DNS内置命令rndc用法

た入场券 2022-06-05 07:54 787阅读 0赞

**rndc:**

**      rndc --> rndc (953/tcp)**

**      rndc COMMAND**

**      **

**      COMMAND:**

**             reload：重载主配置文件和区域解析库文件**

**             reload zone：重载区域解析库文件**

**             retransfer zone：手动启动区域传送过程，而不管序列号是否增加**

**             notify zone：重新对区域传送发通知**

**             reconfig:重载主配置文件和区域解析库文件**

**             querylog：开启或关闭查询日志；**

**             trace:递增debug级别**

**             trace LEVEL:指定使用的级别**

\[root@www slaves\]\# rndc -h

Usage: rndc \[-b address\] \[-c config\] \[-s server\]\[-p port\]

\[-k key-file \] \[-y key\] \[-V\] command

command is one of the following:

reload       Reload configuration file and zones.

reload zone \[class\[view\]\]

Reload a single zone.

refresh zone \[class\[view\]\]

Schedule immediate maintenance for a zone.

retransfer zone \[class\[view\]\]

Retransfer a single zone without checking serial number.

freeze       Suspend updates to all dynamic zones.

freeze zone \[class\[view\]\]

Suspend updates to a dynamic zone.

thaw         Enable updates to all dynamic zones and reload them.

thaw zone \[class\[view\]\]

Enable updates to a frozen dynamic zone and reload it.

notify zone \[class\[view\]\]

Resend NOTIFY messages for the zone.

reconfig     Reload configuration file and new zones only.

sign zone \[class\[view\]\]

Update zone keys, and sign as needed.

loadkeys zone \[class\[view\]\]

Updatekeys without signing immediately.

stats        Write server statistics to the statistics file.

querylog     Toggle query logging.

dumpdb\[-all|-cache|-zones\] \[view ...\]

Dump cache(s) to the dump file (named\_dump.db).

secroots \[view...\]

Write security roots to the secroots file.

stop         Save pending updates to master files and stop theserver.

stop -p      Save pending updates to master files and stop the server

reporting process id.

halt         Stop the server without saving pending updates.

halt -p      Stop the server without saving pending updates reporting

process id.

trace        Increment debugging level by one.

tracelevel  Change the debugging level.

notrace      Set debugging level to 0.

flush        Flushes all of the server's caches.

flush\[view\] Flushes the server's cache for a view.

flushname name\[view\]

Flush the given name from the server's cache(s)

status       Display status of the server.

recursing    Dump the queries that are currently recursing(named.recursing)

tsig-list    List all currently active TSIG keys, including bothstatically

configured and TKEY-negotiated keys.

tsig-delete keyname\[view\]

Delete a TKEY-negotiated TSIG key.

validation newstate\[view\]

Enable / disable DNSSEC validation.

addzone \["file"\] zone\[class \[view\]\] \{ zone-options \}

Addzone to given view. Requires new-zone-file option.

delzone \["file"\] zone\[class \[view\]\]

Removes zone from given view. Requires new-zone-fileoption.

\*restart     Restart the server.

\* == not yet implemented

Version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

\[root@www slaves\]\#

**(1)、querylog：开启或关闭查询日志**

\[root@www named\]\# rndc querylog

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 0

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging isOFF

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\# rndc querylog

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 0

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

**示例1：**

\[root@test slaves\]\# dig -t A field.com@192.168.88.130  //本机请求A记录

; <<>> DiG9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4 <<>> -t Afield.com @192.168.88.130

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status:NOERROR, id: 13030

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1,AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:

;field.com.                    IN     A

;; ANSWER SECTION:

field.com.             86400  IN     A      192.168.88.131

;; AUTHORITY SECTION:

field.com.             86400  IN     NS     ns1.field.com.

field.com.             86400  IN     NS     ns2.field.com.

;; ADDITIONAL SECTION:

ns1.field.com.         86400  IN     A      192.168.88.131

ns2.field.com.         86400  IN     A      192.168.88.130

;; Query time: 20 msec

;; SERVER:192.168.88.130\#53(192.168.88.130)

;; WHEN: Sat Nov 18 15:40:24 2017

;; MSG SIZE  rcvd: 111

\[root@test slaves\]\# tail /var/log/messages

Nov 18 13:11:21 test kernel: hrtimer: interrupttook 4108777 ns

Nov 18 15:22:32 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:22:32 test named\[3732\]: query logging isnow on

Nov 18 15:23:08 test named\[3732\]: client192.168.88.130\#42565: query: field.com IN A +(192.168.88.130)

Nov 18 15:36:32 test named\[3732\]: client192.168.88.131\#53071: query: field.com IN MX +(192.168.88.130)

Nov 18 15:37:22 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:37:22 test named\[3732\]: query logging isnow off

Nov 18 15:40:08 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:40:08 test named\[3732\]: query logging isnow on

Nov 18 15:40:24 testnamed\[3732\]: client 192.168.88.130\#58026: query: field.com IN A +(192.168.88.130)

**示例2：**

\[root@www named\]\# dig -t MX field.com @192.168.88.130//在主服务器上请求从服务器上MX记录:

; <<>> DiG9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4 <<>> -t MXfield.com @192.168.88.130

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status:NOERROR, id: 64200

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2,AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:

;field.com.                    IN     MX

;; ANSWER SECTION:

field.com.             86400  IN     MX     10 mx1.field.com.

field.com.             86400  IN     MX     20 mx2.field.com.

;; AUTHORITY SECTION:

field.com.             86400  IN     NS     ns2.field.com.

field.com.             86400  IN     NS     ns1.field.com.

