1. [root@riyimei ~]# yum provides named
    2. Loaded plugins: fastestmirror
    3. Loading mirror speeds from cached hostfile
    4.  * base: mirrors.aliyun.com
    5.  * extras: mirrors.aliyun.com
    6.  * updates: mirrors.aliyun.com
    7. 32:bind-9.11.4-16.P2.el7.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
    8. Repo        : base
    9. Matched from:
    10. Filename    : /usr/sbin/named
    14. 32:bind-9.11.4-16.P2.el7_8.2.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
    15. Repo        : updates
    16. Matched from:
    17. Filename    : /usr/sbin/named
    21. 32:bind-9.11.4-16.P2.el7_8.3.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
    22. Repo        : updates
    23. Matched from:
    24. Filename    : /usr/sbin/named
    28. 32:bind-9.11.4-16.P2.el7_8.6.x86_64 : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
    29. Repo        : updates
    30. Matched from:
    31. Filename    : /usr/sbin/named
    35. [root@riyimei ~]#

    部署dns 缓存服务器

    1. [root@riyimei ~]# yum install bind  -y
    2. Loaded plugins: fastestmirror
    3. Loading mirror speeds from cached hostfile
    4.  * base: mirrors.aliyun.com
    5.  * extras: mirrors.aliyun.com
    6.  * updates: mirrors.aliyun.com
    7. Resolving Dependencies
    8. --> Running transaction check
    9. ---> Package bind.x86_64 32:9.11.4-16.P2.el7_8.6 will be installed
    10. --> Processing Dependency: bind-libs-lite(x86-64) = 32:9.11.4-16.P2.el7_8.6 for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    11. --> Processing Dependency: bind-libs(x86-64) = 32:9.11.4-16.P2.el7_8.6 for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    12. --> Processing Dependency: python-ply for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    13. --> Processing Dependency: policycoreutils-python for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    14. --> Processing Dependency: policycoreutils-python for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    15. --> Processing Dependency: liblwres.so.160()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    16. --> Processing Dependency: libisccfg.so.160()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    17. --> Processing Dependency: libisccc.so.160()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    18. --> Processing Dependency: libisc.so.169()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    19. --> Processing Dependency: libdns.so.1102()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    20. --> Processing Dependency: libbind9.so.160()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    21. --> Processing Dependency: libGeoIP.so.1()(64bit) for package: 32:bind-9.11.4-16.P2.el7_8.6.x86_64
    22. --> Running transaction check
    23. ---> Package GeoIP.x86_64 0:1.5.0-14.el7 will be installed
    24. --> Processing Dependency: geoipupdate for package: GeoIP-1.5.0-14.el7.x86_64
    25. ---> Package bind-libs.x86_64 32:9.11.4-16.P2.el7_8.6 will be installed
    26. --> Processing Dependency: bind-license = 32:9.11.4-16.P2.el7_8.6 for package: 32:bind-libs-9.11.4-16.P2.el7_8.6.x86_64
    27. ---> Package bind-libs-lite.x86_64 32:9.11.4-16.P2.el7_8.6 will be installed
    28. ---> Package policycoreutils-python.x86_64 0:2.5-34.el7 will be installed
    29. --> Processing Dependency: policycoreutils = 2.5-34.el7 for package: policycoreutils-python-2.5-34.el7.x86_64
    30. --> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-34.el7.x86_64
    31. --> Processing Dependency: libsemanage-python >= 2.5-14 for package: policycoreutils-python-2.5-34.el7.x86_64
    32. --> Processing Dependency: audit-libs-python >= 2.1.3-4 for package: policycoreutils-python-2.5-34.el7.x86_64
    33. --> Processing Dependency: python-IPy for package: policycoreutils-python-2.5-34.el7.x86_64
    34. --> Processing Dependency: libqpol.so.1(VERS_1.4)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64
    35. --> Processing Dependency: libqpol.so.1(VERS_1.2)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64
    36. --> Processing Dependency: libcgroup for package: policycoreutils-python-2.5-34.el7.x86_64
    37. --> Processing Dependency: libapol.so.4(VERS_4.0)(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64
    38. --> Processing Dependency: checkpolicy for package: policycoreutils-python-2.5-34.el7.x86_64
    39. --> Processing Dependency: libqpol.so.1()(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64
    40. --> Processing Dependency: libapol.so.4()(64bit) for package: policycoreutils-python-2.5-34.el7.x86_64
    41. ---> Package python-ply.noarch 0:3.4-11.el7 will be installed
    42. --> Running transaction check
