Uma uke wabona amaphutha angajwayelekile lapho ulayisha amakhasi, ama-imeyili angafiki, noma izixhumanisi ezibonakala njengezipoki, kungenzeka ukuthi i-DNS yakho ibangela izinkinga. Uhlelo lwegama lesizinda "incwadi yocingo" ye-inthanethi Futhi uma ihluleka, konke okunye kuyantengantenga: ukusebenza, ukutholakala, ngisho nokuphepha.
Izindaba ezinhle ukuthi ukuthola ukuthi kwenzekani akudingi umlingo omnyama. Ngokuhlola okuthile okuhleliwe, amathuluzi alungile, nemiyalo embalwa Kungenzeka ukukhomba lapho ukulungiswa kubambeka khona, ukusheshisa izimpendulo, nokuvikela ingqalasizinda ekuhlaselweni namaphutha okumisa.
Iyini i-DNS futhi kungani ithinta ukusebenza nokuphepha?
I-DNS imele i-Domain Name System. Umsebenzi wayo ukuhumusha amagama afundeka abantu (njenge www.example.com) ukuya kumakheli e-IP ukuthi imishini iyakuqonda. Uma konke kuhamba kahle, amakhasi alayisha ngokushesha kusuka noma yikuphi emhlabeni; uma kungenjalo, ukubambezeleka, ukuphela kwesikhathi, namasevisi ayeka ukuphendula ayavela.
Ngaphezu kokwenza i-inthanethi isebenziseke, I-DNS iyisixhumanisi esiyinhloko ekuvikelekeniUkulungiselelwa okubuthakathaka kuvumela ukudunwa kwezimoto noma ukuzenza ongeyena, ukuqondisa kabusha abasebenzisi kumasayithi omgunyathi noma ukuvula iminyango yokuvuza kwedatha. Ngakho-ke, kubalulekile ukuyiphatha ngokucophelela futhi uyiqaphe.
Izinkinga ezijwayelekile kanye nemiphumela yazo kuwebhusayithi
Kunamaphethini aziphindayo lapho i-DNS ivilapha. Ukulungiswa kombuzo onensayo kwandisa i-TTFB futhi kwenza umuzwa womsebenzisi ube nzimaikakhulukazi ekuxhumekeni kweselula noma okuminyene.
Esinye isimo esivamile ukuphela kwesevisi: Uma amaseva e-DNS eyeka ukuphendula, iwebhusayithi yakho ingase ingafinyeleleki. kanye nomthelela ekuthengisweni noma ekudumeni kuza ngokushesha.
Ekugcineni, amaphutha okumisa (amarekhodi abekwe ngokungalungile, izithunywa eziphukile, ama-TTL amaningi) Bacupha ukusesha okuhlulekile, umzila ongalungile, noma ukusabalalisa okungapheli ngemva koshintsho.
Amarekhodi e-DNS okufanele wazi ngaphambi kokuwaxilonga
Ukuze uphenye ngempumelelo, kubalulekile ukucacisa ukuthi irekhodi ngalinye liqukethe ini. A ibonisa amakheli e-IPv4; AAAA, IPv6 amakheli; I-CNAME idala iziteketiso elikhomba amagama (hhayi ama-IP); I-MX ichaza iseva ye-SMTP; I-TXT igcina idatha efana ne-SPF, DKIM, noma i-DMARC; futhi I-NS ibala amaseva agunyaziwe okwendawo.
Ngaleyo mephu, ungabheka ukuthi umbuzo ngamunye uphendula ini nokuthi thola ukungqubuzana phakathi kwalokho okulindelekile nalokho indawo ekushicilelayo.
Ungakala kanjani ukusebenza kwakho kwe-DNS
Ngaphambi "kokuthinta izintambo", kuhle ukukala. Izinkundla zokuqapha zesikhathi sangempela (isb., i-PerfOps noma okulinganayo) Zikuvumela ukuthi ulandele ukubambezeleka ngokwesifunda, uqalise izexwayiso lapho ukubambezeleka kwanda, futhi ukhiqize imibiko yomlando ukuze uhlonze amathrendi. Iziqondiso ezisebenzayo nazo ziwusizo. hlola ukuthi iwebhusayithi iyasebenza futhi uqinisekise isipiliyoni ngamaphuzu amaningana.
