概述

公司内部DNS服务器，利用现有服务器资源，一主两从模式，目前只做正向解析。

参考

1. 搭建DNS服务器(Ubuntu)
2. DNS_在Ubuntu和Centos上安装并配置Dns服务器
3. Centos7搭建DNS服务器

1.Ubuntu24.04

1.1安装DNS服务

apt install bind9 bind9utils bind9-doc dnsutils

1.2修改/etc/default/named

vim /etc/default/named

#
# run resolvconf?
RESOLVCONF=no

# startup options for the server
# 使用IPV4监听
OPTIONS="-u bind -4"

1.3配置服务（主）

1.3.1 编辑配置文件/etc/bind/named.conf.options

vim /etc/bind/named.conf.options

# 建立信任访问控制列表-“trusted”
acl "trusted" {
        172.31.1.1;      # localhost
        172.16.111.1;    # localhost   
        172.16.111.2;    # localhost
        172.16.0.0/16;   # trusted networks
        172.31.0.0/16;   # trusted networks
};


options {
        directory "/var/cache/bind";

        # 增加内容
        recursion yes;                 # 启用了递归查询
        allow-recursion { trusted; };  # 只允许来自“受信任”的地址进行递归查询
        listen-on { any; };     # ns1 IP address
        allow-transfer { trusted; };  # 只允许来自“受信任”进行区域传输


        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.

        // 关键修改1：设置为“仅转发”模式（优先用forwarders，不递归根服务器）
        forward only;
        # 配置公网DNS用于转发查询请求
        forwarders {
                223.5.5.5;       # 阿里云DNS
                114.114.114.114; # 联通DNS
                8.8.8.8;         # 谷歌DNS
        };

        //========================================================================
        // If BIND logs error messages about the root key being expired,
        // you will need to update your keys.  See https://www.isc.org/bind-keys
        //========================================================================
        // 关键修改2：临时关闭DNSSEC验证（部分域名DNSSEC配置异常会导致解析失败）
        dnssec-validation no;
        //dnssec-validation auto;

        // 可选：增加解析超时时间（适配国内网络）
        //max-cache-ttl 300;

        # 不监听IPv6
        // listen-on-v6 { any; };
};

1.3.2 编辑配置文件/etc/bind/named.conf.local

vim /etc/bind/named.conf.local

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

zone "int.mydomain.org" {    #指定DNS区域的域名是int.mydomain.org

        type master;      #设置了该区域的类型为master,是此区域的权威主服务器，负责维护该区域的所有DNS记录。

        file "/etc/bind/zones/db.int.mydomain.org"; # 指定了包含该区域DNS记录的文件路径

        allow-transfer {      # 允许从IP192.168.202.129进行区域传输，辅助DNS服务器的地址，需要从主服务器上复制区域数据
                    172.26.111.1;
                    172.26.111.2;
        };
        
        notify yes;  # 通知从DNS
};


zone "prod.mydomain.org" {    #指定DNS区域的域名是prod.mydomain.org

        type master;      #设置了该区域的类型为master,是此区域的权威主服务器，负责维护该区域的所有DNS记录。

        file "/etc/bind/zones/db.prod.mydomain.org"; # 指定了包含该区域DNS记录的文件路径

        allow-transfer {      # 允许从IP192.168.202.129进行区域传输，辅助DNS服务器的地址，需要从主服务器上复制区域数据
                    172.26.111.1;
                    172.26.111.2;
        };

        notify yes;  # 通知从DNS
};


zone "test.mydomain.org" {    #指定DNS区域的域名是test.mydomain.org

        type master;      #设置了该区域的类型为master,是此区域的权威主服务器，负责维护该区域的所有DNS记录。

        file "/etc/bind/zones/db.test.mydomain.org"; # 指定了包含该区域DNS记录的文件路径

        allow-transfer {      # 允许从IP192.168.202.129进行区域传输，辅助DNS服务器的地址，需要从主服务器上复制区域数据
                    172.26.111.1;
                    172.26.111.2;
        };

        notify yes;  # 通知从DNS
};