    43. ---> Package audit-libs-python.x86_64 0:2.8.5-4.el7 will be installed
    44. ---> Package bind-license.noarch 32:9.11.4-16.P2.el7_8.6 will be installed
    45. ---> Package checkpolicy.x86_64 0:2.5-8.el7 will be installed
    46. ---> Package geoipupdate.x86_64 0:2.5.0-1.el7 will be installed
    47. ---> Package libcgroup.x86_64 0:0.41-21.el7 will be installed
    48. ---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be installed
    49. ---> Package policycoreutils.x86_64 0:2.5-33.el7 will be updated
    50. ---> Package policycoreutils.x86_64 0:2.5-34.el7 will be an update
    51. ---> Package python-IPy.noarch 0:0.75-6.el7 will be installed
    52. ---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be installed
    53. --> Finished Dependency Resolution
    55. Dependencies Resolved
    57. =======================================================================================================================================
    58.  Package                                Arch                   Version                                   Repository               Size
    59. =======================================================================================================================================
    60. Installing:
    61.  bind                                   x86_64                 32:9.11.4-16.P2.el7_8.6                   updates                 2.3 M
    62. Installing for dependencies:
    63.  GeoIP                                  x86_64                 1.5.0-14.el7                              base                    1.5 M
    64.  audit-libs-python                      x86_64                 2.8.5-4.el7                               base                     76 k
    65.  bind-libs                              x86_64                 32:9.11.4-16.P2.el7_8.6                   updates                 156 k
    66.  bind-libs-lite                         x86_64                 32:9.11.4-16.P2.el7_8.6                   updates                 1.1 M
    67.  bind-license                           noarch                 32:9.11.4-16.P2.el7_8.6                   updates                  90 k
    68.  checkpolicy                            x86_64                 2.5-8.el7                                 base                    295 k
    69.  geoipupdate                            x86_64                 2.5.0-1.el7                               base                     35 k
    70.  libcgroup                              x86_64                 0.41-21.el7                               base                     66 k
    71.  libsemanage-python                     x86_64                 2.5-14.el7                                base                    113 k
    72.  policycoreutils-python                 x86_64                 2.5-34.el7                                base                    457 k
    73.  python-IPy                             noarch                 0.75-6.el7                                base                     32 k
    74.  python-ply                             noarch                 3.4-11.el7                                base                    123 k
    75.  setools-libs                           x86_64                 3.3.8-4.el7                               base                    620 k
    76. Updating for dependencies:
    77.  policycoreutils                        x86_64                 2.5-34.el7                                base                    917 k
    79. Transaction Summary
    80. =======================================================================================================================================
    81. Install  1 Package  (+13 Dependent packages)
    82. Upgrade             (  1 Dependent package)
    84. Total download size: 7.8 M
    85. Downloading packages:
    86. Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
    87. (1/15): bind-libs-9.11.4-16.P2.el7_8.6.x86_64.rpm                                                               | 156 kB  00:00:00     
    88. (2/15): audit-libs-python-2.8.5-4.el7.x86_64.rpm                                                                |  76 kB  00:00:00     
    89. (3/15): bind-license-9.11.4-16.P2.el7_8.6.noarch.rpm                                                            |  90 kB  00:00:00     
    90. (4/15): checkpolicy-2.5-8.el7.x86_64.rpm                                                                        | 295 kB  00:00:00     
    91. (5/15): libcgroup-0.41-21.el7.x86_64.rpm                                                                        |  66 kB  00:00:00     
