主从实验做法

主服务器配置 --192.168.165.100

[root@server ~]# dnf install bind -y

[root@server ~]# vim /etc/named.conf

10 options {
11 listen-on port 53 { any; };
12 listen-on-v6 port 53 { any; };
13 directory "/var/named";
14 dump-file "/var/named/data/cache_dump.db";
15 statistics-file "/var/named/data/named_stats.txt";
16 memstatistics-file "/var/named/data/named_mem_stats.txt";
17 secroots-file "/var/named/data/named.secroots";
18 recursing-file "/var/named/data/named.recursing";
19 allow-query { any; };
20 forward only;
21 forwarders{8.8.8.8;};

34 dnssec-validation no;

[root@server ~]# vim /etc/named.rfc1912.zones

[root@server ~]# cd /var/named
[root@server named]# cp -a named.localhost peihua.cn.zone

cp：是否覆盖'peihua.cn.zone'？ y

[root@server named]# vim peihua.cn.zone

[root@slave ~]# systemctl restart named
[root@slave ~]# systemctl enable named

从服务器配置--192.168.165.101

[root@slave ~]# dnf install bind -y

[root@slave ~]# vim /etc/named.conf

11 listen-on port 53 { any; };
12 listen-on-v6 port 53 { any; };
13 directory "/var/named";
14 dump-file "/var/named/data/cache_dump.db";
15 statistics-file "/var/named/data/named_stats.txt";
16 memstatistics-file "/var/named/data/named_mem_stats.txt";
17 secroots-file "/var/named/data/named.secroots";
18 recursing-file "/var/named/data/named.recursing";
19 allow-query { any; };

33 dnssec-validation no;

[root@slave ~]# systemctl restart named
[root@slave ~]# systemctl enable named

验证：客户端--192.168.165.200

[root@client ~]# nslookup www.peihua.cn 192.168.165.100

Server: 192.168.165.100
Address: 192.168.165.100#53

Name: www.peihua.cn
Address: 192.168.165.10
Name: www.peihua.cn
Address: ::1

[root@client ~]# nslookup www.peihua.cn 192.168.165.101

Server: 192.168.165.101
Address: 192.168.165.101#53

Name: www.peihua.cn
Address: 192.168.165.10
Name: www.peihua.cn
Address: ::1