二进制部署K8s集群第2节之DNS服务初始化

上一章： 二进制部署K8s集群第1节之准备虚拟机

1、安装bind（在hdss7-11上执行）
yum -y install bind-utils

2、配置/etc/named.conf
13 listen-on port 53 { 10.4.7.11; };
14 listen-on-v6 port 53 { ::1; };
21 allow-query { any; };
22 forwarders { 10.4.7.254; };
36 dnssec-enable no;
37 dnssec-validation no;

3、配置区域配置文件 /etc/named.rfc1912.zones

cat >> /etc/named.rfc1912.zones <<eof
zone "host.com" IN {
        type master;
        file "host.com.zone";
        allow-update { 10.4.7.11; };
};

zone "od.com" IN {
        type master;
        file "od.com.zone";
        allow-update { 10.4.7.11; };
};
> eof

4、配置主配置文件

cat > /var/named/host.com.zone << EOF
\$ORIGIN host.com.
\$TTL 600         ; 10 minutes
@       IN SOA  dns.host.com dnsadmin.host.com. (
                                        2020092701  ; serial
                                        10800       ; refresh (3 hours)
                                        900         ; retry (15 minutes)
                                        604800      ; expire (1 week)
                                        86400       ; minimum (1 day)
                                        )
                        NS   dns.host.com.
\$TTL 60 ; 1 minute
dns                A    10.4.7.11
HDSS7-11           A    10.4.7.11
HDSS7-12           A    10.4.7.12
HDSS7-21           A    10.4.7.21
HDSS7-22           A    10.4.7.22
HDSS7-200          A    10.4.7.200
HDSS7-200          A    10.4.7.200
EOF

5、配置区域数据配置文件

cat > /var/named/od.com.zone <<eof
\$ORIGIN od.com.
\$TTL 600         ; 10 minutes
@       IN SOA  dns.od.com dnsadmin.od.com. (
                                        2020092701  ; serial
                                        10800       ; refresh (3 hours)
                                        900         ; retry (15 minutes)
                                        604800      ; expire (1 week)
                                        86400       ; minimum (1 day)
                                        )
                        NS   dns.od.com.
\$TTL 60 ; 1 minute
dns                A    10.4.7.11
eof

6、添加权限
chown -R named: /var/named/

7、启动检查bind

named-checkconf
named-checkzone host.com /var/named/host.com.zone
named-checkzone od.com /var/named/od.com.zone 
systemctl start named    
netstat -tulnp | grep 53
dig -t A hdss7-21.host.com @10.4.7.11 +short

8、所有服务器配置指向dns

cat > /etc/resolv.conf <<eof
search host.com
nameserver 10.4.7.11
eof

9、验证dns

ping hdss7-11
ping hdss7-11.host.com

10、Windows dns指向配置

下一章：二进制部署K8s集群第3节之准备签发证书环境

标签：hdss7,初始化,named,zone,host,DNS,var,K8s,com
来源： https://blog.51cto.com/yht1990/2538744