    92. (6/15): libsemanage-python-2.5-14.el7.x86_64.rpm                                                                | 113 kB  00:00:00     
    93. (7/15): GeoIP-1.5.0-14.el7.x86_64.rpm                                                                           | 1.5 MB  00:00:00     
    94. (8/15): policycoreutils-2.5-34.el7.x86_64.rpm                                                                   | 917 kB  00:00:00     
    95. (9/15): python-IPy-0.75-6.el7.noarch.rpm                                                                        |  32 kB  00:00:00     
    96. (10/15): python-ply-3.4-11.el7.noarch.rpm                                                                       | 123 kB  00:00:00     
    97. (11/15): policycoreutils-python-2.5-34.el7.x86_64.rpm                                                           | 457 kB  00:00:00     
    98. (12/15): setools-libs-3.3.8-4.el7.x86_64.rpm                                                                    | 620 kB  00:00:00     
    99. (13/15): bind-9.11.4-16.P2.el7_8.6.x86_64.rpm                                                                   | 2.3 MB  00:00:02     
    100. bind-libs-lite-9.11.4-16.P2.el FAILED                                          
    101. http://mirrors.aliyuncs.com/centos/7/updates/x86_64/Packages/bind-libs-lite-9.11.4-16.P2.el7_8.6.x86_64.rpm: [Errno 14] curl#7 - "Failed connect to mirrors.aliyuncs.com:80; Connection refused"
    102. Trying other mirror.
    103. geoipupdate-2.5.0-1.el7.x86_64 FAILED                                          
    104. http://mirrors.aliyuncs.com/centos/7/os/x86_64/Packages/geoipupdate-2.5.0-1.el7.x86_64.rpm: [Errno 14] curl#7 - "Failed connect to mirrors.aliyuncs.com:80; Connection refused"
    105. Trying other mirror.
    106. (14/15): geoipupdate-2.5.0-1.el7.x86_64.rpm                                                                     |  35 kB  00:00:00     
    107. (15/15): bind-libs-lite-9.11.4-16.P2.el7_8.6.x86_64.rpm                                                         | 1.1 MB  00:00:00     
    108. ---------------------------------------------------------------------------------------------------------------------------------------
    109. Total                                                                                                  358 kB/s | 7.8 MB  00:00:22     
    110. Running transaction check
    111. Running transaction test
    112. Transaction test succeeded
    113. Running transaction
    114.   Installing : 32:bind-license-9.11.4-16.P2.el7_8.6.noarch                                                                        1/16 
    115.   Installing : setools-libs-3.3.8-4.el7.x86_64                                                                                    2/16 
    116.   Installing : libcgroup-0.41-21.el7.x86_64                                                                                       3/16 
    117.   Installing : checkpolicy-2.5-8.el7.x86_64                                                                                       4/16 
    118.   Installing : python-IPy-0.75-6.el7.noarch                                                                                       5/16 
    119.   Installing : libsemanage-python-2.5-14.el7.x86_64                                                                               6/16 
    120.   Updating   : policycoreutils-2.5-34.el7.x86_64                                                                                  7/16 
    121.   Installing : audit-libs-python-2.8.5-4.el7.x86_64                                                                               8/16 
    122.   Installing : policycoreutils-python-2.5-34.el7.x86_64                                                                           9/16 
    123.   Installing : geoipupdate-2.5.0-1.el7.x86_64                                                                                    10/16 
    124.   Installing : GeoIP-1.5.0-14.el7.x86_64                                                                                         11/16 
    125.   Installing : 32:bind-libs-lite-9.11.4-16.P2.el7_8.6.x86_64                                                                     12/16 
    126.   Installing : 32:bind-libs-9.11.4-16.P2.el7_8.6.x86_64                                                                          13/16 
    127.   Installing : python-ply-3.4-11.el7.noarch                                                                                      14/16 
    128.   Installing : 32:bind-9.11.4-16.P2.el7_8.6.x86_64                                                                               15/16 
    129.   Cleanup    : policycoreutils-2.5-33.el7.x86_64                                                                                 16/16 
