Server DNS secondario
This section describes how to integrate Plesk with an external Linux-based secondary (slave) DNS server. This server will copy the zone data from your primary DNS server, but cannot change that data.
L’integrazione può essere effettuata utilizzando l’estensione Gestione DNS secondario disponibile nel Catalogo estensioni della GUI di Plesk.
Nota: nel server in un determinato momento può essere installata solo una delle seguenti estensioni: Slave DNS Manager, Amazon Route 53 o DigitalOcean DNS. Tutte gestiscono il DNS ed entrano in conflitto, se installate insieme.
Configure a secondary (slave) DNS server:
Nota: The following instructions are intended for Debian Linux. The sequence of steps on other Linux systems is the same. However, commands, and paths to configuration files might be different.
-
Install BIND if it is not already installed. BIND is an open-source DNS management software program. You can check if it is installed in the :doc:`Services Management <59418>` interface in the Tools & Settings > Server Management > Services Management section, where it appears as «DNS Server (BIND)». If BIND is not installed, you can install it with the following command:
apt-get install bind9
-
In the
named.conf
file on the secondary DNS server, add the following required information:- The enabled allow-new-zones option in the options directive. If this directive does not exist, you can add it.
- A secret key.
- The IP address of the primary DNS server and an instruction for BIND to accept connections from it.
Your
named.conf
file additions will look like the following example:options { ... allow-new-zones yes; }; key "rndc-key-10.69.43.240" { algorithm hmac-sha256; secret "YTQ2OGZiY2E4MDliMTY5OThkOGYyYw=="; }; controls { inet * port 953 allow { 10.69.43.240; 127.0.0.1; } keys { "rndc-key-10.69.43.240"; }; };
-
Save your
named.conf
changes, then restart the BIND service by issuing the following command:invoke-rc.d bind9 restart
-
To make sure that you have a copy of your secret key available, add it to the
/etc/bind/rndc.key
file. For example:key "rndc-key" { algorithm hmac-md5; secret "vwOxonI4n4CVRUhKAOAAIA=="; };
That’s it, the secondary name server is set up.
Nota: Se il tuo server Plesk è dietro un sistema NAT, il o i server DNS secondari devono trovarsi al suo esterno.
Configure Plesk for a secondary (slave) DNS server:
To configure Plesk to recognize your secondary DNS server, add it in the Slave DNS Manager extension.
Add the secondary server and specify its IP address and the secret key. The extension will create a configuration file with the secondary server settings for the rndc
utility.
From now on, Plesk will automatically use the following commands to transfer all created, modified, and deleted zones to the secondary server:
Creation
/usr/sbin/rndc -c slave.config addzone example.com '{ type slave; file "/var/lib/bind/example.com"; masters { <plesk_ip>; }; };'
Modification
/usr/sbin/rndc -c slave.config refresh example.com
Deletion
/usr/sbin/rndc -c slave.config delzone example.com
Ora, quando aggiungerai un dominio a Plesk, verrà creata automaticamente una zona DNS sia sul server secondario che sul server primario.
More information about the extension’s algorithm:
The Slave DNS Manager extension works according to the following algorithm:
- Registra un server secondario nelle impostazioni dell’estensione.
- The secondary server’s IP address is automatically added to the list of addresses that are allowed to transfer domain zones from the Plesk server.
- Quando crei, modifichi o elimini una zona di dominio attiva in Plesk, Plesk crea, modifica o elimina la zona di dominio nel servizio DNS locale.
- Lo script si avvia e riceve il nome di dominio e il comando per creare, modificare o eliminare una zona di dominio.
- The script initiates the
rndc
command for each connected secondary server. - I server secondari sincronizzano le zone di dominio con quelle sul server Plesk.