groupadd -r named
useradd -g named -r -s /sbin/nologin named "Bind User"
mkdir /usr/local/named/data/db -pv

yum -y install openssl-devel
wget ftp://ftp.isc.org/isc/bind9/9.10.1/bind-9.10.1.tar.gz
tar zxvf bind-9.10.1.tar.gz
cd bind-9.10.1

./configure --prefix=/usr/local/named \
--sysconfdir=/etc/named \
--disable-ipv6 \
--disable-openssl-version-check \
--enable-largefile \
--enable-threads \
--localstatedir=/var
make;make install



/usr/local/named/sbin/rndc-confgen > /etc/named/rndc.key
cat /etc/named/rndc.key | grep -v ^# >> /etc/named/named.key


# vi /usr/local/named/named.conf


options {
	directory "/usr/local/named/data";
	dump-file "/usr/local/named/data/db/cache_dump.db";
	statistics-file "/usr/local/named/data/db/named_stats.txt";
	allow-query { any; };
	pid-file "/usr/local/named/var/run/named.pid";
	listen-on port 53 { any; };
};



zone "." IN {
        type hint;
        file "named.ca";
};



zone "vqiu.cn" IN {
        type master;
        file "vqiu.cn.zone";
        allow-update { none; };
};

zone "88.16.172.in-addr.arpa" IN {
        type master;
        file "vqiu.cn.rev";
        allow-update { none; };
};


# vi vqiu.cn.zone

$TTL    86400
@               IN SOA vqiu.cn.  webmaster.vqiu.cn. (
                                      42000          ; serial (d. adams)
                                      3H              ; refresh
                                      15M             ; retry
                                      1W              ; expiry
                                      1D )            ; minimum
                   IN NS          vqiu.cn.
@                  IN A           172.16.88.200
                   IN MX      5    mail.vqiu.cn.
www                IN A           172.16.88.100
mail               IN A           172.16.88.1


# vi vqiu.cn.rev

$TTL    86400
@               IN SOA vqiu.cn.  webmaster.vqiu.cn. (
                                      42000          ; serial (d. adams)
                                      3H              ; refresh
                                      15M             ; retry
                                      1W              ; expiry
                                      1D )            ; minimum
                   IN NS          vqiu.cn.
200                IN PTR         vqiu.cn.
100                IN PTR         www.vqiu.cn.
1                  IN PTR         mail.vqiu.cn.

出现"managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found"错误提示
# mkdir /usr/local/named/data/managed-keys.bind && rndc reload

排查错误
# named-checkzone vqiu.cn /usr/local/named/data/vqiu.cn.zone
# named-checkconf /usr/local/named/etc/named.conf



第一次启动时建议用 named -gc /etc/named/named.conf  查看启动过来，看是否有报错信息