    130.   Verifying  : 32:bind-9.11.4-16.P2.el7_8.6.x86_64                                                                                1/16 
    131.   Verifying  : GeoIP-1.5.0-14.el7.x86_64                                                                                          2/16 
    132.   Verifying  : python-ply-3.4-11.el7.noarch                                                                                       3/16 
    133.   Verifying  : geoipupdate-2.5.0-1.el7.x86_64                                                                                     4/16 
    134.   Verifying  : audit-libs-python-2.8.5-4.el7.x86_64                                                                               5/16 
    135.   Verifying  : policycoreutils-2.5-34.el7.x86_64                                                                                  6/16 
    136.   Verifying  : libsemanage-python-2.5-14.el7.x86_64                                                                               7/16 
    137.   Verifying  : 32:bind-license-9.11.4-16.P2.el7_8.6.noarch                                                                        8/16 
    138.   Verifying  : python-IPy-0.75-6.el7.noarch                                                                                       9/16 
    139.   Verifying  : checkpolicy-2.5-8.el7.x86_64                                                                                      10/16 
    140.   Verifying  : 32:bind-libs-lite-9.11.4-16.P2.el7_8.6.x86_64                                                                     11/16 
    141.   Verifying  : policycoreutils-python-2.5-34.el7.x86_64                                                                          12/16 
    142.   Verifying  : 32:bind-libs-9.11.4-16.P2.el7_8.6.x86_64                                                                          13/16 
    143.   Verifying  : libcgroup-0.41-21.el7.x86_64                                                                                      14/16 
    144.   Verifying  : setools-libs-3.3.8-4.el7.x86_64                                                                                   15/16 
    145.   Verifying  : policycoreutils-2.5-33.el7.x86_64                                                                                 16/16 
    147. Installed:
    148.   bind.x86_64 32:9.11.4-16.P2.el7_8.6                                                                                                  
    150. Dependency Installed:
    151.   GeoIP.x86_64 0:1.5.0-14.el7                    audit-libs-python.x86_64 0:2.8.5-4.el7       bind-libs.x86_64 32:9.11.4-16.P2.el7_8.6 
    152.   bind-libs-lite.x86_64 32:9.11.4-16.P2.el7_8.6  bind-license.noarch 32:9.11.4-16.P2.el7_8.6  checkpolicy.x86_64 0:2.5-8.el7           
    153.   geoipupdate.x86_64 0:2.5.0-1.el7               libcgroup.x86_64 0:0.41-21.el7               libsemanage-python.x86_64 0:2.5-14.el7   
    154.   policycoreutils-python.x86_64 0:2.5-34.el7     python-IPy.noarch 0:0.75-6.el7               python-ply.noarch 0:3.4-11.el7           
    155.   setools-libs.x86_64 0:3.3.8-4.el7             
    157. Dependency Updated:
    158.   policycoreutils.x86_64 0:2.5-34.el7                                                                                                  
    160. Complete!
    161. [root@riyimei ~]#

    查看配置文件

    1. [root@riyimei ~]# rpm -qi bind
    2. Name        : bind
    3. Epoch       : 32
    4. Version     : 9.11.4
    5. Release     : 16.P2.el7_8.6
    6. Architecture: x86_64
    7. Install Date: Sun 25 Oct 2020 10:41:02 AM CST
    8. Group       : Unspecified
    9. Size        : 5652685
    10. License     : MPLv2.0
    11. Signature   : RSA/SHA256, Tue 02 Jun 2020 12:22:25 AM CST, Key ID 24c6a8a7f4a80eb5
    12. Source RPM  : bind-9.11.4-16.P2.el7_8.6.src.rpm
    13. Build Date  : Mon 01 Jun 2020 11:30:09 PM CST
    14. Build Host  : x86-02.bsys.centos.org
    15. Relocations : (not relocatable)
    16. Packager    : CentOS BuildSystem <http://bugs.centos.org>
    17. Vendor      : CentOS
    18. URL         : http://www.isc.org/products/BIND/
    19. Summary     : The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
    20. Description :
    21. BIND (Berkeley Internet Name Domain) is an implementation of the DNS
    22. (Domain Name System) protocols. BIND includes a DNS server (named),
    23. which resolves host names to IP addresses; a resolver library
    24. (routines for applications to use when interfacing with DNS); and
    25. tools for verifying that the DNS server is operating properly.
