DNS2
There are too many users accessing the host. Open the extension to lighten the burden.
Mainframe
Zone "taxing.com" IN {
Type master
File "taxing.com.zone"
Allow-update {none;}
Allow-transfer {172.25.254.224;}
Slave machine
Zone "taxing.com" IN {
Type slave
Masters {172.25.254.124;}
File "slaves/taxing.com.zone"
Allow-update {none;}
Time synchronization
Mainframe
Vim / var/namedtaxing.com.zone
$TTL 1D
@ IN SOA dns.taxing.com. Root.taxing.com. (
201611261; serial # is a maximum of ten-digit files to view and compare the values when updating, and update if different (rm-rf / var/name/slaves/taxing.com.zone; systemctl restart named)
1D; refresh
1H; retry
1W; expire
3H); minimum
NS dns
Dns A 172.25.254.124
Www A 172.25.254.138
~
Change the series value every time you modify the ip
Vim / etc/name.rfc1912.zones
Zone "taxing.com" IN {
Type master
File "taxing.com.zone"
Allow-update {none;}
Allow-transfer {172.25.254.224;}
Also-notify {172.25.254.224;}; # # Notification slave after modification
}
Remote control modification
Client
Setenforce 0
[root@localhost slaves] # nsupdate
> server 172.25.254.124
> update delete www.taxing.com
> update add www.taxing.com 86400 A 172.25.254.138 # 86400s cache time
> send
> quit
Mainframe
Setenforc 0
Vim / etc/named.rfc1912.zones
Zone "taxing.com" IN {
Type master
File "taxing.com.zone"
Allow-update {172.25.254.224;}
}
Chmod 770 / var/name/
Reboot will synchronize the updated content, first backup cp-p taxing.com.zone / mnt and then delete taxing.com.zone.jnl and synchronized taxing.com.zone to copy the backed-up taxing.com.zone back to cp-p / mnt/taxing.com.zone.
Secret key authentication
Mainframe
Dnssec-keygen-a HMAC-MD5-b 128-n HOST taxing
Cat Ktaxing.+157+22634.key
Cat Ktaxing.+157+22634.private
Cp-p / etc/rndc.key / etc/taxing.key
Vim / etc/taxing.key
Key "taxing" {
Algorithm hmac-md5
Secret "YtJ6Y7kyfL5moClanMIS6Q=="
}
Vim / etc/named.rfc1912.zones
Zone "taxing.com" IN {
Type master
File "taxing.com.zone"
Allow-update {key taxing;}
}
Systemctl restart named
Scp Ktaxing.+157+22634.* root@172.25.254.224:/mnt/
Client
[root@localhost mnt] # nsupdate-k Ktaxing.+157+22634.private
> server 172.25.254.124
> update delete www.taxing.com
> send
> quit
Dynamic dhcp DNS acquisition of Peanut Shell
Mainframe
Vim / etc/dhcp/dhcpd.conf
# Use this to enble / disable dynamic dns updates globally.
Ddns-update-style interim
Subnet 172.25.254.0 netmask 255.255.255.0 {
Range 172.25.254.224 172.25.254.242
Option routers 172.25.254.124
}
Key taxing {
Algorithm hmac-md5
Secret YtJ6Y7kyfL5moClanMIS6Q==
}
Zone taxing.com. {
Primary 127.0.0.1
Key taxing
}
Vim / var/name/taxing.com.zone
41 # 1-8 90%
Client
Open dynamic acquisition dhcp
Hostnamectl set-hostname timo.taxing.com
Dig timo.taxing.com
Gnome-screenshot-a # screenshot