Yenza amabhethri okwenziwa kanye nokuhlola ukulayisha: belingisa ukubonisana ezindaweni nezikhathi ezahlukene ukukhomba ama-latency spikes, futhi ugcizelele isevisi ukuze ihlole ukuziphatha kwayo ngaphansi kwengcindezi.
Umlando uyigolide: Qhathanisa ukusebenza ngaphambi nangemuva kwezinguquko Iveza ukuthi ingabe ukulungiselelwa kusebenzile noma umthetho omusha wethule ukuhlehla.
Ukuhlola okusheshayo nge-WHOIS kanye nekhonsoli
Uma ushintsha ukusingathwa noma ulungisa i-DNS, into yokuqala okufanele uyenze ukuqinisekisa amaseva wamagama. Hlola ideshibhodi yomhlinzeki ukuze ubone ukuthi imaphi amaseva okufanele asetshenziswe. futhi uziqhathanise nalokho okubonwa yi-WHOIS.
Ungaqinisekisa isizinda usebenzisa amathuluzi aku-inthanethi we-WHOIS: Uma ama-nameservers ehambisana, yonke into ikhomba endleleni efanele.Uma kungenjalo, uzodinga ukukulungisa nobhalisi. Qaphela: Kukhona ama-TLD angavamile i-WHOIS yawo ehlala kumaphothali awo futhi angase angabonisi i-NS evamile.
Kuphinde kube ucezu lwekhekhe ku-console. Ku-Windows, sebenzisa nslookup -type=ns yourdomain.tld Ukubuka i-NS yamanje; ku-Linux naku-macOS, dig +short ns yourdomain.tld Kwenza umphumela ube lula ezintweni zawo ezibalulekile.
Khumbula ukusabalala: Ngemva kokubuyekeza amarejistri noma ukushintsha ama-nameservers, izinguquko zingathatha kusukela emahoreni ukuya emahoreni angu-48–72. Ngokusho kwe-TTL, umbhalisi, kanye ne-ISP. Ukubekezela lapha kugwema ama-alamu angamanga.
Amaphutha avamile lapho uqinisekisa i-DNS nokuthi ungayihumusha kanjani
Uma i-WHOIS ithi isizinda "simahhala" noma singabuyisi i-NS, hlola isipelingi noma sebenzisa elinye ithuluzi. Ezizindeni ezisanda kubhaliswa, amanye amarekhodi e-WHOIS athatha isikhathi ukukhombisa idatha. futhi ingase ibonise ulwazi oluphelelwe yisikhathi.
Uma unike amandla i-DNSSEC futhi akukho okusabalalisayo, sebenzisa isihloli se-DNSSEC: Uma kubonakala kusayiniwe (isb., kusayiniweUkuthumela) futhi ushintsha i-DNS, xhumanisa nombhalisi ukuze uvale ukusebenza okwesikhashana, sebenzisa izinguquko bese usayina futhi ngemva kwalokho.
Ukuxilongwa okungokoqobo: izimpawu, imiyalo, nezindlela zokwehluleka
Qala ngendawo yekhasimende. Hlola ikheli le-IP, imaski ye-subnet, kanye nesango nge-ipconfig /konke (iWindows) futhi uhlole ukuthi yimaphi amaseva e-DNS ikhompuyutha noma irutha ewamisile.
Hlola ukulungiswa okuyisisekelo ngokumelene neseva ethile: igama le-nslookup 10.0.0.1 (shintshanisa nekheli lakho le-DNS IP). Uma ibuyisela ikheli le-IP, leyo ngxenye iyaphendula; uma ubona ukuphela kwesikhathi noma iphutha leseva, landela umkhondo.
