[root@localhost ~]# vim /etc/named.conf options { // listen-on port 53 { 127.0.0.1; }; // allow-query { localhost; }; allow-transfer {10.0.0.102;}; #只允许从服务器（子域）进行区域传输 } dnssec-enable no; #关闭加密验证 dnssec-validation no;
[root@localhost ~]# vim /etc/named.rfc1912.zones zone "magedu.org" IN { type master; file "magedu.org.zone"; };
[root@localhost ~]# vim /var/named/magedu.org.zone $TTL 1D @ IN SOA master admin.magedu.org. ( 20201231 1H 10M 3D 12H ) NS ns1 shanghai NS ns2 #创建一个NS记录shanghai.magedu.org. ns1 A 10.0.0.101 ns2 A 10.0.0.102 #将子域shanghai.magedu.org.指向10.0.0.102 www A 10.0.0.103 [root@localhost named]# chmod 640 magedu.org.zone [root@localhost named]# chown .named magedu.org.zone
systemctl restart named
options { // listen-on port 53 { 127.0.0.1; }; // allow-query { localhost; }; allow-transfer {none;}; }
[root@localhost ~]# vim /etc/named.rfc1912.zones zone "shanghai.magedu.org" IN { type master; file "shanghai.magedu.org.zone"; };
[root@localhost named]# vim shanghai.magedu.org.zone $TTL 1D @ IN SOA master admin.magedu.org. ( 20201231 1H 10M 3D 12H ) NS ns1 ns1 A 10.0.0.102 k8s A 10.0.0.200 www A 10.0.0.201 [root@localhost named]# chmod 640 shanghai.magedu.org.zone [root@localhost named]# chown .named shanghai.magedu.org.zone
systemctl restart named
dig k8s.shanghai.magedu.org @10.0.0.101 dig www.shanghai.magedu.org @10.0.0.101
原文：https://www.cnblogs.com/linchenkai/p/14258787.html