1.3.3 编辑配置区域（zone）文件

• 创建区域文件目录，与/etc/bind/named.conf.local文件中定义路径一致

makedir -p /etc/bind/zones

• 创建域名区域

cp /etc/bind/db.local /etc/bind/zones/db.int.mydomain.org
cp /etc/bind/db.local /etc/bind/zones/db.prod.mydomain.org
cp /etc/bind/db.local /etc/bind/zones/db.test.mydomain.org

• 修改db.int.mydomain.org

1. 创建正向域名解析

;
; BIND data file for local loopback interface
;
$TTL    300     # 记录记录的生存周期 300秒
@       IN      SOA     ns.int.mydomain.org. root.int.mydomain.org. (   # DNS服务器的域名和管理员邮箱root@int.mydomain.org,其中@用.替换。
                              2         ; Serial   # 文件版本号，数值要小于2^32-1,每次更新文件需要递增
                           3600         ; Refresh  # 从服务器检查主服务器的更新的间隔时间，1小时
                            900         ; Retry    # 从服务器连接主服务器失败的，重试时间间隔，900秒
                        2419200         ; Expire   # 从服务器在过期时间内无法连接主服务器，将停止解析，28天
                         300)           ; Negative Cache TTL # 当查询一个不存在的记录时，DNS服务器会从缓存中返回否定响应，缓存时间300秒。
;

; NS records for name servers  #NS记录,指定了负责处理该区域查询的服务器
        IN      NS      ns.int.mydomain.org.
        IN      NS      ns1.int.mydomain.org.
        IN      NS      ns2.int.mydomain.org.

; A records for name servers  #定义了两个A记录，将DNS服务器的FQDN映射到对应的IP地址
ns.int.mydomain.org.           IN      A       172.31.1.1
ns1.int.mydomain.org.          IN      A       172.26.111.1
ns2.int.mydomain.org.          IN      A       172.26.111.2


; A records for int.mydomain.org #两行定义了A记录，将域名映射到对应的IP地址
server1.int.mydomain.org.      IN      A       172.31.1.1
server2.int.mydomain.org.      IN      A       172.31.1.2                                                        

2. 创建反向域名解析
   待完善

1.3.4 检查配置文件

• 检查配置文件（没有错误，输出无提示）

named-checkconf 

• 检测区域配置文件

named-checkzone int.mydomain.org /etc/bind/zones/db.int.mydomain.org 

root@localhost:/etc/bind/zones# named-checkzone int.mydomain.org /etc/bind/zones/db.int.mydomain.org 
zone int.mydomain.org/IN: loaded serial 2
OK

1.3启动服务

• 启动服务

systemctl start named

• 开机启动

systemctl enable named

Synchronizing state of named.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable named

• 查看服务

systemctl status named

● named.service - BIND Domain Name Server
     Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; preset: enabled)
     Active: active (running) since Fri 2025-03-21 11:34:54 UTC; 10min ago
       Docs: man:named(8)
   Main PID: 21660 (named)
     Status: "running"
      Tasks: 146 (limit: 541581)
     Memory: 27.6M (peak: 29.3M)
        CPU: 111ms
     CGroup: /system.slice/named.service
             └─21660 /usr/sbin/named -f -u bind -4

1.4测试服务

• 本机测试定义的域名（失败）

nslookup ns.int.mydomain.org

Server:         127.0.0.53
Address:        127.0.0.53#53

** server can't find ns.int.mydomain.org: NXDOMAIN

• 修改systemd-resolved配置

1. 修改DNS服务器，增加本机绑定的IP 172.31.1.1

vim /etc/systemd/resolved.conf 

#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it under the
#  terms of the GNU Lesser General Public License as published by the Free
#  Software Foundation; either version 2.1 of the License, or (at your option)
#  any later version.
#
# Entries in this file show the compile time defaults. Local configuration
# should be created by either modifying this file (or a copy of it placed in
# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
# the /etc/systemd/resolved.conf.d/ directory. The latter is generally
# recommended. Defaults can be restored by simply deleting the main
# configuration file and all drop-ins located in /etc/.
#
# Use 'systemd-analyze cat-config systemd/resolved.conf' to display the full config.
#
# See resolved.conf(5) for details.