    26. [root@riyimei ~]# rpm -qc bind
    27. /etc/logrotate.d/named
    28. /etc/named.conf
    29. /etc/named.iscdlv.key
    30. /etc/named.rfc1912.zones
    31. /etc/named.root.key
    32. /etc/rndc.conf
    33. /etc/rndc.key
    34. /etc/sysconfig/named
    35. /var/named/named.ca
    36. /var/named/named.empty
    37. /var/named/named.localhost
    38. /var/named/named.loopback
    39. [root@riyimei ~]#
    1. [root@riyimei ~]# ll /etc/named*
    2. -rw-r----- 1 root named 1806 Jun  1 23:26 /etc/named.conf
    3. -rw-r--r-- 1 root named 3923 Jun  1 23:26 /etc/named.iscdlv.key
    4. -rw-r----- 1 root named  931 Jun 21  2007 /etc/named.rfc1912.zones
    5. -rw-r--r-- 1 root named 1886 Apr 13  2017 /etc/named.root.key
    7. /etc/named:
    8. total 0
    9. [root@riyimei ~]#

    默认配置文件

    1. [root@riyimei ~]# cat /etc/named.conf 
    2. //
    3. // named.conf
    4. //
    5. // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
    6. // server as a caching only nameserver (as a localhost DNS resolver only).
    7. //
    8. // See /usr/share/doc/bind*/sample/ for example named configuration files.
    9. //
    10. // See the BIND Administrator's Reference Manual (ARM) for details about the
    11. // configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
    13. options {
    14.     listen-on port 53 { 127.0.0.1; };
    15.     listen-on-v6 port 53 { ::1; };
    16.     directory     "/var/named";
    17.     dump-file     "/var/named/data/cache_dump.db";
    18.     statistics-file "/var/named/data/named_stats.txt";
    19.     memstatistics-file "/var/named/data/named_mem_stats.txt";
    20.     recursing-file  "/var/named/data/named.recursing";
    21.     secroots-file   "/var/named/data/named.secroots";
    22.     allow-query     { localhost; };
    24.     /* 
    25.      - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
    26.      - If you are building a RECURSIVE (caching) DNS server, you need to enable 
    27.        recursion. 
    28.      - If your recursive DNS server has a public IP address, you MUST enable access 
    29.        control to limit queries to your legitimate users. Failing to do so will
    30.        cause your server to become part of large scale DNS amplification 
    31.        attacks. Implementing BCP38 within your network would greatly
    32.        reduce such attack surface 
    33.     */
    34.     recursion yes;
    36.     dnssec-enable yes;
    37.     dnssec-validation yes;
    39.     /* Path to ISC DLV key */
    40.     bindkeys-file "/etc/named.root.key";
    42.     managed-keys-directory "/var/named/dynamic";
    44.     pid-file "/run/named/named.pid";
    45.     session-keyfile "/run/named/session.key";
    46. };
    48. logging {
    49.         channel default_debug {
    50.                 file "data/named.run";
    51.                 severity dynamic;
    52.         };
    53. };
    55. zone "." IN {
    56.     type hint;
    57.     file "named.ca";
    58. };
    60. include "/etc/named.rfc1912.zones";
    61. include "/etc/named.root.key";
    63. [root@riyimei ~]#
    1. [root@riyimei ~]# cat /var/named/named.ca 
    3. ; <<>> DiG 9.11.3-RedHat-9.11.3-3.fc27 <<>> +bufsize=1200 +norec @a.root-servers.net
    4. ; (2 servers found)
    5. ;; global options: +cmd
    6. ;; Got answer:
    7. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46900
    8. ;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27
    10. ;; OPT PSEUDOSECTION:
    11. ; EDNS: version: 0, flags:; udp: 1472
    12. ;; QUESTION SECTION:
    13. ;.                IN    NS
    15. ;; ANSWER SECTION:
    16. .            518400    IN    NS    a.root-servers.net.
