我在 Centos7 中尝试 dig 命令示例时遇到缓存 DNS 服务器问题
dig www.google.com
我得到这个输出
; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> www.google.fr
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 54269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.google.fr. IN A
;; Query time: 0 msec
;; SERVER: 192.168.0.100#53(192.168.0.100)
;; WHEN: Wed Dec 14 06:26:02 CET 2016
;; MSG SIZE rcvd: 42
但是当我在 /etc/named.conf 中将 dnssec-validation 更改为 no 时，它工作正常。有什么帮助吗
dig www.google.com
我得到这个输出
dig google.com
; <<>> DiG 9.9.4-RedHat-9.9.4-29.el7 <<>> google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39355
;; flags: qr rd ra; QUERY: 1, ANSWER: 16, AUTHORITY: 13, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 92 IN A 41.201.129.30
google.com. 92 IN A 41.201.129.54
google.com. 92 IN A 41.201.129.29
google.com. 92 IN A 41.201.129.25
google.com. 92 IN A 41.201.129.50
google.com. 92 IN A 41.201.129.59
google.com. 92 IN A 41.201.129.24
google.com. 92 IN A 41.201.129.40
google.com. 92 IN A 41.201.129.34
google.com. 92 IN A 41.201.129.44
google.com. 92 IN A 41.201.129.20
google.com. 92 IN A 41.201.129.45
google.com. 92 IN A 41.201.129.49
google.com. 92 IN A 41.201.129.39
google.com. 92 IN A 41.201.129.35
google.com. 92 IN A 41.201.129.55
;; AUTHORITY SECTION:
. 169937 IN NS c.root-servers.net.
. 169937 IN NS m.root-servers.net.
. 169937 IN NS e.root-servers.net.
. 169937 IN NS i.root-servers.net.
. 169937 IN NS j.root-servers.net.
. 169937 IN NS b.root-servers.net.
. 169937 IN NS g.root-servers.net.
. 169937 IN NS h.root-servers.net.
. 169937 IN NS k.root-servers.net.
. 169937 IN NS a.root-servers.net.
. 169937 IN NS l.root-servers.net.
. 169937 IN NS f.root-servers.net.
. 169937 IN NS d.root-servers.net.
;; Query time: 85 msec
;; SERVER: 192.168.0.100#53(192.168.0.100)
;; WHEN: Wed Dec 14 04:44:52 CET 2016
;; MSG SIZE rcvd: 506
答案1
我想告诉大家问题已经解决了，我的实验室在 Vmware 工作站 12 上，但是当我转移到 Kvm 时，一切都运行良好，unbound 和 named 都按预期工作，我不需要关闭 named 的 dnssec-validation。