Linux 编译安装BIND

时间 2019-11-08

标签 linux 编译安装 bind 栏目 Linux 繁體版

原文原文链接

下载网址：www.isc.org
   首选须要安装开发环境，包括openssl等开发包；
   解压文件
       tar -zxvf bind*.tar.gz
   建立named使用的系统用户
       groupadd -g 53 -r named
       useradd -u 53 -r named
   编译安装
       cd bind9*
       ./configure --prefix=/usr/local/bind9 --sysconfdir=/etc/named --disable-ipv6 --disable-chroot --enable-threads
                            放置到指定目录                放置配置文件目录         禁用ipv6       禁用chroot          启用线程编译
       make
       make install
   环境配置
       添加path环境变量：vim /etc/profile.d/named.sh      ==>    export PATH=/usr/local/bind9/bin:/usr/local/bind9/sbin:$PATH
       重读配置文件：. /etc/profile.d/named.sh
       导出库文件：vim /etc/ld.so.conf.d/named.conf         ==>    /usr/local/bind9/lib
       生成库文件搜索路径(可省)；ldconfig -v
       连接头文件：ln -sv /usr/local/bind9/include /usr/include/named
       添加man手册文件路径：vim /etc/man.config(vim /etc/man_db.conf（centos7）)            ==>   MANPATH             /usr/local/bind9/share/man
   添加配置文件
       mkdir /etc/named
       chmod 770 /etc/named
       cd /etc/named
       vim named.conf
           options {
               …
               directory "/var/named";
           };
           zone "." IN {
               type hint;
               file "named.ca";
           };
           zone "localhost" IN {
               type master;
               file "localhost.zone";
               allow-update { none; };
           };
           zone "0.0.127.in-addr.arpa" IN {
               type master;
               file "named.local";
               allow-update { none; };
           };
       chown    root:named -R /etc/named/
       chmod    640   /etc/named/*

       mkdir /var/named
       chmod 770 /var/named/
       cd /var/named
       dig -t NS . @server    > named.ca (server:互联网上的dns服务器地址，前提须要联网，也能够经过复制或者逐条添加)
       vim localhost.zone
           $TTL 1d
           @ IN SOA localhost. admin.localhost. (
2018110201
1h
900
7d
1d )
           @ IN NS localhost.
           localhost IN A 127.0.0.1
       vim named.local
           $TTL 1d
           @ IN SOA localhost. admin.localhost. (
2018110201
1h
900
7d
1d )
           @ IN NS localhost.
           1 IN PTR localhost.
       chown       root:named -R   /var/named/
       chmod      640    /var/named/*

   RNDC配置：
       生成秘钥：rndc-confgen   -r   /dev/urandom(指明随机数文件)
       # Start of rndc.conf
       key "rndc-key" {
           algorithm hmac-md5;
           secret "1W4vjerva3CEBn6gDSiODg==";
       };

       options {
           default-key "rndc-key";
           default-server 127.0.0.1;
           default-port 953;
       };
       # End of rndc.conf
       将上述内容添加至/etc/named/rndc.conf
       # Use with the following in named.conf, adjusting the allow list as needed:
       key "rndc-key" {
          algorithm hmac-md5;
          secret "1W4vjerva3CEBn6gDSiODg==";
       };

       controls {
          inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
       };
       # End of named.conf
       将上述内容添加至/etc/named/named.conf
       killall named
       named -u named
       而后就能够使用rndc命令了；
   余下的配置就是根据本身的状况来添加域了；

   模拟压力测试：
       在bind加压文件包(contrib/)里有个queryperf，经过它能够模拟客户端访问你的这台DNS服务器，用于测试性能；
       切换到此目录中直接执行./configure便可；
           cd /root/bind-9.12.3/contrib/queryperf
           ./configure
           make
           cp queryperf /usr/local/bind9/bin

       queryperf    -d   TEST_FILE -s   DNS_SERVER
           TEST_FILE：为自定义的目录，里面解析的条目越多，测试压力越大；
               格式为：               域名                                  RR
                       www.guowei.com                           A
           DNS_SERVER：为被测试的DNS服务器地址；
       可经过top、vmstat、iostat等命令来查看各类性能；ios

注：根据马哥视频作的学习笔记，若有错误，欢迎指正；侵删；vim