「DNS」修訂間的差異
跳至導覽
跳至搜尋
| (未顯示同一使用者於中間所作的 9 次修訂) | |||
| 行 1: | 行 1: | ||
| ⚫ | |||
| ⚫ | |||
== DNS 運作流程 == |
== DNS 運作流程 == |
||
[[Image:DNS_Record_Request_Sequence.png|600px|link=]] |
[[Image:DNS_Record_Request_Sequence.png|600px|link=]] |
||
| ⚫ | |||
| − | {| class="wikitable" |
||
| + | : 提供使用者查詢網圵或IP,一般說 DNS 要填什麼? 就是說這個 |
||
| − | | Recursive |
||
| ⚫ | |||
| − | Resoiver |
||
| + | : 網際網路基礎設施中的重要部分,負責返回頂級網域名稱伺服器位址 |
||
| ⚫ | |||
| + | : 全球 13 組根網域名稱伺服器,全部已以 anycast 技術在全球多個地點設立鏡像站 |
||
| − | 遞迴解析程式 |
||
| + | * TLD nameserver 頂級網域名稱伺服器 |
||
| ⚫ | |||
| + | : 全球 1500+ 組頂級網域名稱伺服器 |
||
| − | |- |
||
| ⚫ | |||
| − | | Root |
||
| − | nameserver |
||
| ⚫ | |||
| − | | |
||
| − | |- |
||
| − | | TLD |
||
| − | nameserver |
||
| − | | |
||
| − | | |
||
| − | |- |
||
| − | | Authoritative |
||
| − | server |
||
| ⚫ | |||
| − | | |
||
| − | |} |
||
== DNS 名詞解釋 == |
== DNS 名詞解釋 == |
||
{| class="wikitable" |
{| class="wikitable" |
||
| 行 55: | 行 39: | ||
| Top-Level Domain |
| Top-Level Domain |
||
| 頂級域名 |
| 頂級域名 |
||
| + | | [https://www.iana.org/domains/root/db TLD List] |
||
| − | | |
||
|- |
|- |
||
| ARPA |
| ARPA |
||
| Infrastructure Top-Level Domain |
| Infrastructure Top-Level Domain |
||
| 基礎設施頂級域名 |
| 基礎設施頂級域名 |
||
| + | | 1 個 |
||
| − | | |
||
|- |
|- |
||
| .arpa |
| .arpa |
||
| 行 70: | 行 54: | ||
| Generic Top-Level Domain |
| Generic Top-Level Domain |
||
| 通用頂級域名 |
| 通用頂級域名 |
||
| + | | 1247 個 (含 grTLD) |
||
| − | | |
||
|- |
|- |
||
| grTLD |
| grTLD |
||
| Restricted Generic Top-Level Domain |
| Restricted Generic Top-Level Domain |
||
| 受限通用頂級域名 |
| 受限通用頂級域名 |
||
| + | | 3 個 |
||
| − | | |
||
|- |
|- |
||
| sTLD |
| sTLD |
||
| Sponsored Top-Level Domain |
| Sponsored Top-Level Domain |
||
| 贊助頂級域名 |
| 贊助頂級域名 |
||
| − | | 在2012年沒有使用新gTLD的讚助者和非贊助者之間的區別 |
+ | | 14 個 在2012年沒有使用新 gTLD 的讚助者和非贊助者之間的區別 |
|- |
|- |
||
| ccTLD |
| ccTLD |
||
| Country Code Top-Level Domain |
| Country Code Top-Level Domain |
||
| 國家及地區頂級域名 |
| 國家及地區頂級域名 |
||
| + | | 317 個 |
||
| − | | |
||
| ⚫ | |||
| ⚫ | |||
| ⚫ | |||
| ⚫ | |||
| + | | 11 個 |
||
|- |
|- |
||
| IDN |
| IDN |
||
| Internationalized Domain Name |
| Internationalized Domain Name |
||
| 國際化域名 |
| 國際化域名 |
||
| + | | Punycode xn-- |
||
| − | | |
||
| − | |- |
||
| ⚫ | |||
| ⚫ | |||
| ⚫ | |||
| − | | |
||
|} |
|} |
||
== DNS Software == |
== DNS Software == |
||
| 行 185: | 行 169: | ||
.eu top-level domain |
.eu top-level domain |
||
|} |
|} |
||
| + | <!-- https://en.wikipedia.org/wiki/Comparison_of_DNS_server_software --> |
||
== Root Name Server == |
== Root Name Server == |
||
| ⚫ | |||
| ⚫ | |||
於 2021年1月26日 (二) 22:48 的最新修訂
DNS 運作流程
- Recursive Resoiver 遞歸名稱伺服器
- 提供使用者查詢網圵或IP,一般說 DNS 要填什麼? 就是說這個
- Root nameserver 根網域名稱伺服器
- 網際網路基礎設施中的重要部分,負責返回頂級網域名稱伺服器位址
