Linux 编译安装BIND

下载网址：www.isc.org
   首选需要安装开发环境，包括openssl等开发包；
   解压文件
       tar -zxvf bind*.tar.gz
   创建named使用的系统用户
       groupadd -g 53 -r named
       useradd -u 53 -r named
   编译安装
       cd bind9*
       ./configure --prefix=/usr/local/bind9 --sysconfdir=/etc/named --disable-ipv6 --disable-chroot --enable-threads
                            放置到指定目录                放置配置文件目录         禁用ipv6       禁用chroot          启用线程编译
       make
       make install
   环境配置
       添加path环境变量：vim /etc/profile.d/named.sh      ==>    export PATH=/usr/local/bind9/bin:/usr/local/bind9/sbin:$PATH
       重读配置文件：. /etc/profile.d/named.sh
       导出库文件：vim /etc/ld.so.conf.d/named.conf         ==>    /usr/local/bind9/lib
       生成库文件搜索路径(可省)；ldconfig -v
       链接头文件：ln -sv /usr/local/bind9/include /usr/include/named
       添加man手册文件路径：vim /etc/man.config(vim /etc/man_db.conf（centos7）)            ==>   MANPATH             /usr/local/bind9/share/man
   添加配置文件
       mkdir /etc/named
       chmod 770 /etc/named
       cd /etc/named
       vim named.conf
           options {
               …
               directory "/var/named";
           };
           zone "." IN {
               type hint;
               file "named.ca";
           };
           zone "localhost" IN {
               type master;
               file "localhost.zone";
               allow-update { none; };
           };
           zone "0.0.127.in-addr.arpa" IN {
               type master;
               file "named.local";
               allow-update { none; };
           };
       chown    root:named -R /etc/named/
       chmod    640   /etc/named/*

       mkdir /var/named
       chmod 770 /var/named/
       cd /var/named
       dig -t NS . @server    > named.ca (server:互联网上的dns服务器地址，前提需要联网，也可以通过复制或者逐条添加)
       vim localhost.zone
           $TTL 1d
           @                                   IN             SOA                   localhost.                     admin.localhost. (
                                                                    2018110201
                                                                    1h
                                                                    900
                                                                    7d
                                                                    1d )
           @                                  IN             NS                    localhost.
           localhost.                      IN             A                      127.0.0.1
       vim named.local
           $TTL 1d
           @                                   IN             SOA                   localhost.                     admin.localhost. (
                                                                    2018110201
                                                                    1h
                                                                    900
                                                                    7d
                                                                    1d )
           @                                  IN             NS                    localhost.
           1                                    IN             PTR                  localhost.
       chown       root:named -R   /var/named/
       chmod      640    /var/named/*

   RNDC配置：
       生成秘钥：rndc-confgen   -r   /dev/urandom(指明随机数文件)
       # Start of rndc.conf
       key "rndc-key" {
           algorithm hmac-md5;
           secret "1W4vjerva3CEBn6gDSiODg==";
       };

       options {
           default-key "rndc-key";
           default-server 127.0.0.1;
           default-port 953;
       };
       # End of rndc.conf
       将上述内容添加至/etc/named/rndc.conf
       # Use with the following in named.conf, adjusting the allow list as needed:
       key "rndc-key" {
          algorithm hmac-md5;
          secret "1W4vjerva3CEBn6gDSiODg==";
       };

       controls {
          inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
       };
       # End of named.conf
       将上述内容添加至/etc/named/named.conf
       killall named
       named -u named
       然后就可以使用rndc命令了；
   余下的配置就是根据自己的情况来添加域了；

   模拟压力测试：
       在bind加压文件包(contrib/)里有个queryperf，通过它可以模拟客户端访问你的这台DNS服务器，用于测试性能；
       切换到此目录中直接执行./configure即可；
           cd /root/bind-9.12.3/contrib/queryperf
           ./configure
           make
           cp queryperf /usr/local/bind9/bin

       queryperf    -d   TEST_FILE -s   DNS_SERVER
           TEST_FILE：为自定义的目录，里面解析的条目越多，测试压力越大；
               格式为：               域名                                  RR
                       www.guowei.com                           A
           DNS_SERVER：为被测试的DNS服务器地址；
       可通过top、vmstat、iostat等命令来查看各种性能；