APIserver是整個叢集管理的大腦

主控節點和運算節點只是邏輯上的概念，物理上完全可以布在一臺伺服器上。

安裝

主機情況，都是2c2g，50g硬碟

環境配置

關閉並禁用所有機器防火牆：

[root@hdss7-11 ~]# systemctl stop firewalld && systemctl disable firewalld
 

設定主機名並安裝相關工具

[root@hdss7-11 ~]# hostnamectl set-hostname hdss7-11.host.com
[root@hdss7-11 ~]# yum install epel-release -y
[root@hdss7-11 ~]# yum install vim wget net-tools telnet tree nmap sysstat lrzsz dos2unix bind-utils -y

安裝bind9

[root@hdss7-11 ~]# yum install bind -y
[root@hdss7-11 ~]# rpm -qa bind

[root@hdss7-11 ~]# vim /etc/named.conf
 

bind語法非常嚴格，每一行末尾必須加上分號;

options {
        listen-on port 53 { 10.4.7.11; };
        allow-query     { any; };
        forwarders			{ 10.4.7.254; };
        recursion yes; /*表示採用遞迴演算法提供對dns查詢 */
        dnssec-enable no;
        dnssec-validation no;

vim /etc/named.rfc1912.zones

zone "host.com" IN {
				type master;
				file "host.com.zone";
				allow-update { 10.4.7.11; };
};

zone "od.com" IN {
				type master;
				file "od.com.zone";
				allow-update { 10.4.7.11; };
};
 

新增/var/named/host.com.zone配置檔案

[root@hdss7-11 ~]# vim /var/named/host.com.zone

$ORIGIN host.com.
$TTL 600    ; 10 minutes
@       IN SOA dns.host.com. dnsadmin.host.com. (
               2020080101 ; serial
               10800      ; refresh (3 hours)
               900        ; retry (15 minutes)
               604800     ; expire (1 week)
               86400      ; minimum (1 day)
               )
            NS dns.host.com.
$TTL 60 ; 1 minute
dns              A 10.4.7.11
HDSS7-11         A 10.4.7.11
HDSS7-12         A 10.4.7.12
HDSS7-21         A 10.4.7.21
HDSS7-22         A 10.4.7.22
HDSS7-200        A 10.4.7.200

新增/var/named/host.od.zone配置檔案，注意下面的dns與dnsadmin後面的一定是od

[root@hdss7-11 ~]# vim /var/named/od.com.zone

$ORIGIN od.com.
$TTL 600    ; 10 minutes
@       IN SOA dns.od.com. dnsadmin.od.com. (
               2020080101; serial
               10800   ; refresh (3 hours)
               900     ; retry (15 minutes)
               604800  ; expire (1 week)
               86400   ; minimum (1 day)
               )
            NS dns.od.com.
$TTL 60 ; 1 minute
dns              A 10.4.7.11

# 檢查配置檔案是否正確，正確的話不會彈出任何內容
[root@hdss7-11 ~]# named-checkconf
[root@hdss7-11 ~]# systemctl status named
[root@hdss7-11 ~]# systemctl stop named
# 啟動named服務
[root@hdss7-11 ~]# systemctl start named

# 檢查named服務是否執行在53埠上
[root@hdss7-11 ~]# netstat -nltp | grep 53
tcp        0      0 172.26.91.11:53         0.0.0.0:*               LISTEN      11642/named
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      11642/named

檢查域名是否正常解析

[root@hdss7-11 ~]# dig -t A hdss7-21.host.com @10.4.7.11 +short
172.26.91.21

[root@hdss7-11 ~]# dig -t A hdss7-200.host.com @10.4.7.11 +short
172.26.91.200

修改/etc/resolv.conf檔案，;是註釋的意思，增加search host.com，並修改nameserver引數。

主機域用短域名，就像hdss7-11.host.com，業務域則用全域名。

[root@hdss7-11 ~]# vim /etc/resolv.conf

options timeout:2 attempts:3 rotate single-request-reopen
; generated by /usr/sbin/dhclient-script
search host.com
; nameserver 100.100.2.138
; nameserver 100.100.2.136
nameserver = 172.26.91.11

修改/etc/resolv.conf之後儲存退出，繼續ping

[root@hdss7-11 ~]# ping hdss7-200
PING HDSS7-200.host.com (172.26.91.200) 56(84) bytes of data.
64 bytes from 172.26.91.200 (172.26.91.200): icmp_seq=1 ttl=64 time=0.303 ms
64 bytes from 172.26.91.200 (172.26.91.200): icmp_seq=2 ttl=64 time=0.216 ms

[root@hdss7-11 ~]# ping hdss7-11
PING HDSS7-11.host.com (172.26.91.11) 56(84) bytes of data.
64 bytes from node001 (172.26.91.11): icmp_seq=1 ttl=64 time=0.007 ms
64 bytes from node001 (172.26.91.11): icmp_seq=2 ttl=64 time=0.019 ms