BIND

Типичные примеры

named.conf

logging {
	channel default_debug {
		file "data/named.run";
		severity warning;
	};
};

key DHCP_UPDATER {
	algorithm HMAC-MD5.SIG-ALG.REG.INT;
	secret "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";
};

zone "work.local" IN {
	type master;
	file "db.A.work.local";
	allow-transfer { 192.168.11.163; 192.168.6.2 };
	allow-update { key DHCP_UPDATER; };
};

zone "11.168.192.in-addr.arpa" IN {
	type master;
	file "db.PTR.11.168.192";
	allow-update { key DHCP_UPDATER; };
};

zone "work2.local" IN {
	type slave;
	file "db.A.work2.local";
	masters { 192.168.5.2; }; 
};

зона work.local

@ IN SOA centos8.work.local. admin.work.local. (
1
1d
5m
4w
1h
)

		IN	NS	centos8.work.local.
		IN	A	192.168.1.100
centos8		IN	A	192.168.1.100
server		IN	CNAME	centos8

n20201008	IN	A	192.168.1.101
pc-1		IN	CNAME	n20201008

зона 11.168.192.in-addr.arpa

@ IN SOA centos8.work.local. admin.work.local. (
1
3h
1h
4w
1h
)

	IN	NS	centos8.work.local.

100	IN	PTR	centos8.work.local.
101	IN	PTR	n20201008.work.local.

Контроллер домена

named.conf

zone "domain.local" IN {
	type master;
	file "db.A.domain.local";
};

zone "_msdcs.domain.local" IN {
	type master;
	file "db.SRV._msdcs.domain.local";
};

Один сайт, один КД
db.A.domain.local
db.SRV._msdcs.domain.local

Один сайт, два КД
db.A.domain.local
db.SRV._msdcs.domain.local

Два сайта, два КД
db.A.domain.local
db.SRV._msdcs.domain.local

Разные команды

rndc reload [domain]

dnssec-keygen -a HMAC-MD5 -b 256 -r /dev/urandom -n USER DHCP_UPDATER