안녕하세요. 

제가 만든 서버 무료점검사이트인 www.serverchk.com 사이트를 다른IDC에 서버이중화 해놓았습니다.

(퇴근하고만 시간이 되서, 어제 퇴근하고 새벽 3시까지 작업했네요 ㅎㅎ)

기능이 좋아서라기보다는 다른사이트에서 홍보를 많이 해주셔서, 하루에 1000명이상 접속을 하네요 ^^

(단지, 웹서버가 2대로 분리했더니 카운터 1000에서 500,500으로 표시되네요 ㅎㅎ)

어제 네임서버와 웹서버이중화 했습니다.  참고로 네임서버 설정은 올립니다.

1. ns1설정

[root@localhost ~]# cd /etc
[root@localhost etc]# more named.conf
acl "localarea" {
        211.35.64.72;
};

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        pid-file "/var/run/named.pid";
        version " No touch !!! No !!";

         allow-transfer { 211.35.64.72; };
};

logging {
        channel debug_log {
                file "/var/log/named/debug.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };
       
        channel audit_log {
                file "/var/log/named/audit.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };

        channel query_log {
                file "/var/log/named/query.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };

        category default { debug_log; };
        category general { debug_log; };
        category security { audit_log; debug_log; };
        category config { debug_log; };
        category resolver { audit_log; };
        category xfer-in { audit_log; };
        category xfer-out { audit_log; };
        category notify { audit_log; };
        category client { audit_log; };
        category network { audit_log; };
        category update { audit_log; };
        category queries { query_log; };
        category lame-servers { audit_log; };
};

//
// a caching only nameserver config
//

# Use with the following in named.conf, adjusting the allow list as needed:
 key "rndc-key" {
       algorithm hmac-md5;
       secret "s60KMc/Rb6gRrN+wQppvZA==";
 };
 
 controls {
       inet 127.0.0.1 port 953
               allow { 127.0.0.1; } keys { "rndc-key"; };
 };
# End of named.conf

view "local" {
       match-clients           {  localarea; };
        recursion yes;

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};

zone "serverchk.com" IN {
        type master;
        file "serverchk.com.zone";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};

};

view "external" {
       match-clients           { any; };
        recursion yes;

zone "serverchk.com" IN {
        type master;
        file "serverchk.com.zone";
        allow-update { none; };
};

zone "yahooms.com" IN {
        type master;
        file "yahooms.com.zone";
        allow-update { none; };
};

zone "yahooms.co.kr" IN {
        type master;
        file "yahooms.co.kr.zone";
        allow-update { none; };
};

zone "msyahoo.co.kr" IN {
        type master;
        file "msyahoo.co.kr.zone";
        allow-update { none; };
};

zone "foxylady.co.kr" IN {
        type master;
        file "foxylady.co.kr.zone";
        allow-update { none; };
};

zone "yejin.pe.kr" IN {
        type master;
        file "yejin.pe.kr.zone";
        allow-update { none; };
};

include "/etc/synchole.conf";
};

[root@localhost etc]#         
[root@localhost etc]# cd /var/named/
[root@localhost named]# more serverchk.com.zone
$TTL    10
@               IN SOA  ns1.serverchk.com. root (
                                        2007072007      ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns1.serverchk.com.
                IN NS           ns2.serverchk.com.
                IN MX   0       mail.serverchk.com.

                        IN A            210.116.123.25
                        IN A            211.35.64.72
ns1.serverchk.com.      IN A            210.116.123.25
ns2.serverchk.com.      IN A            211.35.64.72

mail                    IN A            210.116.123.25
www                     IN A            210.116.123.25
                        IN A            211.35.64.72
serverchk.com.          IN      TXT     "v=spf1 ip4:210.116.123.25 ~all"
[root@localhost named]#

2. ns2설정 - Slave이니 Zone File은 Master에서 가져온갑니다.

