Addition/Setup.Bind.As.Cache.DNS.Server - Revision history

ZhangHuangbin: Merge

ZhangHuangbin — Mon, 29 Mar 2010 16:58:46 GMT

Merge

← Older revision		Revision as of 16:58, 29 March 2010
Line 73:		Line 73:
	Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.		Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.

-	Start named now:	+	Start named now, and make it start while system startup:
	* On RHEL/CentOS:		* On RHEL/CentOS:
-	{{cmd\|<pre># /etc/init.d/named restart~~</pre>}}~~	+	{{cmd\|<pre>
-		+	# /etc/init.d/named restart
-	* On Debian/Ubuntu:	+	# chkconfig --level 345 named on
-	* On FreeBSD:	+	</pre>}}
-		+
-	~~Make named start while system startup:~~	+
-	* on RHEL/CentOS:	+
-	~~{{cmd\|<pre>~~# chkconfig --level 345 named on</pre>}}	+

	* On Debian/Ubuntu:		* On Debian/Ubuntu:

ZhangHuangbin: Start named now.

ZhangHuangbin — Mon, 29 Mar 2010 16:57:49 GMT

Start named now.

← Older revision		Revision as of 16:57, 29 March 2010
Line 72:		Line 72:

	Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.		Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.
		+
		+	Start named now:
		+	* On RHEL/CentOS:
		+	{{cmd\|<pre># /etc/init.d/named restart</pre>}}
		+
		+	* On Debian/Ubuntu:
		+	* On FreeBSD:

	Make named start while system startup:		Make named start while system startup:

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:54:54 GMT

Configure Bind

← Older revision		Revision as of 16:54, 29 March 2010
Line 44:		Line 44:
	{{cfg\|/etc/named.caching-nameserver.conf\|<pre>		{{cfg\|/etc/named.caching-nameserver.conf\|<pre>
	options {		options {
		+	// <-- BELOW ARE DEFAULT SETTINGS SHIPPED IN RHEL/CENTOS -->
	listen-on port 53 { 127.0.0.1; };		listen-on port 53 { 127.0.0.1; };
	listen-on-v6 port 53 { ::1; };		listen-on-v6 port 53 { ::1; };
Line 58:		Line 59:
	allow-query { localhost; };		allow-query { localhost; };
	allow-query-cache { localhost; };		allow-query-cache { localhost; };
		+	// <-- END DEFAULT SETTINGS -->

	// <-- Add or modify below lines -->		// <-- Add or modify below lines -->
Line 70:		Line 72:

	Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.		Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.
		+
		+	Make named start while system startup:
		+	* on RHEL/CentOS:
		+	{{cmd\|<pre># chkconfig --level 345 named on</pre>}}
		+
		+	* On Debian/Ubuntu:
		+	* On FreeBSD:

	= Use Bind as DNS server on your server =		= Use Bind as DNS server on your server =

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:49:48 GMT

Configure Bind

← Older revision		Revision as of 16:49, 29 March 2010
Line 59:		Line 59:
	allow-query-cache { localhost; };		allow-query-cache { localhost; };

		+	// <-- Add or modify below lines -->
	forward first; //using external DNS if no reference on this server		forward first; //using external DNS if no reference on this server
	forwarders {		forwarders {
Line 64:		Line 65:
	8.8.8.8; // Google DNS here is the sample DNS		8.8.8.8; // Google DNS here is the sample DNS
	};		};
		+	// <-- END -->
	};		};
	</pre>}}		</pre>}}

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:48:55 GMT

Configure Bind

← Older revision		Revision as of 16:48, 29 March 2010
Line 38:		Line 38:
	= Configure Bind =		= Configure Bind =

-	The main configuration file for named ~~resides in ''/var/named/chroot~~/etc/named.caching-nameserver.conf'~~' which is also soft linked from ''~~/etc/named.caching-nameserver.conf~~'' . named configuration file supports C/C++ style comments~~.	+	The main configuration file for named is /etc/named.caching-nameserver.conf (actually, it's a symbol link to /var/named/chroot/etc/named.caching-nameserver.conf).

	Below is a configuration file for a machine for iRedMail localhost only. The comments inline explain what each option does.		Below is a configuration file for a machine for iRedMail localhost only. The comments inline explain what each option does.