[Resolve]
# Some examples of DNS servers which may be used for DNS= and FallbackDNS=:
# Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
# Google:     8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
# Quad9:      9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
DNS=172.31.1.1 223.5.5.5 8.8.8.8
#FallbackDNS=
#Domains=
#DNSSEC=no
#DNSOverTLS=no
#MulticastDNS=no
#LLMNR=no
#Cache=no-negative
#CacheFromLocalhost=no
#DNSStubListener=yes
#DNSStubListenerExtra=
ReadEtcHosts=yes
#ResolveUnicastSingleLabel=no
#StaleRetentionSec=0        

2. 重启systemd-resolved服务

systemctl restart systemd-resolved  

3. 重新测试
   尚不清楚，为什么127.0.0.1不能够解析域名，怀疑与/etc/bind/named.conf.default-zones的定义有关（ReadEtcHosts=yes 打开后，可以解析）

nslookup ns.int.mydomain.org

Non-authoritative answer:
Name:   ns.int.mydomain.org
Address: 172.31.1.1

2.Centos7.9

2.1安装DNS服务

yum install -y bind bind-utils

2.2修改/etc/default/named

vim /etc/named.conf

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

acl "trusted" {
        172.31.1.1;      # localhost
        172.16.111.1;    # localhost   
        172.16.111.2;    # localhost
        172.16.0.0/16;   # trusted networks
        172.31.0.0/16;   # trusted networks
};

options {
        listen-on port 53 { any; };        
        //listen-on-v6 port 53 { ::1; };   # 禁用IPv6
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-query     { trusted; };      # 修改配置受信任区域
        allow-notify { trusted; }; # slave服务器会通知自己，所有增加允许区域（包括自身IP），不加会报错


        // 关键修改1：设置为“仅转发”模式（优先用forwarders，不递归根服务器）
        forward only;
        # 新增转发配置
        forwarders {
                223.5.5.5;
                114.114.114.114;
                8.8.8.8;
        };

        /* 
         - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
         - If you are building a RECURSIVE (caching) DNS server, you need to enable 
           recursion. 
         - If your recursive DNS server has a public IP address, you MUST enable access 
           control to limit queries to your legitimate users. Failing to do so will
           cause your server to become part of large scale DNS amplification 
           attacks. Implementing BCP38 within your network would greatly
           reduce such attack surface 
        */
        recursion yes;

        // 关键修改2：临时关闭DNSSEC验证（部分域名DNSSEC配置异常会导致解析失败）
        dnssec-enable no;
        dnssec-validation no;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.root.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/var/named/named.conf.local";   #新增的配置文件
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

2.3 配置服务（从）

2.3.1 编辑配置文件/var/named/named.conf.local

vim /var/named/named.conf.local

//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html

acl "trusted" {
//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

zone "int.xunku.org" {    #指定DNS区域的域名是int.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.int.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};


zone "prod.xunku.org" {    #指定DNS区域的域名是prod.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.prod.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};


zone "test.xunku.org" {    #指定DNS区域的域名是test.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.test.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};


zone "db.xunku.org" {    #指定DNS区域的域名是db.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.db.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};


zone "stg.xunku.org" {    #指定DNS区域的域名是stg.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.stg.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};


zone "ops.xunku.org" {    #指定DNS区域的域名是stg.xunku.org

        type slave;      #设置了该区域的类型为slave,是此区域的从服务器，负责维护该区域的所有DNS记录。

        file "slaves/db.ops.xunku.org"; # 指定了包含该区域DNS记录的文件路径

        masters { 172.31.1.1; };  # 主域名服务器
};