    17. .            518400    IN    NS    b.root-servers.net.
    18. .            518400    IN    NS    c.root-servers.net.
    19. .            518400    IN    NS    d.root-servers.net.
    20. .            518400    IN    NS    e.root-servers.net.
    21. .            518400    IN    NS    f.root-servers.net.
    22. .            518400    IN    NS    g.root-servers.net.
    23. .            518400    IN    NS    h.root-servers.net.
    24. .            518400    IN    NS    i.root-servers.net.
    25. .            518400    IN    NS    j.root-servers.net.
    26. .            518400    IN    NS    k.root-servers.net.
    27. .            518400    IN    NS    l.root-servers.net.
    28. .            518400    IN    NS    m.root-servers.net.
    30. ;; ADDITIONAL SECTION:
    31. a.root-servers.net.    518400    IN    A    198.41.0.4
    32. b.root-servers.net.    518400    IN    A    199.9.14.201
    33. c.root-servers.net.    518400    IN    A    192.33.4.12
    34. d.root-servers.net.    518400    IN    A    199.7.91.13
    35. e.root-servers.net.    518400    IN    A    192.203.230.10
    36. f.root-servers.net.    518400    IN    A    192.5.5.241
    37. g.root-servers.net.    518400    IN    A    192.112.36.4
    38. h.root-servers.net.    518400    IN    A    198.97.190.53
    39. i.root-servers.net.    518400    IN    A    192.36.148.17
    40. j.root-servers.net.    518400    IN    A    192.58.128.30
    41. k.root-servers.net.    518400    IN    A    193.0.14.129
    42. l.root-servers.net.    518400    IN    A    199.7.83.42
    43. m.root-servers.net.    518400    IN    A    202.12.27.33
    44. a.root-servers.net.    518400    IN    AAAA    2001:503:ba3e::2:30
    45. b.root-servers.net.    518400    IN    AAAA    2001:500:200::b
    46. c.root-servers.net.    518400    IN    AAAA    2001:500:2::c
    47. d.root-servers.net.    518400    IN    AAAA    2001:500:2d::d
    48. e.root-servers.net.    518400    IN    AAAA    2001:500:a8::e
    49. f.root-servers.net.    518400    IN    AAAA    2001:500:2f::f
    50. g.root-servers.net.    518400    IN    AAAA    2001:500:12::d0d
    51. h.root-servers.net.    518400    IN    AAAA    2001:500:1::53
    52. i.root-servers.net.    518400    IN    AAAA    2001:7fe::53
    53. j.root-servers.net.    518400    IN    AAAA    2001:503:c27::2:30
    54. k.root-servers.net.    518400    IN    AAAA    2001:7fd::1
    55. l.root-servers.net.    518400    IN    AAAA    2001:500:9f::42
    56. m.root-servers.net.    518400    IN    AAAA    2001:dc3::35
    58. ;; Query time: 24 msec
    59. ;; SERVER: 198.41.0.4#53(198.41.0.4)
    60. ;; WHEN: Thu Apr 05 15:57:34 CEST 2018
    61. ;; MSG SIZE  rcvd: 811
    63. [root@riyimei ~]#

    启动服务

    1. [root@riyimei ~]# systemctl enable named.service 
    2. Created symlink from /etc/systemd/system/multi-user.target.wants/named.service to /usr/lib/systemd/system/named.service.
