DNS分离解析

DNS分离解析(视图解析)

.当收到客户机的DNS查询请求的时候
—能够区分客户机的来源地址
—为不同类别的客户机提供不一样的解析结果(IP地址)
用于CDN技术

语法结构:编写/etc/named.conf 配置文件(在原先的配置文件中,添加两行配置信息)

view “名称” { #分类名称,{ 不要忘记写!!!!
match-clients { ip地址;..;..;any; }; #匹配客户端来源, match-clients
可以在man named.conf 中,/view 查找
zone “XX.com” IN {
type master;
file “XXXX.zone”;
};
};
=========================================

案例: 客户端A:192.168.4.20,通过DNS服务器(192.168.4.1),访问www.tedu.cn ,解析到的IP地址是192.168.4.100;
其他客户机,通过DNS服务器(192.168.4.1),访问www.tedu.cn, 解析到的IP地址是192.168.4.101;

vim /etc/named.conf

optinos {
directory “/var/named”
};
view “tedu” {
match-clients { 192.168.4.20; };
zone “tedu.cn” IN {
type master;
file “tedu.cn.zone”;
};
};
view “other” {
match-clients { any; };
zone “teud.cn” IN {
tyep master;
file “tedu.cn.other”;
};
};

—————————————————————-
创建区域文件:
cp -p /var/named/named.localhost /var/named/tedu.cn.zone
vim /var/named/tedu.cn.zone

$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
tedu.cn. NS svr7
svr7 A 192.168.4.1
www A 192.168.4.100

——————————————————————-
cp -p /var/named/named.localhost /var/named/tedu.cn.other
vim /var/named/tedu.cn.other

$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
tedu.cn. NS svr7
svr7 A 192.168.4.1
www A 192.168.4.101

————————————————————

重启bind服务,systemctl restart named

客户机A(192.168.4.20)测试:
nslookup www.tedu.cn 192.168.4.1

Server: 192.168.4.1
Address: 192.168.4.1#53

Name: www.tedu.cn
Address: 192.168.4.100
————————————-
其他客户机测试:
Server: 192.168.4.1
Address: 192.168.4.1#53

Name: www.tedu.cn
Address: 192.168.4.101

======================================
DNS多区域分离解析

多区域的分离解析:每一个view中zone的个数以及负责的域名都要一致

view “1” {
match-clients { 客户端IP地址; };
zone “test.cn” IN {
type master;
file test.cn.zone”;
};
zone “test1.cn” IN {
type master;
file “test1.cn.zone”;
};
};

view “2” {
match-clients { 客户端IP地址; };
zone “test.cn” IN {
type master;
file “test.cn.other”;
};
zone “test1.cn” IN {
type master;
file “test1.cn.other”;
};
};
#####上面黑色zone必须保持上下一致!!!!
每一个view中zone的个数以及负责的域名都要一致

然后cd /var/named/
创建4个区域文件,不要忘记cp -p
再编写区域文件,写入对应客户端通过DNS解析到不同的ip地址
重启bind, systemctl restart named
最后使用不同的客户端,通过dns,解析到的域名对应的IP是不一样的
==========================================

案例:


1、搭建web 服务器

服务器C:
yum install httpd -y

systemctl enable

vim /etc/httpd/conf.d/test.conf

servername www.qq.com
documentroot /var/www/qq

servername www.163.com
documentroot /var/www/163

———————————————————-

mkdir /var/www/qq /var/www/163
echo “this is a qq.1” > /var/www/qq/index.html
echo “this is a 163.1” > /var/www/163/index.html

systemctl restart httpd
—————————————————————-
服务器D :
yum install httpd -y

systemctl enable

vim /etc/httpd/conf.d/test.conf

servername www.qq.com
documentroot /var/www/qq

servername www.163.com
documentroot /var/www/163

———————————————————-

mkdir /var/www/qq /var/www/163
echo “this is a qq.2” > /var/www/qq/index.html
echo “this is a 163.2” > /var/www/163/index.html

systemctl restart httpd

———————————————————–
DNS A: (192.168.4.7)
创建DNS 服务器:

vim /etc/named.conf

options {
directory “/var/named”;
};
view “1” {
match-clients { 192.168.4.7; }; #匹配客户端地址为192.168.4.7
zone “qq.com” IN {
type master;
file “qq.com.zone”; 解析的区域文件为qq.com.zone
};
zone “163.com” IN {
type master;
file “163.com.zone”; 解析的区域文件为163.com.zone
};
};

view “2” {
match-clients { 192.168.4.207; }; #匹配客户端地址为192.168.4.207
zone “qq.com” IN {
type master;
file “qq.com.other”; 解析的区域文件为qq.com.other
};
zone “163.com” IN {
type master;
file “163.com.other”; 解析的区域文件为163.com.other
};
};
—————————————————————————————————-
cp -p /var/named/named.localhost /var/named/named.localhost/qq.com.zone
cp -p /var/named/named.localhost /var/named/named.localhost/163.com.zone
cp -p /var/named/named.localhost /var/named/named.localhost/qq.com.other
cp -p /var/named/named.localhost /var/named/named.localhost/163.com.other

vim /var/named/named.localhost/qq.com.zone

$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
qq.com. NS svr7
svr7 A 192.168.4.7
www A 192.168.4.10

———————————————————

vim /var/named/named.localhost/163.com.zone

$TTL 1D
@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
163.com. NS svr7
svr7 A 192.168.4.7
www A 192.168.4.10

—————————————————————
vim /var/named/named.localhost/qq.com.other

@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
qq.com. NS svr7
svr7 A 192.168.4.7
www A 192.168.4.20

————————————————————–

vim /var/named/named.localhost/163.com.other

@ IN SOA @ rname.invalid. (
0 ; serial
1D ; refresh
1H ; retry
1W ; expire
3H ) ; minimum
163.com. NS svr7
svr7 A 192.168.4.7
www A 192.168.4.20

——————————————————————-
重启bind服务 systemctl restart named systemctl enable named

客户端A : echo “nameserver 192.168.4.7” > /etc/resolv.conf ###写入DNS服务器地址
firefox http://www.qq.com
this is a qq.1
firefox http://www.163.com
this is a 163.1

客户端B : echo “nameserver 192.168.4.7” > /etc/resolv.conf ###写入DNS服务器地址
firefox http://www.qq.com
this is a qq.2
firefox http://www.163.com
this is a 163.2

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享
评论 抢沙发

请登录后发表评论

    暂无评论内容