-	Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.	+	{{cfg\|/etc/named.caching-nameserver.conf\|<pre>
-		+	options {
-	{{cfg\|\|<pre>	+	listen-on port 53 { 127.0.0.1; };
-	options {	+	listen-on-v6 port 53 { ::1; };
-	listen-on port 53 { 127.0.0.1; };	+	directory "/var/named";
-	listen-on-v6 port 53 { ::1; };	+	dump-file "/var/named/data/cache_dump.db";
-	directory "/var/named";	+	statistics-file "/var/named/data/named_stats.txt";
-	dump-file "/var/named/data/cache_dump.db";	+	memstatistics-file "/var/named/data/named_mem_stats.txt";
-	statistics-file "/var/named/data/named_stats.txt";	+
-	memstatistics-file "/var/named/data/named_mem_stats.txt";	+
-		+
-	~~// <-- Add or modify below lines -->~~	+
-	~~forward first; //using external DNS if no reference on this server~~	+
-	~~forwarders {~~	+
-	~~202.76.4.18; // CPCNet DNS you should use the DNS from your ISP~~	+
-	~~8.8.8.8; // Google DNS here is the sample DNS~~	+
-	};	+
-	~~// <-- End -->~~	+

	// Those options should be used carefully because they disable port		// Those options should be used carefully because they disable port
Line 65:		Line 55:
	// query-source port 53;		// query-source port 53;
	// query-source-v6 port 53;		// query-source-v6 port 53;
-		+
-	allow-query { localhost; };	+	allow-query { localhost; };
-	allow-query-cache { localhost; };	+	allow-query-cache { localhost; };
-	};	+
-	~~logging~~ {	+	forward first; //using external DNS if no reference on this server
-	~~channel default_debug {~~	+	forwarders {
-	~~file "data/named~~.~~run"~~;	+	202.76.4.18; // CPCNet DNS you should use the DNS from your ISP
-	~~severity dynamic;~~	+	8.8.8.8; // Google DNS here is the sample DNS
-	};	+
-	};	+
-	~~view localhost_resolver {~~	+
-	~~match-clients { localhost; };~~	+
-	~~match-destinations { localhost; };~~	+
-	~~recursion yes;~~	+
-	~~include "~~/~~etc~~/~~named~~.~~rfc1912~~.~~zones"~~;	+
	};		};
		+	};
	</pre>}}		</pre>}}
-	~~To use your caching-nameserver, open ''/etc/resolv.conf'' file and add the following line to make all query carry on the local iRedMail only.~~

-	~~{{cfg\|/etc/resolv~~.~~conf\|<pre>nameserver 127~~.~~0.0.1</pre>}}~~	+	Since the DNS cache server is for iRedMail local use only, so the IP listen and query is only for localhost. If you want to share the DNS caching for local network for any query, you need to modify the config file to your own.

-	~~Comment all other lines in the file~~, ~~so that finally the file looks like~~	+	= Use Bind as DNS server on your server =
-	~~{{cfg\|~~/etc/resolv.conf~~\|<pre>~~	+	To use named, just open ''/etc/resolv.conf'' file and add the following line, it will make all DNS query carried on local named only.
-	~~# search yourdomain~~.~~com~~	+
-	~~# nameserver 202.76.4.18~~	+
-	~~# nameserver 8.8.8.8~~	+
-	~~nameserver 127.0.0.1~~	+
-	~~</pre>}}~~	+

-	~~save and restart the service:~~	+	{{cfg\|/etc/resolv.conf\|<pre>nameserver 127.0.0.1</pre>}}

-	{~~{cmd\|<pre># service network restart</pre>}~~}	+	If local named doesn't have DNS records which you requested, it will forward requests to DNS servers which listed in '''forwarders {}''' in named config file.

	Now try to ping any domain and you will find that the server cannot resolve any domain name. That mean the domain only query itself the server itself.		Now try to ping any domain and you will find that the server cannot resolve any domain name. That mean the domain only query itself the server itself.

