安装配置dnsmasq
yum -y install dnsmasq
Dnsmasq通常通过目录中的一个dnsmasq.conf或一系列文件进行配置/etc/dnsmasq.d。在Dnsmasq的配置文件（例如/etc/dnsmasq.d/10-consul）中，添加以下内容：
/etc/dnsmasq.conf
conf-dir=/etc/dnsmasq.d
server=10.143.22.118
server=10.143.22.116
/etc/dnsmasq.d/10-consul
# Enable forward lookup of the 'consul' domain:
server=/consul/127.0.0.1#8600
# Uncomment and modify as appropriate to enable reverse DNS lookups for
# common netblocks found in RFC 1918, 5735, and 6598:
#rev-server=0.0.0.0/8,127.0.0.1#8600
#rev-server=10.0.0.0/8,127.0.0.1#8600
#rev-server=100.64.0.0/10,127.0.0.1#8600
#rev-server=127.0.0.1/8,127.0.0.1#8600
#rev-server=169.254.0.0/16,127.0.0.1#8600
#rev-server=172.16.0.0/12,127.0.0.1#8600
#rev-server=192.168.0.0/16,127.0.0.1#8600
#rev-server=224.0.0.0/4,127.0.0.1#8600
#rev-server=240.0.0.0/4,127.0.0.1#8600
启动 dnsmasq
systemctl start dnsmasq
systemctl enable dnsmasq
其他每台服务器需要配置对应的dnsmasq地址
cat /etc/resolv.conf
# dnsmasq部署地址
nameserver 10.117.62.132
测试能否ping通consul上注册的服务域名
image.png
$ ping fabio.service.consul
PING fabio.service.consul (10.117.62.132) 56(84) bytes of data.
64 bytes from iZ235wi8t3rZ (10.117.62.132): icmp_seq=1 ttl=64 time=0.015 ms
64 bytes from iZ235wi8t3rZ (10.117.62.132): icmp_seq=2 ttl=64 time=0.046 ms
64 bytes from iZ235wi8t3rZ (10.117.62.132): icmp_seq=3 ttl=64 time=0.050 ms
64 bytes from iZ235wi8t3rZ (10.117.62.132): icmp_seq=4 ttl=64 time=0.045 ms
$ ping redis.node_exporter.service.consul
PING redis.node_exporter.service.consul (10.81.50.53) 56(84) bytes of data.
64 bytes from 10.81.50.53: icmp_seq=1 ttl=55 time=1.61 ms
64 bytes from 10.81.50.53: icmp_seq=2 ttl=55 time=1.95 ms
64 bytes from 10.81.50.53: icmp_seq=3 ttl=55 time=2.21 ms
64 bytes from 10.81.50.53: icmp_seq=4 ttl=55 time=1.53 ms
默认ping consul tag也是可以正常通信
参考：
https://learn.hashicorp.com/consul/security-networking/forwarding
