This section describes how to integrate Plesk with an external Linux-based secondary (slave) DNS server. This server will copy the zone data from your primary DNS server, but cannot change that data.

可使用 Slave DNS Manager 扩展(位于 Plesk GUI 中的 扩展目录 )执行该整合。

注解: 服务器一次只能安装下列中的一个扩展:Slave DNS Manager、Amazon Route 53 或 DigitalOcean DNS。所有都可以管理 DNS,如果一起安装将会冲突。

Configure a secondary (slave) DNS server:

注解: The following instructions are intended for Debian Linux. The sequence of steps on other Linux systems is the same. However, commands, and paths to configuration files might be different.

  1. Install BIND if it is not already installed. BIND is an open-source DNS management software program. You can check if it is installed in the :doc:`Services Management <59418>` interface in the Tools & Settings > Server Management > Services Management section, where it appears as “DNS Server (BIND)”. If BIND is not installed, you can install it with the following command:

    apt-get install bind9
    
  2. In the named.conf file on the secondary DNS server, add the following required information:

    • The enabled allow-new-zones option in the options directive. If this directive does not exist, you can add it.
    • A secret key.
    • The IP address of the primary DNS server and an instruction for BIND to accept connections from it.

    Your named.conf file additions will look like the following example:

    options {
        ...
    allow-new-zones yes;
     };
    key "rndc-key-10.69.43.240" {
    algorithm hmac-sha256;
    secret "YTQ2OGZiY2E4MDliMTY5OThkOGYyYw==";
    };
    controls {
    inet * port 953 allow { 10.69.43.240; 127.0.0.1; } keys { "rndc-key-10.69.43.240"; };
    };
    
  3. Save your named.conf changes, then restart the BIND service by issuing the following command:

    invoke-rc.d bind9 restart
    
  4. To make sure that you have a copy of your secret key available, add it to the /etc/bind/rndc.key file. For example:

    key "rndc-key" {
        algorithm hmac-md5;
        secret "vwOxonI4n4CVRUhKAOAAIA==";
     };
    

That’s it, the secondary name server is set up.

注解: 如果您的 Plesk 服务器后置于 NAT,辅助 DNS 服务器必须在其外面。

Configure Plesk for a secondary (slave) DNS server:

To configure Plesk to recognize your secondary DNS server, add it in the Slave DNS Manager extension.

Add the secondary server and specify its IP address and the secret key. The extension will create a configuration file with the secondary server settings for the rndc utility.

From now on, Plesk will automatically use the following commands to transfer all created, modified, and deleted zones to the secondary server:

创建

/usr/sbin/rndc -c slave.config addzone example.com '{ type slave; file "/var/lib/bind/example.com"; masters { <plesk_ip>; }; };'

修改

/usr/sbin/rndc -c slave.config refresh example.com

删除

/usr/sbin/rndc -c slave.config delzone example.com

现在当您在 Plesk 中添加域名时,会自动在辅助服务器和主要服务器上创建 DNS 区域。

More information about the extension’s algorithm:

The Slave DNS Manager extension works according to the following algorithm:

  1. 会在扩展设置中注册一个辅助服务器。
  2. The secondary server’s IP address is automatically added to the list of addresses that are allowed to transfer domain zones from the Plesk server.
  3. 当您在 Plesk中创建、修改或删除一个活动的域名区域时,Plesk 则会在本地DNS服务中创建、修改或删除域名区域。
  4. 脚本会启动域名并接收命令以创建、修改或删除一个域名区域。
  5. The script initiates the rndc command for each connected secondary server.
  6. 辅助服务器会将域名区域与 Plesk 服务器上的域名区域进行同步。