6.3部署从服务器

主服务器IP地址：192.168.10.2

从服务器IP地址 ： 192.168.10.7 

1.在主服务器的区域配置文件中允许该从服务器的更新请求

zone "dsrw.com" IN {
         type master;
         file "dsrw.com.zone";
         allow-update { 192.168.10.7; };
};

zone "10.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.10.arpa";
        allow-update { 192.168.10.7; };
};

2.重启主服务器的DNS服务程序

[root@dsrw named]# systemctl restart named
[root@dsrw named]# systemctl enable named

3.配置主服务器上配置防火墙规则

root@dsrw named]# iptables -F
[root@dsrw named]# iptables-save 
# Generated by xtables-save v1.8.2 on Thu Dec 22 22:24:26 2022
*filter
[root@dsrw named]# firewall-cmd --permanent --zone=public --add-service=dns
success
[root@dsrw named]# firewall-cmd --reload 
success

4.在从服务器上安装bind-chroot软件包

[root@dsrw ~]# dnf install bind-chroot
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Last metadata expiration check: 0:00:13 ago on Thu 22 Dec 2022 10:26:59 PM CST.
Dependencies resolved.
================================================================================
 Package           Arch         Version                   Repository       Size
================================================================================
Installing:
 bind-chroot       x86_64       32:9.11.4-16.P2.el8       AppStream        99 k
Installing dependencies:
 bind              x86_64       32:9.11.4-16.P2.el8       AppStream       2.1 M

5.配置从服务器主配置文件

[root@dsrw ~]# vim /etc/named.conf
options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        secroots-file   "/var/named/data/named.secroots";
        recursing-file  "/var/named/data/named.recursing";
        allow-query     { any; };

6.在从服务器中配置区域信息，然后重启服务

[root@dsrw ~]# vim /etc/named.rfc1912.zones
zone "dsrw.com" IN {
         type slave;
         masters {192.168.10.2;};
         file "slaves/dsrw.com.zone";
};

zone "10.168.192.in-addr.arpa" IN {
        type slave;
        masters {192.168.10.2;};
        file "slaves/192.168.10.arpa";

};
[root@dsrw ~]# systemctl restart named
[root@dsrw ~]# systemctl enable named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.
配置从服务器dns服务器地址为本机地址，当从服务器的DNS服务程序在重启后，同步了主服务器上数据配置文件。

[root@dsrw ~]# cd /var/named/slaves
[root@dsrw slaves]# ls
192.168.10.arpa  dsrw.com.zone
[root@dsrw var]# nslookup www.dsrw.com
Server:		192.168.10.7
Address:	192.168.10.7#53

Name:	www.dsrw.com
Address: 192.168.10.2

[root@dsrw var]# nslookup 192.168.10.2
2.10.168.192.in-addr.arpa	name = www.dsrw.com.
2.10.168.192.in-addr.arpa	name = ns.dsrw.com.
> 192.168.10.2
2.10.168.192.in-addr.arpa	name = www.dsrw.com.
2.10.168.192.in-addr.arpa	name = ns.dsrw.com.

8.增加主服务器正反向数据配置文件记录，重启服务

[root@dsrw named]# vim dsrw.com.zone
$TTL 1D
@       IN SOA  dsrw.com. root.dsrw.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.dsrw.com.
ns IN A 192.168.10.2
www IN A 192.168.10.2
mail IN A 192.168.10.7

[root@dsrw named]# vim 192.168.10.arpa
$TTL 1D
@       IN SOA  dsrw.com. root.dsrw.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      ns.dsrw.com.
ns      A       192.168.10.2
2       PTR     ns.dsrw.com.
2       PTR     www.dsrw.com.
7       PTR     mail.dsrw.com.


[root@dsrw named]# systemctl restart named
[root@dsrw named]# systemctl enable named

9.测试新的记录

[root@dsrw slaves]# nslookup 
> 192.168.10.7
7.10.168.192.in-addr.arpa	name = mail.dsrw.com.
> mail.dsrw.com
Server:		192.168.10.2
Address:	192.168.10.2#53

Name:	mail.dsrw.com
Address: 192.168.10.7