0.7

www CNAME   websrv  

vim /var/named/magedu.org.zone.other

$TTL 1D

@ IN SOA master admin.magedu.org. (

            2019042214 ; serial

            1D ; refresh

            1H ; retry

            1W ; expire

            3H ) ; minimum

        NS master

master  A   10.0.0.8

websrv  A   127.0.0.1

www CNAME   websrv  

chgrp named /var/named/magedu.org.zone.bj

chgrp named /var/named/magedu.org.zone.sh

chgrp named /var/named/magedu.org.zone.other

systemctl start named #第一次启动服务

rndc reload #不是第一次启动服务

5、实现位于不同区域的三个WEB服务器

#分别在三台主机上安装http服务

#在web服务器1：10.0.0.8/24实现

yum install httpd

echo www.magedu.org in Other > /var/www/html/index.html

systemctl start httpd

#在web服务器2：10.0.0.7/16

echo www.magedu.org in Beijing > /var/www/html/index.html

systemctl start httpd

#在web服务器3：172.16.0.7/16

yum install httpd

echo www.magedu.org in Shanghai > /var/www/html/index.html

systemctl start httpd

6、客户端测试

#分别在三台主机上访问

#DNS客户端1：10.0.0.6/24 实现，确保DNS指向10.0.0.8

curl www.magedu.org

www.magedu.org in Beijing

#DNS客户端2：172.16.0.6/16 实现，确保DNS指向172.16.0.8

curl www.magedu.org

www.magedu.org in Shanghai

#DNS客户端3：10.0.0.8 实现，，确保DNS指向127.0.0.1

curl www.magedu.org

www.magedu.org in Other