mirror of
https://github.com/ditatompel/insights.git
synced 2025-01-08 03:12:06 +07:00
Adding old content "IspCP Auto New Zone Transfer to Secondary Dns Server"
This commit is contained in:
parent
4dbc03baa2
commit
4f85d31f38
GPG key ID:
31D3D06D77950979
1 changed files with 204 additions and 0 deletions
|
|
@ -0,0 +1,204 @@
|
|||
---
|
||||
title: "IspCP Auto New Zone Transfer to Secondary Dns Server"
|
||||
description: Cara sinkronisasi primary DNS ispCP ke secondary DNS server.
|
||||
date: 2012-01-10T21:36:41+07:00
|
||||
lastmod:
|
||||
draft: false
|
||||
noindex: false
|
||||
featured: false
|
||||
pinned: false
|
||||
# comments: false
|
||||
series:
|
||||
# -
|
||||
categories:
|
||||
- SysAdmin
|
||||
tags:
|
||||
- IspCP
|
||||
- Bind
|
||||
- DNS
|
||||
- Apache
|
||||
images:
|
||||
# -
|
||||
# menu:
|
||||
# main:
|
||||
# weight: 100
|
||||
# params:
|
||||
# icon:
|
||||
# vendor: bs
|
||||
# name: book
|
||||
# color: '#e24d0e'
|
||||
authors:
|
||||
# - ditatompel
|
||||
---
|
||||
|
||||
Kali ini ane mau share cara sinkronisasi *primary DNS* **ispCP** ke *secondary DNS server*. Tapi sebelumnya, apa itu **ispCP**?
|
||||
|
||||
<!--more-->
|
||||
|
||||
> _**isp Control Panel (ispCP)** is an open source project founded to build a Multi Server Control and Administration Panel. This Control Panel is usable by any Internet Service Provider (ISP)._
|
||||
|
||||
Nah [ispCP](http://isp-control.net/) sendiri mengemas aplikasi2 hosting seperti **Apache**, **Bind9**, **Courier**, **Postfix**, **ProFTP**, dan **Awstats**. dan sampai saat ini support untuk beberapa *linux distro* seperti **Debian** (**Etch**, **Lenny**, **Squeeze**), **Ubuntu**, dan **FreeBSD**.
|
||||
|
||||
Kalau dibandingkan dengan **cPanel** secara pribadi jelas lebih nyaman cPanel. Tp krn ini open source dan gratis, worth bgt buat dicoba dan digunakan.
|
||||
|
||||
Yuk, langsung aja... Ane asumsikan temen2 udah pada berhasil install ispCP ini.
|
||||
|
||||
Yang diperlukan :
|
||||
|
||||
2 buah server ( 1 untuk **primary DNS** di ispCP itu sendiri dan 1 lagi buat **secondary DNS** nya )
|
||||
|
||||
_Tested with ispCP Version_ : `1.7` on **Debian Lenny**
|
||||
|
||||
## ispCP server (Primary)
|
||||
|
||||
1. Edit `/etc/ispcp/ispcp.conf` dan tambahkan *IP server secondary DNS* pada bagian **"# BIND data section".**
|
||||
2. masuk ke folder `/var/www/ispcp/gui/domain` ( buat folder tersebut jika belum ada )
|
||||
3. Buat file `index.php` dan masukan script berikut :
|
||||
|
||||
```php
|
||||
<?php
|
||||
require '../include/ispcp-lib.php';
|
||||
|
||||
$cfg = ispCP_Registry::get('Config');
|
||||
$sql = ispCP_Registry::get('Db');
|
||||
|
||||
$count_query = "SELECT COUNT(`domain_id`) AS cnt FROM `domain`";
|
||||
$start_index = 0;
|
||||
$rows_per_page = 100;
|
||||
|
||||
$query = "SELECT `domain_name` FROM `domain`
|
||||
ORDER BY `domain_id` ASC
|
||||
LIMIT $start_index, $rows_per_page";
|
||||
|
||||
$rs = exec_query($sql, $count_query);
|
||||
$records_count = $rs->fields['cnt'];
|
||||
$rs = exec_query($sql, $query);
|
||||
$count_query1 = "SELECT COUNT(`alias_id`) AS cnt1 FROM `domain_aliasses`";
|
||||
$start_index1 = 0;
|
||||
$rows_per_page1 = 100;
|
||||
|
||||
$query1 = "SELECT `alias_name` FROM `domain_aliasses`
|
||||
ORDER BY `alias_id` ASC
|
||||
LIMIT $start_index1, $rows_per_page1";
|
||||
|
||||
$rs1 = exec_query($sql, $count_query1);
|
||||
|
||||
$records_count1 = $rs1->fields['cnt1'];
|
||||
$rs1 = exec_query($sql, $query1);
|
||||
$all_records_count=$records_count+$records_count1;
|
||||
if ($rs->rowCount() == 0) {
|
||||
echo "//NO DOMAINS LISTED";
|
||||
} else {
|
||||
echo "//$all_records_count DOMAINS LISTED ON $cfg->SERVER_HOSTNAME [$cfg->BASE_SERVER_IP]\n";
|
||||
while (!$rs->EOF){
|
||||
echo "zone \"".$rs->fields['domain_name']."\"{\n";
|
||||
echo "\ttype slave;\n";
|
||||
echo "\tfile \"/var/cache/bind/".$rs->fields['domain_name'].".db\";\n";
|
||||
echo "\tmasters { $cfg->BASE_SERVER_IP; };\n";
|
||||
echo "\tallow-notify { $cfg->BASE_SERVER_IP; };\n";
|
||||
echo "};\n";
|
||||
$rs->moveNext();
|
||||
}
|
||||
}
|
||||
|
||||
if ($rs1->rowCount() == 0) {
|
||||
echo "//END DOMAINS LIST\n";
|
||||
}
|
||||
else {
|
||||
while (!$rs1->EOF){
|
||||
echo "zone \"".$rs1->fields['alias_name']."\"{\n";
|
||||
echo "\ttype slave;\n";
|
||||
echo "\tfile \"/var/cache/bind/".$rs1->fields['alias_name'].".db\";\n";
|
||||
echo "\tmasters { $cfg->BASE_SERVER_IP; };\n";
|
||||
echo "\tallow-notify { $cfg->BASE_SERVER_IP; };\n";
|
||||
echo "};\n";
|
||||
$rs1->moveNext();
|
||||
}
|
||||
echo "//END DOMAINS LIST\n";