2.3.2 文件赋权/var/named/named.conf.local

chown -R named:named /var/named/named.conf.local

2.3启动服务

2.3.1 启用服务检查状态

systemctl status named

[root@centos7 etc]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since 一 2025-03-24 17:05:03 CST; 1 day 3h ago
  Process: 1325 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 1292 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 1332 (named)
   CGroup: /system.slice/named.service
           └─1332 /usr/sbin/named -u named -c /etc/named.conf

2.3.2检查同步区域文件

ll /var/named/slaves

[root@centos7 slaves]# ll /var/named/slaves
总用量 24
-rw-r--r-- 1 named named 682 3月  25 19:37 db.db.xunku.org
-rw-r--r-- 1 named named 399 3月  25 20:06 db.int.xunku.org
-rw-r--r-- 1 named named 305 3月  25 06:55 db.ops.xunku.org
-rw-r--r-- 1 named named 264 3月  25 20:10 db.prod.xunku.org
-rw-r--r-- 1 named named 261 3月  25 19:35 db.stg.xunku.org
-rw-r--r-- 1 named named 311 3月  25 19:29 db.test.xunku.org

3. 测试主从同步

3.1 更新主DNS

3.1.1 修改/etc/bind/zones/db.db.xunku.org

; BIND data file for local loopback interface
;
$TTL    300
@       IN      SOA     ns.int.xunku.org. root.int.xunku.org. (
                           # 更新编号
                           250325005    ; Serial
                           3600         ; Refresh
                            900         ; Retry
                        2419200         ; Expire
                            300 )       ; Negative Cache TTL
;


; NS records for name servers  #NS记录,指定了负责处理该区域查询的服务器
        IN      NS      ns.int.xunku.org.
        IN      NS      ns1.int.xunku.org.
        IN      NS      ns2.int.xunku.org.


; A records for name servers  #定义了两个A记录，将DNS服务器的FQDN映射到对应的IP地址
ns.int.xunku.org.             IN      A       172.31.1.1
ns1.int.xunku.org.            IN      A       172.26.111.1
ns2.int.xunku.org.            IN      A       172.26.112.2


; A records for db.xunku.org #两行定义了A记录，将域名映射到对应的IP地址
test1.db.xunku.org.           IN      A       172.28.242.100
test2.db.xunku.org.           IN      A       172.28.242.102
# 新增加A记录 test3.db.xunku.org
test3.db.xunku.org.           IN      A       172.28.242.108

3.1.2 重启服务验证主DNS

• 更新服务

systemctl reload named

• 主DNS域名解析生效

root@tengsx:/etc/bind/zones# nslookup 
> server 172.31.1.1
Default server: 172.31.1.1
Address: 172.31.1.1#53
> test3.db.xunku.org
Server:         172.31.1.1
Address:        172.31.1.1#53

Name:   test3.db.xunku.org
Address: 172.28.242.109
> 

• 检查服务信息

systemctl status named

• 显示同步从DNS成功

root@tengsx:/etc/bind/zones# /usr/sbin/named  -v
BIND 9.18.30-0ubuntu0.24.04.2-Ubuntu (Extended Support Version) <id:>
root@tengsx:/etc/bind/zones# systemctl status named
● named.service - BIND Domain Name Server
     Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; preset: enabled)
     Active: active (running) since Tue 2025-03-25 21:15:58 CST; 20min ago
       Docs: man:named(8)
    Process: 2779 ExecReload=/usr/sbin/rndc reload (code=exited, status=0/SUCCESS)
   Main PID: 2566 (named)
     Status: "running"
      Tasks: 146 (limit: 541581)
     Memory: 34.4M (peak: 38.6M)
        CPU: 554ms
     CGroup: /system.slice/named.service
             └─2566 /usr/sbin/named -f -u bind -4