    3. [root@riyimei ~]# systemctl restart named.service 
    4. [root@riyimei ~]# systemctl status named.service 
    5. ● named.service - Berkeley Internet Name Domain (DNS)
    6.    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
    7.    Active: active (running) since Sun 2020-10-25 10:46:41 CST; 5s ago
    8.   Process: 4796 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
    9.   Process: 4792 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
    10.  Main PID: 4797 (named)
    11.    CGroup: /system.slice/named.service
    12.            └─4797 /usr/sbin/named -u named -c /etc/named.conf
    14. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './NS/IN': 2001:500:1::53#53
    15. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './DNSKEY/IN': 2001:500:2::c#53
    16. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './NS/IN': 2001:500:2::c#53
    17. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './DNSKEY/IN': 2001:7fe::53#53
    18. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './NS/IN': 2001:7fe::53#53
    19. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './DNSKEY/IN': 2001:500:a8::e#53
    20. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './NS/IN': 2001:500:a8::e#53
    21. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './DNSKEY/IN': 2001:7fd::1#53
    22. Oct 25 10:46:41 riyimei named[4797]: network unreachable resolving './NS/IN': 2001:7fd::1#53
    23. Oct 25 10:46:43 riyimei named[4797]: managed-keys-zone: Key 20326 for zone . acceptance timer complete: key now trusted
    24. [root@riyimei ~]#
    1. [root@riyimei ~]# netstat -anp |grep named
    2. tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      4797/named          
    3. tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      4797/named          
    4. tcp6       0      0 ::1:953                 :::*                    LISTEN      4797/named          
    5. tcp6       0      0 ::1:53                  :::*                    LISTEN      4797/named          
    6. udp        0      0 127.0.0.1:53            0.0.0.0:*                           4797/named          
    7. udp6       0      0 ::1:53                  :::*                                4797/named          
    8. unix  2      [ ]         DGRAM                    23215    4797/named           
    9. [root@riyimei ~]#

    帮助参考文件

    1. [root@riyimei ~]# ll /usr/share/doc/bind-9.11.4/
    2. total 3876
    3. -rw-r--r-- 1 root root   26740 Sep  4  2018 Bv9ARM.ch01.html
    4. -rw-r--r-- 1 root root    7352 Sep  4  2018 Bv9ARM.ch02.html
    5. -rw-r--r-- 1 root root   31114 Sep  4  2018 Bv9ARM.ch03.html
    6. -rw-r--r-- 1 root root  132760 Sep  4  2018 Bv9ARM.ch04.html
    7. -rw-r--r-- 1 root root    6439 Sep  4  2018 Bv9ARM.ch05.html
    8. -rw-r--r-- 1 root root  700572 Sep  4  2018 Bv9ARM.ch06.html
    9. -rw-r--r-- 1 root root   20033 Sep  4  2018 Bv9ARM.ch07.html
    10. -rw-r--r-- 1 root root    6467 Sep  4  2018 Bv9ARM.ch08.html
    11. -rw-r--r-- 1 root root   10515 Sep  4  2018 Bv9ARM.ch09.html
    12. -rw-r--r-- 1 root root    7085 Sep  4  2018 Bv9ARM.ch10.html
    13. -rw-r--r-- 1 root root   54521 Sep  4  2018 Bv9ARM.ch11.html
    14. -rw-r--r-- 1 root root   20938 Sep  4  2018 Bv9ARM.ch12.html
    15. -rw-r--r-- 1 root root   10112 Sep  4  2018 Bv9ARM.ch13.html
    16. -rw-r--r-- 1 root root   30418 Sep  4  2018 Bv9ARM.html
