BIND+DLZ+MYSQL实现区域记录动态更新.doc

BIND+DLZ+MYSQL实现区域记录动态更新【zonshy】BIND-DLZ实验环境:RHEL4所用到的软件包:BIND-9.5.0-P2.tar.gz（9.4.0以上版本都已经包含了DLZ补丁）、Mysql-5.0.56.tar.gz写在前面:DLZ（Dynamically Loadable Zones），它允许你的区域记录放置到数据库中，并且支持多种数据库。你可以在BIND-DLZ上找到相应的资料。1、先安装mysqlshelltar zxvf mysql-version.tar.gzshellcd mysql-*shell./configure -prefix=/usr/local/mysql -localstatedir=/usr/local/mysql/data -libexecdir=/usr/local/mysql/lib -disable-sharedshellmake & make install安装完成后。进入安装mysql的目录cd /usr/local/mysqlchown -R mysql .chgrp -R mysql .chown -R mysql datachown -R mysql libgroupadd -g 1003 mysqladduser -g 1003 mysql./bin/mysql_install_db -user=mysql /以mysql用户的身份安装chown -R root ./bin/mysqld_safe -user=mysql & /启动mysql并转入后台自行处理/usr/local/mysql/bin/mysqladmin -u root -p password *password:(由于初始密码为空，此处直接敲回车)/usr/local/mysql/bin/mysql -uroot-ppassword:(输入你的密码)mysql2、安装bindshelltar zxvf bind-9.5.0-p2.tar.gzshellcd bind-9.5.0-p2shell./configure -prefix=/usr/local/bind9 -with-dlz-mysql -enabl-threads=no -disable-openssl-version-check-with-dlz-mysql=/usr/local/mysql/include/mysql 要求bind安装中支持DLZ-enabl-threads=no关闭多线程-disable-openssl-version-check 这项是禁止openssl版本的检查shellmakeshellmake install3、创建数据库、表mysqlcreate databasemydata;mysqluse mydata;mysqlcreate tableother_dns_records (zone varchar (255),host varchar (255),type varchar (255),data varchar (255),ttl int(11),mx_priority varchar (255),refresh int(11),retry int(11),expire int(11),minimum int(11),serial bigint(20),resp_person varchar (255),primary_ns varchar (255);mysqlcreate tablecnc_dns_records (zone varchar (255),host varchar (255),type varchar (255),data varchar (255),ttl int(11),mx_priority varchar (255),refresh int(11),retry int(11),expire int(11),minimum int(11),serial bigint(20),resp_person varchar (255),primary_ns varchar (255);/向表中添加一条记录insert intoother_dns_records (zone,host,type,data,ttl,retry) values (,www,A,,86400,15);insertintocnc_dns_records(zone,host,type,data,ttl,retry)values(,www,A,2,86400,13);4、编辑/usr/local/bind9/etc/named.confcd/usr/local/bind9/etc./sbin/rndc-config-a./sbin/rndc-confignamed.confvi!$/删除#Usewiththefollowinginnamed.conf,adjustingtheallowlistasneeded:以前的行将#Usewiththefollowinginnamed.conf,adjustingtheallowlistasneeded:和#Endofnamed.conf之间的行前#号最终的etc/named.conf文件如下： dlz Mysql zone database mysql #Usewiththefollowinginnamed.conf,adjustingtheallowlistasneeded:keyrndc-key algorithmhmac-md5; secret2rkqGUle0VlsawCL2+IKsA=;controls inetport953 allow;keysrndc-key;#Endofnamed.confoptionsdirectory/usr/local/binid/etc/;pid-file/usr/local/binid/var/run/named.pid;allow-queryany;recursionno;versiongaint-d1;include/usr/local/binid/etc/cnc.cl;include/usr/local/binid/etc/other.cl;viewcnc-usermatch-clientscnc;dlzMysqlzonedatabasemysqlhost=localhostdbname=mydbssl=falseport=3306user=rootpass=abc123!selectzonefromcnc_dns_recordswherezone = %zone%selectttl,type,mx_priority,casewhenlower(type)=txtthenconcat(,data,)whenlower(type)=soathenconcat_ws(, data, resp_person, serial, refresh, retry, expire, minimum)elsedataendasmydatafromcnc_dns_recordswherezone = %zone%andhost = %record%; ;viewother-usermatch-clientsother;dlzMysqlzonedatabasemysqlhost=localhostdbname=mydbssl=falseport=3306user=rootpass=abc123!selectzonefromother_dns_recordswherezone = %zone%selectttl,type,mx_priority,casewhenlower(type)=txtthenconcat(,data,)whenlower(type)=soathenconcat_ws(, data, resp_person, serial, refresh, retry, expire, minimum)elsedataendasmydatafromother_dns_recordswherezone = %zone%andhost = %record%; host=localhost dbname=dns_data ssl=tRue select zone from dns_records where zone = %zone% select ttl, type, mx_priority, case when lower(type)=txt then concat(, data, ) when lower(type) = soa then concat_ws( , data, resp_person, serial, refresh, retry, expire, minimum) else data end from dns_records where zone = %zone% and host = %record%; etc/cnc.cl如下：aclcnc/24; etc/other.cl如下：aclother/18;5、测试打开named测试/usr/local/bind9/sbin/named-g-d1-c/usr/local/bind9/etc/named.conf注：如果不想写全路径来启动bind和mysql的话，可以编辑：vi/root/.bash_profile加入如下两行：PATH=$PATH:/usr/local/bind9/sbinPATH=$PATH:/usr/local/mysql/bin/保存退出./root/.bash_profile(或者：.!$)配置文件中的sql查询可以参照BIND-DLZdlz Mysql zone database mysql host=localhost dbname=dns_data ssl=tRue select zone from dns_records where zone = %zone% select ttl, type, mx_priority, case when lower(type)=txt then concat(, data,