Shulou(Shulou.com)06/02 Report--

DNS separation and resolution experiment

Experimental topology diagram

In this experiment, we no longer set up the website, as long as we ensure that the local area network and wide area network can be resolved from the server to the domain name.

DNS parsing first we need to install a bind package.

Our server is connected to the WAN and LAN respectively, so we need to add another network card to the virtual machine and adjust the mode of the two network cards to host-only mode.

After the installation of the network card is completed, we need to restart the server to make the network card effective. At this time, we can see that there is already a second network card ens37 in the system.

After adding the network card, we just need to configure the network card. First, set the ens33 network card as follows.

Although we have added a new network card to the virtual machine, it has not been added to the configuration, so we also need to copy an ens33 configuration file and modify the configuration file as ens37.

Change all ens33 to ens37 in the ens37 configuration file, and delete the entire line of UUID. And configure it with an IP address and subnet mask.

When the configuration of the network card is complete, be sure to restart the network service to make the changed configuration take effect.

Next we also need to use the command "ifconfig" to see if the IP address configured for the network card is valid.

The gateway configuration of the server is complete, and we also need to configure the IP addresses of the WAN and LAN clients.

After the configuration is completed, we also need to ensure that the local area network and wide area network can connect with the gateway of the server.

Now that the gateway and IP are configured, we need to configure DNS. We first go to the main configuration file of DNS to modify it.

In the main configuration file, we change the listening address and allow resolution permissions to any.

Next, let's go to the zone configuration file and make the following changes.

After entering the main configuration file, we copy the following content to the zone configuration file and delete it in the main configuration file.

After copying the contents of the main configuration folder, add the following below.

The following is what we modified the zone data configuration file, because our zone data configuration file allows us to define it ourselves, so we need to copy a template and modify it.

The data profile in the area is configured as follows.

Because our server has to parse a website to the local area network and the wide area network respectively, we have to copy and modify the regional data again.

Let's configure the zone data configuration file as follows.

Now that all of our configuration files have been configured, let's start the named service and check its status. For the normal operation of the service, we also need to turn off the firewall and enhanced security features.

The following is the verification of the experimental results. We can resolve the same domain name to two different IP addresses in LAN and WAN.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.