Mar 25 21:17:26 tengsx named[2566]: zone db.xunku.org/IN: sending notifies (serial 250325005)
Mar 25 21:17:26 tengsx named[2566]: all zones loaded
Mar 25 21:17:26 tengsx named[2566]: running
Mar 25 21:17:26 tengsx named[2566]: client @0x74808800e5a8 172.26.111.1#56943 (db.xunku.org): transfer of 'db.xunku.org/IN': IXFR version not in journal, falling back to AXFR
Mar 25 21:17:26 tengsx named[2566]: client @0x74808800e5a8 172.26.111.1#56943 (db.xunku.org): transfer of 'db.xunku.org/IN': AXFR-style IXFR started (serial 250325005)
Mar 25 21:17:26 tengsx named[2566]: client @0x74808800e5a8 172.26.111.1#56943 (db.xunku.org): transfer of 'db.xunku.org/IN': AXFR-style IXFR ended: 1 messages, 16 records, 423 bytes, 0.001 secs (423000 bytes/sec) (serial 250325005)
Mar 25 21:17:26 tengsx named[2566]: client @0x747fc0004d18 172.26.112.2#33278 (db.xunku.org): transfer of 'db.xunku.org/IN': IXFR version not in journal, falling back to AXFR
Mar 25 21:17:26 tengsx named[2566]: client @0x747fc0004d18 172.26.112.2#33278 (db.xunku.org): transfer of 'db.xunku.org/IN': AXFR-style IXFR started (serial 250325005)
Mar 25 21:17:26 tengsx named[2566]: client @0x747fc0004d18 172.26.112.2#33278 (db.xunku.org): transfer of 'db.xunku.org/IN': AXFR-style IXFR ended: 1 messages, 16 records, 423 bytes, 0.001 secs (423000 bytes/sec) (serial 250325005

3.2 检查从DNS

3.2.1 检查/var/named/slaves/db.db.xunku.org

• 查看更新文件

[root@centos7-172-026-112-002 slaves]# ll
总用量 24
-rw-r--r-- 1 named named 728 3月  25 21:17 db.db.xunku.org
-rw-r--r-- 1 named named 399 3月  25 21:14 db.int.xunku.org
-rw-r--r-- 1 named named 308 3月  25 21:10 db.ops.xunku.org
-rw-r--r-- 1 named named 264 3月  25 21:12 db.prod.xunku.org
-rw-r--r-- 1 named named 261 3月  25 21:12 db.stg.xunku.org
-rw-r--r-- 1 named named 311 3月  25 20:18 db.test.xunku.org

• 检查从DNS日志

systemctl status named

• 显示从主DNS同步成功

[root@centos7-172-026-112-002 slaves]# systemctl status named
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since 二 2025-03-25 21:01:47 CST; 18min ago
  Process: 4308 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 4324 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 4321 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
 Main PID: 4326 (named)
   CGroup: /system.slice/named.service
           └─4326 /usr/sbin/named -u named -c /etc/named.conf

3月 25 21:17:26 centos7-172-026-112-002 named[4326]: client @0x7f3a3400bb60 172.26.111.1#33064: received notify for zone 'db....org'
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: zone db.xunku.org/IN: notify from 172.26.111.1#33064: serial 250325005
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: zone db.xunku.org/IN: Transfer started.
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: transfer of 'db.xunku.org/IN' from 172.31.1.1#53: connected using 172.2...33278
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: zone db.xunku.org/IN: transferred serial 250325005
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: transfer of 'db.xunku.org/IN' from 172.31.1.1#53: Transfer status: success
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: transfer of 'db.xunku.org/IN' from 172.31.1.1#53: Transfer completed: 1.../sec)
3月 25 21:17:26 centos7-172-026-112-002 named[4326]: zone db.xunku.org/IN: sending notifies (serial 250325005)
3月 25 21:17:27 centos7-172-026-112-002 named[4326]: client @0x7f3a4c323660 172.31.1.1#49633: received notify for zone 'db.x....org'
3月 25 21:17:27 centos7-172-026-112-002 named[4326]: zone db.xunku.org/IN: notify from 172.31.1.1#49633: zone is up to date

• 从DNS解析成功

[root@centos7-172-026-112-002 slaves]# nslookup
> test3.db.xunku.org
Server:         172.26.112.2
Address:        172.26.112.2#53

Name:   test3.db.xunku.org
Address: 172.28.242.109