    17. -rw-r--r-- 1 root root 1304481 Sep  4  2018 Bv9ARM.pdf
    18. -rw-r--r-- 1 root root  541446 Sep  4  2018 CHANGES
    19. -rw-r--r-- 1 root root  287991 Sep  4  2018 isc-logo.pdf
    20. -rw-r--r-- 1 root root    3080 Sep  4  2018 man.arpaname.html
    21. -rw-r--r-- 1 root root    9721 Sep  4  2018 man.ddns-confgen.html
    22. -rw-r--r-- 1 root root   24442 Sep  4  2018 man.delv.html
    23. -rw-r--r-- 1 root root   41601 Sep  4  2018 man.dig.html
    24. -rw-r--r-- 1 root root    5482 Sep  4  2018 man.dnssec-checkds.html
    25. -rw-r--r-- 1 root root   11621 Sep  4  2018 man.dnssec-coverage.html
    26. -rw-r--r-- 1 root root    9916 Sep  4  2018 man.dnssec-dsfromkey.html
    27. -rw-r--r-- 1 root root    9807 Sep  4  2018 man.dnssec-importkey.html
    28. -rw-r--r-- 1 root root   19581 Sep  4  2018 man.dnssec-keyfromlabel.html
    29. -rw-r--r-- 1 root root   22850 Sep  4  2018 man.dnssec-keygen.html
    30. -rw-r--r-- 1 root root   15514 Sep  4  2018 man.dnssec-keymgr.html
    31. -rw-r--r-- 1 root root    5753 Sep  4  2018 man.dnssec-revoke.html
    32. -rw-r--r-- 1 root root   14904 Sep  4  2018 man.dnssec-settime.html
    33. -rw-r--r-- 1 root root   31427 Sep  4  2018 man.dnssec-signzone.html
    34. -rw-r--r-- 1 root root    7609 Sep  4  2018 man.dnssec-verify.html
    35. -rw-r--r-- 1 root root    4496 Sep  4  2018 man.dnstap-read.html
    36. -rw-r--r-- 1 root root    4234 Sep  4  2018 man.genrandom.html
    37. -rw-r--r-- 1 root root   13048 Sep  4  2018 man.host.html
    38. -rw-r--r-- 1 root root    4711 Sep  4  2018 man.isc-hmac-fixup.html
    39. -rw-r--r-- 1 root root   12746 Sep  4  2018 man.lwresd.html
    40. -rw-r--r-- 1 root root   23732 Sep  4  2018 man.mdig.html
    41. -rw-r--r-- 1 root root    6931 Sep  4  2018 man.named-checkconf.html
    42. -rw-r--r-- 1 root root   20690 Sep  4  2018 man.named-checkzone.html
    43. -rw-r--r-- 1 root root   75181 Sep  4  2018 man.named.conf.html
    44. -rw-r--r-- 1 root root   19530 Sep  4  2018 man.named.html
    45. -rw-r--r-- 1 root root    4296 Sep  4  2018 man.named-journalprint.html
    46. -rw-r--r-- 1 root root    3952 Sep  4  2018 man.named-nzd2nzf.html
    47. -rw-r--r-- 1 root root    4311 Sep  4  2018 man.named-rrchecker.html
    48. -rw-r--r-- 1 root root    4275 Sep  4  2018 man.nsec3hash.html
    49. -rw-r--r-- 1 root root   14835 Sep  4  2018 man.nslookup.html
    50. -rw-r--r-- 1 root root   28782 Sep  4  2018 man.nsupdate.html
    51. -rw-r--r-- 1 root root    5703 Sep  4  2018 man.pkcs11-destroy.html
    52. -rw-r--r-- 1 root root    7304 Sep  4  2018 man.pkcs11-keygen.html
    53. -rw-r--r-- 1 root root    5594 Sep  4  2018 man.pkcs11-list.html
    54. -rw-r--r-- 1 root root    3823 Sep  4  2018 man.pkcs11-tokens.html
    55. -rw-r--r-- 1 root root   11752 Sep  4  2018 man.rndc-confgen.html
    56. -rw-r--r-- 1 root root   10418 Sep  4  2018 man.rndc.conf.html
    57. -rw-r--r-- 1 root root   40851 Sep  4  2018 man.rndc.html
    58. -rw-r--r-- 1 root root    1806 Jun  1 23:26 named.conf.default
    59. -rw-r--r-- 1 root root    7484 Sep  4  2018 notes.html
    60. -rw-r--r-- 1 root root   52181 Sep  4  2018 notes.pdf
    61. -rw-r--r-- 1 root root   23003 Sep  4  2018 README
    62. drwxr-xr-x 4 root root      28 Oct 25 10:41 sample
    63. [root@riyimei ~]#

    排错工具
    nslookup
    host
    dig