绑定命名服务高CPU负载

Question

CentOs 6下的命名服务使用了所有4个处理器中的100%.我试着玩配置文件.我目前有10个网站.以下是一个样本

$TTL 14400
@       IN      SOA     ns1.mynameserver.com.      hostmaster.mydomain.com. (
                                                2012071300
                                                14400
                                                3600
                                                1209600
                                                86400 )

mydomain.com.   14400   IN  NS  ns1.mynameserver.com.
mydomain.com.   14400   IN  NS  ns2.mynameserver.com.

ftp 14400   IN  A   123.218.168.8
localhost   14400   IN  A   127.0.0.1
mail    14400   IN  A   123.218.168.8
pop 14400   IN  A   123.218.168.8
mydomain.com.   14400   IN  A   123.218.168.8
smtp    14400   IN  A   123.218.168.8
www 14400   IN  A   123.218.168.8

mydomain.com.   14400   IN  MX  10 mail
mydomain.com.   14400   IN  TXT "v=spf1 a mx ip4:123.218.168.8 ~all"

localhost   14400   IN  AAAA    ::1

并为mynameserver.com

$TTL 14400
@       IN      SOA     ns1.mynameserver.com.      hostmaster.mynameserver.com. (
                                                2012081200
                                                14400
                                                3600
                                                1209600
                                                86400 )

mynameserver.com.   14400   IN  NS  ns1.mynameserver.com.
mynameserver.com.   14400   IN  NS  ns2.mynameserver.com.

ftp 14400   IN  A   123.218.168.11
localhost   14400   IN  A   127.0.0.1
mail    14400   IN  A   123.218.168.11
ns1.mynameserver.com.   14400   IN  A   123.218.168.10
ns1.mynameserver.com.   14400   IN  A   123.218.168.11
ns2.mynameserver.com.   14400   IN  A   123.218.168.11
ns2.mynameserver.com.   14400   IN  A   123.218.168.11
pop 14400   IN  A   123.218.168.11
s1  14400   IN  A   123.218.168.11
smtp    14400   IN  A   123.218.168.11
mynameserver.com.   14400   IN  A   123.218.168.11
www 14400   IN  A   123.218.168.11
mynameserver.com.   14400   IN  MX  10 mail
mynameserver.com.   14400   IN  TXT "v=spf1 a mx ip4:123.218.168.8 ~all"
localhost   14400   IN  AAAA    ::1

我改变了ip和域名,使其成为每个人的一般性问题.事情是我根本不使用邮件或smtp,我可能会在将来添加MX记录,并依赖gmail例如电子邮件.删除邮件/ pop/smtp/MX记录是否安全？

根据您的经验,几个月内造成巨大CPU负载的原因是什么!

Answer 1

我有同样的问题,Starcalc上面发布的链接中的信息对我有效(虽然他链接的帖子是Ubuntu).这就是我为CentOS 6.4盒子做的事情:

在/etc/named.conf中,确保选项{}部分中包含该行

managed-keys-directory "/var/named/dynamic";

另外,确保你有目录/ var/named/dynamic和/ var/named/chroot/var/named/dynamic presesent,确保所有目录都由named:named(简单方法:chown -R named:named/var /)如果你使用SELinux运行,请执行:restorecon -R/var/named /