- 全球 13 組根網域名稱伺服器,全部已以 anycast 技術在全球多個地點設立鏡像站
- TLD nameserver 頂級網域名稱伺服器
- 全球 1500+ 組頂級網域名稱伺服器
- Authoritative server 權威名稱伺服器
DNS 名詞解釋
| DNS | Domain Name System | 網域名稱系統 | |
| ICANN | Internet Corporation for Assigned Names and Numbers | 網際網路名稱與數字位址分配機構 | |
| IANA | Internet Assigned Numbers Authority | 網際網路號碼分配局 | |
| FQDN | Fully Qualified Domain Name | 完整網域名稱 | 總長度不得超過 255 個字母, 單項(兩個點之間)不得超過 63 個字母。 |
| Root Domain | 根網域 | DNS 架構最上層的伺服器, 全球共約 16 台。 | |
| TLD | Top-Level Domain | 頂級域名 | TLD List |
| ARPA | Infrastructure Top-Level Domain | 基礎設施頂級域名 | 1 個 |
| .arpa | Address and Routing Parameter Area | 位址路由參數域 | |
| gTLD | Generic Top-Level Domain | 通用頂級域名 | 1247 個 (含 grTLD) |
| grTLD | Restricted Generic Top-Level Domain | 受限通用頂級域名 | 3 個 |
| sTLD | Sponsored Top-Level Domain | 贊助頂級域名 | 14 個 在2012年沒有使用新 gTLD 的讚助者和非贊助者之間的區別 |
| ccTLD | Country Code Top-Level Domain | 國家及地區頂級域名 | 317 個 |
| tTLD | Testing Top-Level Domain | 測試頂級域名 | 11 個 |
| IDN | Internationalized Domain Name | 國際化域名 | Punycode xn-- |
DNS Software
| BIG-IP DNS | F5 Networks | Key advantage is to use the same application delivery controller
to support DNS and application acceleration. |
| BIND | Berkeley Internet Name Domain | |
| Cisco Network Registrar | Cisco Systems | usually used in conjunction with the CNR DHCP |
| CoreDNS | recommended DNS for Kubernetes
graduated from CNCF in 2019 | |
| Dnsmasq | lightweight, easy to configure, provide to a small-scale network. | |
| djbdns | Daniel J. Bernstein | collection of DNS applications, including tinydns |
| Knot DNS | CZ.NIC | fast, resilient DNS usable for infrastructure (root & TLD) and hosting
hosts root zone (K & L Root_name_servers), several top-level domains |
| Knot Resolver | used by Cloudflare for 1.1.1.1, its free DNS service | |
| MaraDNS | Sam Trenholme | claims a good security history and ease of use
recursive resolver does not use threads |
| Microsoft DNS | integrated with Active Directory
supports DNS policies | |
| NSD | NLNet Labs | test-bed server for DNSSEC
several top-level domains, and operates 3 root nameservers |
| Unbound | validating, recursive & caching DNS designed for high performance | |
| pdnsd | GFW | sloved DNS cache pollution
also use dnsforwarder |
| Posadis | ||
| PowerDNS | variety of data storage back-ends and load balancing features | |
| Secure64 DNS | Secure64 | commercial authoritative name server, completely automated DNSSEC
highly secure recursive DNS, scalable, against DDoS (PRSD) attacks |
| Simple DNS Plus | commercial DNS server
runs under Microsoft Windows | |
| Technitium DNS Server | used by end users, SOHO networks or mid size networks
support DoT & DoH, support HTTP & SOCKS5 proxy | |
| YADIFA | EURid | Yet Another DNS Implementation For All
.eu top-level domain |