|
||||
}
|
||||
?>
|
||||
```
|
||||
|
||||
4. Buat file `.htaccess` supaya `index.php` tersebut hanya bisa diakses melalui IP secondary DNS server.
|
||||
|
||||
```apache
|
||||
Order Deny,Allow
|
||||
Deny from all
|
||||
Allow from [IP.SECONDARY.DNS.SERVERMU]
|
||||
```
|
||||
|
||||
5. Ubah konfigurasi `Apache AllowOverride None` menjadi `AllowOverride Limit` supaya `.htaccess` dapat berfungsi.
|
||||
|
||||
|
||||
```bash
|
||||
vi /etc/apache2/sites-enabled/00_master.conf
|
||||
```
|
||||
|
||||
6. Ubah kepemilikan file pada `/var/www/ispcp/gui/domain`
|
||||
```bash
|
||||
chown vu2000:www-data -R /var/www/ispcp/gui/domain
|
||||
```
|
||||
|
||||
7. *Generate key* untuk **secure zone transfer (TSIG)**
|
||||
|
||||
```bash
|
||||
cd /etc/bind; dnssec-keygen -a hmac-md5 -b 128 -n HOST TRANSFER
|
||||
```
|
||||
Hasil *key* ada pada file `transfer.+[bla-bla-bla].private`. Didalamnya ada kode yang nantinya digunakan untuk sinkron *auth*. Misal : Key: `6alK9JEHMqH/ZDpFHtlstg==`
|
||||
|
||||
Masukan kode tersebut pada konfigurasi **BIND**
|
||||
|
||||
```bash
|
||||
vi /etc/bind/named.conf.options
|
||||
```
|
||||
|
||||
```bind
|
||||
//
|
||||
//SECONDARY NS
|
||||
//
|
||||
key "TRANSFER" {
|
||||
algorithm hmac-md5;
|
||||
secret "6alK9JEHMqH/ZDpFHtlstg==";
|
||||
};
|
||||
server [IP.SECONDARY.DNS.SERVERMU] {
|
||||
keys {
|
||||
TRANSFER;
|
||||
};
|
||||
};
|
||||
```
|
||||
|
||||
Konfigurasi pada *primary DNS server* sudah selesai. Lalu kita masuk ke tahap berikutnya, yaitu :
|
||||
|
||||
## konfigurasi pada secondary DNS server
|
||||
> _Saya asumsikan BIND sudah terinstall di server Secondary DNS ini._
|
||||
|
||||
1. Edit konfiurasi BIND (`/etc/bind/named.conf`) dan tambahkan `include "/etc/bind/named.conf.backup"`.
|
||||
2. Buat keys zone transfer
|
||||
```bash
|
||||
vi /etc/bind/named.conf.options
|
||||
```
|
||||
dan tambahkan konfigurasi berikut :
|
||||
```bind
|
||||
//
|
||||
//SECONDARY NS
|
||||
//
|
||||
key "TRANSFER" {
|
||||
algorithm hmac-md5;
|
||||
secret "6alK9JEHMqH/ZDpFHtlstg==";
|
||||
};
|
||||
server [IP.ISPCP.SERVER] {
|
||||
keys {
|
||||
TRANSFER;
|
||||
};
|
||||
};
|
||||
```
|
||||
|
||||
3. Buat script untuk cronjob: `vi /etc/cron.d/dnsupdate`
|
||||
dan tambahkan :
|
||||
```
|
||||
* */12 * * * root /usr/bin/wget http://[IP.ISPCP.SERVER]/domain/ -O /etc/bind/named.conf.backup && /etc/init.d/bind9 reload
|
||||
```
|
||||
4. Terakhir, coba reload cronjob untuk memastikan trik kita sukses.
|
||||
```bash
|
||||
/etc/init.d/cron reload
|
||||
```
|
||||
Loading…
Reference in a new issue