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:41:33 GMT

Configure Bind

← Older revision		Revision as of 16:41, 29 March 2010
Line 133:		Line 133:
	To make the DNS caching service start automatically everytime system bootup, simply enter:		To make the DNS caching service start automatically everytime system bootup, simply enter:

-	{{cmd\|<pre># chkconfig --level 345 named on</pre>	+	{{cmd\|<pre># chkconfig --level 345 named on</pre>}}

	Using caching-nameserver		Using caching-nameserver

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:38:47 GMT

Configure Bind

← Older revision		Revision as of 16:38, 29 March 2010
Line 45:		Line 45:

	{{cfg\|\|<pre>		{{cfg\|\|<pre>
-	//	+	options {
-	~~// named.caching-nameserver.conf~~	+
-	//	+
-	~~// Provided by Red Hat caching-nameserver package to configure the~~	+
-	~~// ISC BIND named(8) DNS server as a caching only nameserver~~	+
-	~~// (as a localhost DNS resolver only).~~	+
-	//	+
-	~~// See /usr/share/doc/bind*/sample/ for example named configuration files.~~	+
-	//	+
-	~~// DO NOT EDIT THIS FILE - use system-config-bind or an editor~~	+
-	~~// to create named.conf - edits to this file will be lost on~~	+
-	~~// caching-nameserver package upgrade.~~	+
-	//	+
-	options {	+
	listen-on port 53 { 127.0.0.1; };		listen-on port 53 { 127.0.0.1; };
	listen-on-v6 port 53 { ::1; };		listen-on-v6 port 53 { ::1; };
Line 66:		Line 53:
	memstatistics-file "/var/named/data/named_mem_stats.txt";		memstatistics-file "/var/named/data/named_mem_stats.txt";

-	// <-- Add below lines -->	+	// <-- Add or modify below lines -->
	forward first; //using external DNS if no reference on this server		forward first; //using external DNS if no reference on this server
	forwarders {		forwarders {
Line 146:		Line 133:
	To make the DNS caching service start automatically everytime system bootup, simply enter:		To make the DNS caching service start automatically everytime system bootup, simply enter:

-	{{cmd\|<pre># chkconfig named on</pre>	+	{{cmd\|<pre># chkconfig --level 345 named on</pre>

	Using caching-nameserver		Using caching-nameserver

ZhangHuangbin: /* Install Bind */

ZhangHuangbin — Mon, 29 Mar 2010 16:34:23 GMT

Install Bind

← Older revision		Revision as of 16:34, 29 March 2010
Line 29:		Line 29:
	We choose '''BIND''' which is the most common package on DNS server.		We choose '''BIND''' which is the most common package on DNS server.

-	~~To check the package present or not on the system, just using~~	+	* On RHEL/CentOS:
-	{{cmd\|<pre>	+	{{cmd\|<pre># yum install caching-nameserver bind-chroot</pre>}}
-	# ~~rpm~~ -~~qa \|grep~~ bind	+
-	~~# rpm~~ -~~qa \|grep caching-nameserver~~	+
-	</pre>}}	+

-	~~by default on iRedMail server, the result is:~~	+	* On Debian/Ubuntu:
-		+
-	~~{{cmd\|<pre>~~	+
-	~~# rpm -qa \|grep bind~~	+
-	~~ypbind-1.19-12.el5~~	+
-	~~bind-libs-9.3.6-4.P1.el5_4.2~~	+
-	~~bind-utils-9.3.6-4.P1.el5_4.2~~	+
-	~~</pre>}}~~	+
-		+
-	~~the package we need on cache named server is~~	+
-		+
-	* ~~bind~~	+
-	* bind-chroot	+
-	* bind-util	+
-	* caching-nameserver	+
-		+
-	~~If they are not present on your system, install using~~	+
-		+
-	~~{{cmd\|<pre># yum install caching-nameserver bind-chroot<~~/~~pre>}}~~	+

-	~~all the components we need will be installed~~	+	* On FreeBSD:

	= Configure Bind =		= Configure Bind =

ZhangHuangbin: /* Mission */

ZhangHuangbin — Sat, 13 Mar 2010 03:24:39 GMT

Mission

← Older revision		Revision as of 03:24, 13 March 2010
Line 1:		Line 1:
		+	<table border="1">
		+	<tr>
		+	<th>Author</th>
		+	<td>[http://www.iredmail.org/forum/user528.html hoho]</td>
		+	</tr>
		+	</table>
		+
	=Mission=		=Mission=
-
	Configure a caching nameserver on a iRedMail server to speed up DNS lookup.		Configure a caching nameserver on a iRedMail server to speed up DNS lookup.
-

	= Advantage =		= Advantage =

ZhangHuangbin: /* Configure Bind */

ZhangHuangbin — Sat, 13 Mar 2010 03:22:30 GMT

Configure Bind

← Older revision		Revision as of 03:22, 13 March 2010
Line 113:		Line 113:
	To use your caching-nameserver, open ''/etc/resolv.conf'' file and add the following line to make all query carry on the local iRedMail only.		To use your caching-nameserver, open ''/etc/resolv.conf'' file and add the following line to make all query carry on the local iRedMail only.

