環境centos 7.9??????????
主DNS：192.168.60.131
備DNS：192.168.60.134??
我以?chenxingyu0.com ?指向 192.168.60.200為例?
首先是主dns??
#!/bin/bash# 檢查是否為 root 用戶
if [ "$(id -u)" != "0" ]; thenecho "請使用 root 用戶運行此腳本。"exit 1
fi# 安裝 bind 軟件包
yum install -y bind bind-utils# 備份 named.conf 文件
cp /etc/named.conf /etc/named.conf.bak# 配置主 DNS 的 named.conf
cat << EOF > /etc/named.conf
options {listen-on port 53 { any; };listen-on-v6 port 53 { ::1; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";secroots-file "/var/named/data/named.secroots";recursing-file "/var/named/data/named.recursing";allow-query { any; };recursion yes;dnssec-enable yes;dnssec-validation yes;managed-keys-directory "/var/named/dynamic";pid-file "/run/named/named.pid";session-keyfile "/run/named/session.key";
};logging {channel default_debug {file "data/named.run";severity dynamic;};
};zone "." IN {type hint;file "named.ca";
};zone "chenxingyu0.com" IN {type master;file "chenxingyu0.com.zone";allow-update { none; };allow-transfer { 192.168.60.134; };also-notify { 192.168.60.134; };
};include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
EOF# 創建并配置 zone 文件
cat << EOF > /var/named/chenxingyu0.com.zone
\$TTL 86400
@ IN SOA ns1.chenxingyu0.com. admin.chenxingyu0.com. (2025032502 ; Serial，可根據實際情況遞增3600 ; Refresh1800 ; Retry604800 ; Expire86400 ; Minimum TTL)
@ IN NS ns1.chenxingyu0.com.
ns1 IN A 192.168.60.200
chenxingyu0.com. IN A 192.168.60.200
EOF# 設置文件權限
chown named:named /var/named/chenxingyu0.com.zone
chmod 640 /var/named/chenxingyu0.com.zone# 配置防火墻
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload# 配置 SELinux
setsebool -P named_write_master_zones 1
setsebool -P named_read_master_zones 1# 啟動并設置開機自啟
systemctl start named
systemctl enable named# 檢查服務狀態
systemctl status namedecho "主 DNS 服務已部署，解析記錄 192.168.60.200 -> chenxingyu0.com 已添加。" ?現在是備dns?
#!/bin/bash# 檢查是否為 root 用戶
if [ "$(id -u)" != "0" ]; thenecho "請使用 root 用戶運行此腳本。"exit 1
fi# 安裝 bind 軟件包
yum install -y bind bind-utils# 備份 named.conf 文件
cp /etc/named.conf /etc/named.conf.bak# 配置備 DNS 的 named.conf
cat << EOF > /etc/named.conf
options {listen-on port 53 { any; };listen-on-v6 port 53 { ::1; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";secroots-file "/var/named/data/named.secroots";recursing-file "/var/named/data/named.recursing";allow-query { any; };recursion yes;dnssec-enable yes;dnssec-validation yes;managed-keys-directory "/var/named/dynamic";pid-file "/run/named/named.pid";session-keyfile "/run/named/session.key";
};logging {channel default_debug {file "data/named.run";severity dynamic;};
};zone "." IN {type hint;file "named.ca";
};zone "chenxingyu0.com" IN {type slave;file "slaves/chenxingyu0.com.zone";masters { 192.168.60.131; };
};include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
EOF# 創建 slaves 目錄
mkdir -p /var/named/slaves
chown named:named /var/named/slaves# 配置防火墻
firewall-cmd --permanent --add-service=dns
firewall-cmd --reload# 配置 SELinux
setsebool -P named_write_master_zones 1
setsebool -P named_read_master_zones 1# 啟動并設置開機自啟
systemctl start named
systemctl enable named# 檢查服務狀態
systemctl status namedecho "備 DNS 服務已部署，會從主 DNS 同步解析記錄。" 最后的驗證
執行命令? ?nslookup? xxx.com? 192.168.xx.xx
