域名配置参考
1. 主干系统各业务主机申请test域主机名，指定别名记录。主干系统业务主机域名申请表由业务部署单位填写，并防止与test域原有主机名冲突。
序号 | 业务系统 | 主机名 | 别名 | IP地址 |
1 | 示例：web业务 | web.test | web.abc.test | X.X.X.X |
2. 在test域中创建一个新子域（例如：abc.test），在DNS服务器添加子域授权NS记录和相应A记录，子域权威授权地址指向双活数据中心平台DNS服务器地址。并针对子域备案，防止冲突和占用。
3. 双活数据中心平台智能DNS负责对abc.test新子域的权威解析，并建立各业务主机的相应A记录。
4. 总部及分支部门客户端网络仍采用原有DNS设置。
1.DNS服务IP
序号 | 数据中心 | 设备 | IP |
1 | 数据中心1 | DNS | x.x.x.x |
2 | 数据中心2 | DNS | x.x.x.x |
2.域名关系对照表
环境 | 系统 | 用户访问域名 | 双活数据中心 |
生产环境 | 系统 | test.test | test.abc.test |
CA（内部）平台 | ca.test | ca.abc.test | |
业务平台 | ebp.test | ebp.abc.test | |
业务平台服务接入 | ebps.test | ebps.abc.test | |
测试环境 | 系统 | testt.test | testt.abc.test |
CA（内部）平台 | cat.test | cat.abc.test | |
业务平台 | ebpt.test | ebpt.abc.test |
1.根DNS服务器参考配置
1)zone test文件参考配置
abc IN NS ns1.abc.test.
IN NS ns2.abc.test.
ns1.abc.test. IN A 10.91.193.50
ns2.abc.test. IN A 10.91.193.58
test IN CNAME test.abc.test.
ca IN CNAME ca.abc.test
ebp IN CNAME ebp.abc.test
ebps IN CNAME ebps.abc.test
testt IN CNAME testt.abc.test
cat IN CNAME cat.abc.test
ebpt IN CNAME ebpt.abc.test
修改named.conf文件
方案一：named.conf中禁用test域内转发
zone "test"in {
forwarders{};
};
方案二：named.conf中新增abc.test域转发
zone "abc.test" in {
type forward;
forwarders{10.91.193.50;10.91.193.58;};
};
2.局端DNS服务器参考配置
named.conf 文件中添加子域转发
zone "abc.test" in {
type forward;
forwarders {10.91.193.50;10.91.193.58;};
};
1.根DNS解析测试
1)测试结论
生产环境域名可正常解析，测试环境广域网GSLB未配置相应A记录
测试结果
abcdeMacBook-Air:~abc$ dig test.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> test.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52779
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;;QUESTION SECTION:
;test.test. IN A
;;ANSWER SECTION:
test.test. 172800 IN CNAME test.abc.test.
test.abc.test. 60 IN A 10.91.8.1
;;AUTHORITY SECTION:
abc.test. 172800 IN NS ns2.abc.test.
abc.test. 172800 IN NS ns1.abc.test.
;;Query time: 71 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:10:52 2016
;;MSG SIZE rcvd: 109
abcdeMacBook-Air:~abc$ dig ca.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> ca.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63031
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;;QUESTION SECTION:
;ca.test. IN A
;;ANSWER SECTION:
ca.test. 172800 IN CNAME ca.abc.test.
ca.abc.test. 60 IN A 10.91.8.5
;;AUTHORITY SECTION:
abc.test. 172800 IN NS ns1.abc.test.
abc.test. 172800 IN NS ns2.abc.test.
;;Query time: 45 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:01 2016
;;MSG SIZE rcvd: 105
abcdeMacBook-Air:~abc$ dig ebp.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> ebp.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63849
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;;QUESTION SECTION:
;ebp.test. IN A
;;ANSWER SECTION:
ebp.test. 172800 IN CNAME ebp.abc.test.
ebp.abc.test. 60 IN A 10.91.8.2
;;AUTHORITY SECTION:
abc.test. 172800 IN NS ns2.abc.test.
abc.test. 172800 IN NS ns1.abc.test.
;;Query time: 37 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:10 2016
;;MSG SIZE rcvd: 107
abcdeMacBook-Air:~abc$ dig ebps.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> ebps.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52230
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;;QUESTION SECTION:
;ebps.test. IN A
;;ANSWER SECTION:
ebps.test. 172800 IN CNAME ebps.abc.test.
ebps.abc.test. 55 IN A 10.91.8.32
;;AUTHORITY SECTION:
abc.test. 172800 IN NS ns1.abc.test.
abc.test. 172800 IN NS ns2.abc.test.
;;Query time: 3 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:24 2016
;;MSG SIZE rcvd: 109
abcdeMacBook-Air:~abc$ dig testt.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> testt.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1823
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;;QUESTION SECTION:
;testt.test. IN A
;;ANSWER SECTION:
testt.test. 172800 IN CNAME testt.abc.test.
;;Query time: 36 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:35 2016
;;MSG SIZE rcvd: 59
abcdeMacBook-Air:~abc$ dig cat.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> cat.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31469
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;;QUESTION SECTION:
;cat.test. IN A
;;ANSWER SECTION:
cat.test. 172800 IN CNAME cat.abc.test.
;;Query time: 34 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:45 2016
;;MSG SIZE rcvd: 55
abcdeMacBook-Air:~abc$ dig ebpt.test @10.10.8.121
;<<>> DiG 9.8.3-P1 <<>> ebpt.test @10.10.8.121
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60877
;;flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;;QUESTION SECTION:
;ebpt.test. IN A
;;ANSWER SECTION:
ebpt.test. 172800 IN CNAME ebpt.abc.test.
;;Query time: 41 msec
;;SERVER: 10.10.8.121#53(10.10.8.121)
;;WHEN: Fri Feb 19 15:11:53 2016
;;MSG SIZE rcvd: 57
abcdeMacBook-Air:~abc$
另外有需要云服务器可以了解下创新互联cdcxhl.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。