Centos7 DNS 서버 구축 및 구성

Centos7 DNS 서버 구축 및 구성

컨디션

서버 정적 IP 주소 설정

vi /etc/sysconfig/network-scripts/ifcfg-ens32 

TYPE=Ethernet
BOOTPROTO=static
DEFROUTE=yes
PEERDNS=yes
PEERROUTES=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens32
UUID=70058ad3-1249-4950-a5ad-a491a6d0e012
DEVICE=ens32
ONBOOT=yes
IPADDR=192.168.1.8
GATEWAY=192.168.1.1
NETMASK=255.255.255.0
DNS1=192.168.1.8

설치하다.

설치 bind: yum - y install bind-utils

시작 서비스: systemctl start named

부팅 설정: systemctl enable named

프로비저닝

name. 구성conf 파일

vi /etc/named.conf

options {
        listen-on port 53 { any; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
        dnssec-enable no;
        dnssec-validation no;
        bindkeys-file "/etc/named.iscdlv.key";
        managed-keys-directory "/var/named/dynamic";
        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

##  demo.com
zone "demo.com" IN {
    type master;
    file "/var/named/demo.com";
};


include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

신규 demo.com 및 프로필

cd /var/named
cp named.empty demo.com
vi demo.com

$TTL 3H
@       IN SOA  @ demo.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       127.0.0.1

jenkins IN      A       192.168.1.14

DNS 재부팅: systemctl restart named

네트워크 재부팅: systemctl restart network

테스트

nslookup jenkins.demo.com

Server:     192.168.1.8
Address:    192.168.1.8#53

Name:   jenkins.demo.com
Address: 192.168.1.14