-	~~'''~~nameserver 127.0.0.1~~'''~~	+	{{cfg\|/etc/resolv.conf\|<pre>nameserver 127.0.0.1</pre>}}

	Comment all other lines in the file, so that finally the file looks like		Comment all other lines in the file, so that finally the file looks like
-		+	{{cfg\|/etc/resolv.conf\|<pre>
-	# search yourdomain.com	+	# search yourdomain.com
-	# nameserver 202.76.4.18	+	# nameserver 202.76.4.18
-	# nameserver 8.8.8.8	+	# nameserver 8.8.8.8
-	nameserver 127.0.0.1	+	nameserver 127.0.0.1
		+	</pre>}}

	save and restart the service:		save and restart the service:

-	~~[root@mail ~]~~# service network restart	+	{{cmd\|<pre># service network restart</pre>}}

	Now try to ping any domain and you will find that the server cannot resolve any domain name. That mean the domain only query itself the server itself.		Now try to ping any domain and you will find that the server cannot resolve any domain name. That mean the domain only query itself the server itself.

	To start the DNS caching service		To start the DNS caching service
-		+	{{cmd\|<pre># service named start</pre>}}
-	~~[root@mail ~]~~# service named start	+

	and then check the log to see the service starting status log		and then check the log to see the service starting status log

-	~~[root@mail ~]~~# cat /var/log/messages	+	{{cmd\|<pre># cat /var/log/messages

	Mar 10 12:20:03 mail named[1522]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named -c /etc/named.caching-nameserver.conf -t /var/named/chroot		Mar 10 12:20:03 mail named[1522]: starting BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 -u named -c /etc/named.caching-nameserver.conf -t /var/named/chroot
Line 154:		Line 154:
	Mar 10 12:20:03 mail named[1522]: zone localdomain/IN/localhost_resolver: loaded serial 42		Mar 10 12:20:03 mail named[1522]: zone localdomain/IN/localhost_resolver: loaded serial 42
	Mar 10 12:20:03 mail named[1522]: zone localhost/IN/localhost_resolver: loaded serial 42		Mar 10 12:20:03 mail named[1522]: zone localhost/IN/localhost_resolver: loaded serial 42
		+	</pre>}}

	This mean the service is started successfully.		This mean the service is started successfully.
Line 161:		Line 162:
	To make the DNS caching service start automatically everytime system bootup, simply enter:		To make the DNS caching service start automatically everytime system bootup, simply enter:

-	~~[root@mail ~]~~# chkconfig named on	+	{{cmd\|<pre># chkconfig named on</pre>

	Using caching-nameserver		Using caching-nameserver
Line 167:		Line 168:
	Now your system will use your own nameserver (in caching mode) for resolving all domain names. To test if your nameserver use the following command		Now your system will use your own nameserver (in caching mode) for resolving all domain names. To test if your nameserver use the following command

-	~~[root@localhost ~]~~# dig fedora.co.in	+	{{cmd\|<pre># dig fedora.co.in</pre>}}

	Now if you use that command for the second time, the resolution time will be around 2-3 milli seconds while first time it would be around 400-700 milli seconds.		Now if you use that command for the second time, the resolution time will be around 2-3 milli seconds while first time it would be around 400-700 milli seconds.
Line 174:		Line 175:
	Below is two subsequent runs of dig for fedora.co.in . Notice the Query time.		Below is two subsequent runs of dig for fedora.co.in . Notice the Query time.

-	~~[root@bordeaux SPECS]~~# dig fedora.co.in	+	{{cmd\|<pre># dig fedora.co.in

	; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> fedora.co.in		; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> fedora.co.in
Line 209:		Line 210:
	;; WHEN: Wed Mar 10 15:18:56 2010		;; WHEN: Wed Mar 10 15:18:56 2010
	;; MSG SIZE rcvd: 277		;; MSG SIZE rcvd: 277
-		+	</pre>}}
	The query time is long at the first time.		The query time is long at the first time.

	Enter the command again and then you will see the query time is greatly reduced that mean the caching service running successfully.		Enter the command again and then you will see the query time is greatly reduced that mean the caching service running successfully.