[root@proxy01 root]# cd /etc
[root@proxy01 etc]# more named.conf
acl "localarea" {
        127.0.0.1;
        210.116.123.25;
        211.35.64.72;
};

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        pid-file "/var/run/named.pid";
        version " No touch !!! No !!";
         allow-transfer {  211.35.64.72; };
};

logging {
        channel debug_log {
                file "/var/log/named/debug.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };
       
        channel audit_log {
                file "/var/log/named/audit.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };

        channel query_log {
                file "/var/log/named/query.log" versions 3 size 10m;
                severity        debug;
                print-category  yes;
                print-severity  yes;
                print-time      yes;
        };

        category default { debug_log; };
        category general { debug_log; };
        category security { audit_log; debug_log; };
        category config { debug_log; };
        category resolver { audit_log; };
        category xfer-in { audit_log; };
        category xfer-out { audit_log; };
        category notify { audit_log; };
        category client { audit_log; };
        category network { audit_log; };
        category update { audit_log; };
        category queries { query_log; };
        category lame-servers { audit_log; };
};

//
// a caching only nameserver config
//

view "local" {
       match-clients           {  localarea; };
        recursion yes;

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};

zone "serverchk.com" IN {
        type slave;
        file "serverchk.com.zone";
        masters { 210.116.123.25; };
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" I
N {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};

};

view "external" {
       match-clients           { any; };
        recursion yes;

zone "serverchk.com" IN {
        type slave;
        file "serverchk.com.zone";
        masters { 210.116.123.25; };
};

zone "yahooms.com" IN {
        type slave;
        file "yahooms.com.zone";
        masters { 210.116.123.25; };
};

zone "yahooms.co.kr" IN {
        type slave;
        file "yahooms.co.kr.zone";
        masters { 210.116.123.25; };
        allow-update { none; };
};

zone "msyahoo.co.kr" IN {
        type slave;
        file "msyahoo.co.kr.zone";
        masters { 210.116.123.25; };
        allow-update { none; };
};

zone "foxylady.co.kr" IN {
        type slave;
        file "foxylady.co.kr.zone";
        masters { 210.116.123.25; };
        allow-update { none; };
};

zone "yejin.pe.kr" IN {
        type slave;
        file "yejin.pe.kr.zone";
        masters { 210.116.123.25; };
        allow-update { none; };
};

//include "/etc/synchole.conf";
};
[root@proxy01 etc]#         
[root@proxy01 etc]# cd /var/named/
[root@proxy01 named]# more serverchk.com.zone
$ORIGIN .
$TTL 10 ; 10 seconds
serverchk.com           IN SOA  ns1.serverchk.com. root.serverchk.com. (
                                2007072007 ; serial
                                10800      ; refresh (3 hours)
                                900        ; retry (15 minutes)
                                604800     ; expire (1 week)
                                86400      ; minimum (1 day)
                                )
                        NS      ns1.serverchk.com.
                        NS      ns2.serverchk.com.
                        A       210.116.123.25
                        A       211.35.64.72
                        MX      0 mail.serverchk.com.
                        TXT     "v=spf1 ip4:210.116.123.25 ~all"
$ORIGIN serverchk.com.
mail                    A       210.116.123.25
ns1                     A       210.116.123.25
ns2                     A       211.35.64.72
www                     A       210.116.123.25
                        A       211.35.64.72
[root@proxy01 named]#

3. 확인

[root@proxy01 root]# dig @127.0.0.1 www.serverchk.com

; <<>> DiG 9.3.2 <<>> @127.0.0.1 www.serverchk.com
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63702
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.serverchk.com.             IN      A

;; ANSWER SECTION:
www.serverchk.com.      10      IN      A       210.116.123.25
www.serverchk.com.      10      IN      A       211.35.64.72

;; AUTHORITY SECTION:
serverchk.com.          10      IN      NS      ns2.serverchk.com.
serverchk.com.          10      IN      NS      ns1.serverchk.com.

;; ADDITIONAL SECTION:
ns1.serverchk.com.      10      IN      A       210.116.123.25
ns2.serverchk.com.      10      IN      A       211.35.64.72

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Dec 15 09:50:03 2007
;; MSG SIZE  rcvd: 135

- 이상 끝 -