DNS
跳至導覽
跳至搜尋
DNS 運作流程
- Recursive Resoiver 遞歸名稱伺服器
- 提供使用者查詢網圵或IP，一般說 DNS 要填什麼? 就是說這個
- Root nameserver 根網域名稱伺服器
- 網際網路基礎設施中的重要部分，負責返回頂級網域名稱伺服器位址
- 全球 13 組根網域名稱伺服器，全部已以 anycast 技術在全球多個地點設立鏡像站
- TLD nameserver 頂級網域名稱伺服器
- 全球 1500+ 組頂級網域名稱伺服器
- Authoritative server 權威名稱伺服器
DNS 名詞解釋
| DNS | Domain Name System | 網域名稱系統 | |
| ICANN | Internet Corporation for Assigned Names and Numbers | 網際網路名稱與數字位址分配機構 | |
| IANA | Internet Assigned Numbers Authority | 網際網路號碼分配局 | |
| FQDN | Fully Qualified Domain Name | 完整網域名稱 | 總長度不得超過 255 個字母， 單項(兩個點之間)不得超過 63 個字母。 |
| Root Domain | 根網域 | DNS 架構最上層的伺服器， 全球共約 16 台。 | |
| TLD | Top-Level Domain | 頂級域名 | TLD List |
| ARPA | Infrastructure Top-Level Domain | 基礎設施頂級域名 | 1 個 |
| .arpa | Address and Routing Parameter Area | 位址路由參數域 | |
| gTLD | Generic Top-Level Domain | 通用頂級域名 | 1247 個 (含 grTLD) |
| grTLD | Restricted Generic Top-Level Domain | 受限通用頂級域名 | 3 個 |
| sTLD | Sponsored Top-Level Domain | 贊助頂級域名 | 14 個 在2012年沒有使用新 gTLD 的讚助者和非贊助者之間的區別 |
| ccTLD | Country Code Top-Level Domain | 國家及地區頂級域名 | 317 個 |
| tTLD | Testing Top-Level Domain | 測試頂級域名 | 11 個 |
| IDN | Internationalized Domain Name | 國際化域名 | Punycode xn-- |
DNS Software
| BIG-IP DNS | F5 Networks | Key advantage is to use the same application delivery controller
to support DNS and application acceleration. |
| BIND | Berkeley Internet Name Domain | |
| Cisco Network Registrar | Cisco Systems | usually used in conjunction with the CNR DHCP |
| CoreDNS | recommended DNS for Kubernetes
graduated from CNCF in 2019 | |
| Dnsmasq | lightweight, easy to configure, provide to a small-scale network. | |
| djbdns | Daniel J. Bernstein | collection of DNS applications, including tinydns |
| Knot DNS | CZ.NIC | fast, resilient DNS usable for infrastructure (root & TLD) and hosting
hosts root zone (K & L Root_name_servers), several top-level domains |
| Knot Resolver | used by Cloudflare for 1.1.1.1, its free DNS service | |
| MaraDNS | Sam Trenholme | claims a good security history and ease of use
recursive resolver does not use threads |
| Microsoft DNS | integrated with Active Directory
supports DNS policies | |
| NSD | NLNet Labs | test-bed server for DNSSEC
several top-level domains, and operates 3 root nameservers |
| Unbound | validating, recursive & caching DNS designed for high performance | |
| pdnsd | GFW | sloved DNS cache pollution
also use dnsforwarder |
| Posadis | ||
| PowerDNS | variety of data storage back-ends and load balancing features | |
| Secure64 DNS | Secure64 | commercial authoritative name server, completely automated DNSSEC
highly secure recursive DNS, scalable, against DDoS (PRSD) attacks |
| Simple DNS Plus | commercial DNS server
runs under Microsoft Windows | |
| Technitium DNS Server | used by end users, SOHO networks or mid size networks
support DoT & DoH, support HTTP & SOCKS5 proxy | |
| YADIFA | EURid | Yet Another DNS Implementation For All
.eu top-level domain |