How to Install and Configure Master-Slave DNS Server on CentOS 6/5 Linux Systems

In this post, we will show you how to install and configure a master-slave DNS server on Linux systems (RPM Family “Redhat /CentOS /Scientific Linux 6/5”). As a system administrator you will need to setup a DNS server to resolve domains to it’s corresponding IPs. You can setup the DNS server to serve local query “for local zones/domains” or serve public query “for registered domains” or shows different results depending on the query source “internal/external views”

The DNS ( Domain Name System ) is a distributed system, used for translate domain names to IP and vice a versa. This article will help you to How to Setup Master-Slave DNS Server on CentOS 6/5 Linux systems.

Here’s our network scenario for this setup

Master DNS Server IP: 192.168.1.90 ( ns1.mimastech.com )
Slave  DNS Server IP: 192.168.1.91 ( ns2.mimastech.com )
Domain Name : demomimastech.com   ( For Testing Purpose )
Domain IP   : 192.168.1.100  ( For Testing Purpose )

As you see, our master DNS server will have IP “192.168.1.90” and name “ns1.mimastech.com”, our slave DNS server will have IP “192.168.1.91” and name “ns2.mimastech.com”, and our testing domain is “demomimastech.com” with IP “192.168.1.100”

Let’s start our simple steps:

Step 1: Install Required RPMS ( on both Master and Slave )

First, we need to install bind packages at both Master and Slave DNS servers using following commands.

# yum -y install bind bind-chroot

The needed package is bind but for security purposes, we installed bind-chroot package which change the default location of the configuration and zone files.

Step 2: Setup Master (NS1) DNS Server

There are two types of configuration files in DNS.

• One is main DNS configuration files named “named.conf”
• Another type of configuration file are called zone file. Which is individually created for all domains. named.conf keeps an entry for all zone files.

2.1 Configure named.conf using below configuration

# vim /var/named/chroot/etc/named.conf

Content of named.conf:

// /var/named/chroot/etc/named.conf
options {
        listen-on port 53 { 127.0.0.1; 192.168.1.0/24; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; 192.168.1.0/24; };
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "demomimastech.com" IN {
        type master;
        file "/var/named/demomimastech.com.db";
	allow-update { none; };
};

include "/etc/named.rfc1912.zones";

2.2 Create a zone file for you domain “demomimastech.com”

# vim /var/named/chroot/var/named/demomimastech.com.db

Content of zone file:

; Zone file for demomimastech.com
$TTL 14400
@      86400    IN      SOA     ns1.mimastech.com. contact.mimastech.com. (
                2017042401      ; serial, date+file_version
                86400           ; refresh, seconds
                7200            ; retry, seconds
                3600000         ; expire, seconds
                86400           ; minimum, seconds
)
demomimastech.com. 86400 IN NS ns1.mimastech.com.
demomimastech.com. 86400 IN NS ns2.mimastech.com.
demomimastech.com. IN A 192.168.1.100
demomimastech.com. IN MX 0 demomimastech.com.
mail IN A IN A 192.168.1.100
www IN CNAME demomimastech.com.

2.3 Add more domains in DNS server

To add more domains in DNS, create zone files individually for all domain as above. After that add any entry for all zones in named.conf like below. Change demomimastech.com with your domain name.

zone "demomimastech.com" IN {
        type master;
        file "/var/named/demomimastech.com.db";
	allow-update { none; };
};

2.4 Enable and Start named service

To enable and start named (bind) service use the following commands:

# chkconfig named on
# service named restart

At this point, we finished master DNS configuration, let’s proceed with the slave DNS server

Step 3: Setup Slave (NS2) DNS Server

At slave DNS server you need to update named.conf file only. All zone files will automatically synced from the master DNS server. Any changes done on Master will reflect on slave after a specified time interval.

3.1 Configure named.conf using below configuration

# vim /var/named/chroot/etc/named.conf

Content of named.conf

// /var/named/chroot/etc/named.conf
options {
        listen-on port 53 { 127.0.0.1; 192.168.1.0/24; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; 192.168.1.0/24; };
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "demomimastech.com" IN {
	type slave;
        file "slaves/demomimastech.com.db";
	masters { 192.168.1.90; };
};

include "/etc/named.rfc1912.zones";

3.2 Enable and Start named service

To enable and start named (bind) service use the following commands:

# chkconfig named on
# service named restart

After restarting named service, Check zone files on slave DNS server at /var/named/chroot/var/named/slaves/.

Step 4: Finally Test Your DNS Setup

Query to your Master and Slave DNS Server directly using following commands, You will get the same response from both servers.
Syntax:

nslookup <domainname.com> <DNS server name/ip>

Query to Master DNS Server:

# nslookup demomimastech.com 192.168.1.90

Server:         192.168.1.90
Address:        192.168.1.90#53

Name:   demomimastech.com
Address: 192.168.1.100

Query to Slave DNS Server:

# nslookup demomimastech.com 192.168.1.91

Server:         192.168.1.91
Address:        192.168.1.91#53

Name:   demomimastech.com
Address: 192.168.1.100

Above outputs is showing that DNS server has successfully resolved domain demomimastech.com from master and slave DNS servers.