;; ADDITIONAL SECTION:

mx1.field.com.         86400  IN     A      192.168.88.131

mx2.field.com.         86400  IN     A      192.168.88.130

ns1.field.com.         86400  IN     A      192.168.88.131

ns2.field.com.         86400  IN     A      192.168.88.130

;; Query time: 11 msec

;; SERVER:192.168.88.130\#53(192.168.88.130)

;; WHEN: Sat Nov 18 15:40:59 2017

;; MSG SIZE  rcvd: 167

\[root@test slaves\]\# tail /var/log/messages

Nov 18 15:22:32 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:22:32 test named\[3732\]: query logging isnow on

Nov 18 15:23:08 test named\[3732\]: client192.168.88.130\#42565: query: field.com IN A +(192.168.88.130)

Nov 18 15:36:32 test named\[3732\]: client192.168.88.131\#53071: query: field.com IN MX +(192.168.88.130)

Nov 18 15:37:22 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:37:22 test named\[3732\]: query logging isnow off

Nov 18 15:40:08 test named\[3732\]: received controlchannel command 'querylog'

Nov 18 15:40:08 test named\[3732\]: query logging isnow on

Nov 18 15:40:24 test named\[3732\]: client192.168.88.130\#58026: query: field.com IN A +(192.168.88.130)

Nov 18 15:40:59 testnamed\[3732\]: client 192.168.88.131\#45350: query: field.com IN MX +(192.168.88.130)

**示例3：**

\[root@www named\]\# dig -t MX field.com @192.168.88.131//在主服务器上请求本机上MX记录

; <<>> DiG9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4 <<>> -t MXfield.com @192.168.88.131

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status:NOERROR, id: 8280

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2,AUTHORITY: 2, ADDITIONAL: 4

;; QUESTION SECTION:

;field.com.                    IN     MX

;; ANSWER SECTION:

field.com.             86400  IN     MX     20 mx2.field.com.

field.com.             86400  IN     MX     10 mx1.field.com.

;; AUTHORITY SECTION:

field.com.             86400  IN     NS     ns1.field.com.

field.com.             86400  IN     NS     ns2.field.com.

;; ADDITIONAL SECTION:

mx1.field.com.         86400  IN     A      192.168.88.131

mx2.field.com.         86400  IN     A      192.168.88.130

ns1.field.com.         86400  IN     A      192.168.88.131

ns2.field.com.         86400  IN     A      192.168.88.130

;; Query time: 1 msec

;; SERVER:192.168.88.131\#53(192.168.88.131)

;; WHEN: Sat Nov 18 15:41:43 2017

;; MSG SIZE  rcvd: 167

\[root@test slaves\]\# dig -t A field.com @192.168.88.131//在从服务器上请求主服务器上A记录

; <<>> DiG9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4 <<>> -t Afield.com @192.168.88.131

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status:NOERROR, id: 3756

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1,AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:

;field.com.                    IN     A

;; ANSWER SECTION:

field.com.             86400  IN     A      192.168.88.131

;; AUTHORITY SECTION:

field.com.             86400  IN     NS     ns2.field.com.

field.com.             86400  IN     NS     ns1.field.com.

;; ADDITIONAL SECTION:

ns1.field.com.         86400  IN     A      192.168.88.131

ns2.field.com.         86400  IN     A      192.168.88.130

;; Query time: 1 msec

;; SERVER:192.168.88.131\#53(192.168.88.131)

;; WHEN: Sat Nov 18 15:42:04 2017

;; MSG SIZE  rcvd: 111

\[root@www named\]\# tail /var/log/messages

Nov 18 15:41:39 www named\[4072\]: client192.168.88.1\#59383: query: www.12377.cn IN A +(192.168.88.131)

Nov 18 15:41:43 wwwnamed\[4072\]: client 192.168.88.131\#51123: query: field.com IN MX +(192.168.88.131)

Nov 18 15:42:04 wwwnamed\[4072\]: client 192.168.88.130\#47596: query: field.com IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#64014: query: api.money.126.net IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#53846: query: api.money.126.net IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#64262: query: api.money.126.net IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#61128: query: api.money.126.net IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#53147: query: bjproxy.split.netease.com IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#64132: query: bjproxy.split.netease.com IN A +(192.168.88.131)

Nov 18 15:42:05 www named\[4072\]: client192.168.88.1\#51096: query: bjproxy.split.netease.com IN AAAA +(192.168.88.131)

**（2）、rndc**

**             trace:递增debug级别**

**             trace LEVEL:指定使用的级别**

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 0

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\# rndc trace 1

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 1

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\# rndc trace 5

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 5

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\# rndc trace 0

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 0

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\# rndc trace

\[root@www named\]\# rndc status

version:9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6\_9.4

CPUs found: 3

worker threads: 3

number of zones: 21

debug level: 1

xfers running: 0

xfers deferred: 0

soa queries in progress: 0

query logging is ON

recursive clients: 0/0/1000

tcp clients: 0/100

server is up and running

\[root@www named\]\#

DNS内置命令rndc用法

发表评论取消回复

还没有评论，来说两句吧...

相关阅读

相关 Python常见内置函数的用法

相关 Python常见内置函数的用法

相关 Python常见内置函数用法

相关 Maven 的用法和常用命令，以及Maven内置参数详解

相关 SqlServer 常用内置函数及用法

相关 DNS BIND之rndc介绍及使用

相关使用bind9 的rndc 控制dns

相关 DNS内置命令rndc用法

相关 08.SpringShell内置命令-新增&重写内置命令

相关 09.SpringShell内置命令-禁用内置命令