Izilondolozi eziseceleni kweseva ezingenalutho lapho usola idatha ephelelwe yisikhathi: ku-Windows Server ongayisebenzisa dnscmd /clearcache noma, ku-PowerShell, Sula i-DnsServerCachePhinda ukuhlola ngemva kwalokho.
Amalogi esistimu angabangani bakho. Hlola amalogi athile e-Application, System, kanye ne-DNS Server. esibukelini somcimbi ukuzingela amaphutha esevisi, ukugcwala ngokweqile, noma izinkinga zendawo.
Uma iseva ye-DNS ingaphenduli: izimbangela ezijwayelekile nezisombululo
Lowo myalezo owesabekayo ngokuvamile unencazelo yasemhlabeni; bonisana Ungayixazulula kanjani Uma udinga umhlahlandlela wesinyathelo ngesinyathelo. Qala ngokuzama isiphequluli esihlukile futhi ubuyekeze lesi osisebenzisayo.Susa noma yiziphi izandiso ezingavamile futhi uhlole isistimu ngemodi ephephile ukuze ukhiphe ukuphazanyiswa kwesofthiwe.
Khubaza okwesikhashana isivikeli magciwane sekhompyutha yakho kanye ne-firewall: Kwesinye isikhathi bavimba imibuzo noma izimbobo futhi babangela ama-negative angamanga. Khumbula ukuwavula futhi ngemva kokuhlolwa.
In Windows 10, khubaza ukwenziwa ngcono kokulethwa kwesibuyekezo se-P2P: Lesi sici singaphazamisa ithrafikhiQala kabusha irutha yakho futhi, uma kunesidingo, uyikhiphe imizuzwana engu-30 ukuze uhlanze noma yiziphi izifunda.
Abashayeli be-adaptha yenethiwekhi endala nabo babangela izimanga. Buyekeza abashayeli usebenzisa amathuluzi athembekile noma kumenzi. Zama futhi. Uma inkinga iqhubeka, sula inqolobane yakho ye-DNS futhi uvuselele ikheli lakho le-IP.
Ku-Windows, vula i-Command Prompt njengomlawuli bese ufaka, ngokulandelana: ipconfig / flushdns, ipconfig / regdns, ipconfig / ukukhululwa, ipconfig / uvuseleleKu-macOS, sebenzisa dscacheutil -flushcache kuTheminali.
Inhlamvu yokugcina ekamelweni: khubaza i-IPv6 okwesikhashana Ukukhipha izinkinga zebhethri, futhi uma i-DNS yomsebenzisi ihamba kancane, faka esikhundleni sayo abahluleli bomphakathi (isb., 8.8.8.8 kanye 8.8.4.4) kuzakhiwo ze-TCP/IPv4 noma kokuthi Okuncanyelwayo Kwenethiwekhi ye-macOS.
Ukuxilongwa okuthuthukisiwe kumaseva agunyaziwe naphindayo
Uma ingxenye egunyaziwe (leyo eshicilela indawo yakho) yehluleka, hlukanisa ukuthi iseva eyinhloko noma yesibili. Uma kuyinkinga enkulu, bheka amaphutha okuhlela, ukuphindaphinda kokuthi I-Active Directory noma izibuyekezo eziguqukayo ezingazange zibe nezimpande.
Uma kuyinombolo yesiriyali yesibili, hlola inombolo ye-serial nhlangothi zombili: Eyokuqala kufanele ibe nenombolo yomkhiqizo ephezuluDlulisa amandla nge dnscmd /zonerefresh zonedomain futhi iqinisekisa ukuthi idatha ibuyekeziwe.
Uma amaphutha eqhubeka, hlola ithebhu ethi Dlulisa endaweni: Amanye amaseva akhawulela i-AXFR ohlwini lwama-IPEngeza idivayisi yakho yesibili lapho futhi ukhubaze ukudluliselwa "okusheshayo" uma idivayisi yakho yesibili (isb., BIND) ingakusekeli.
Uma inkinga ikusevisi, hlola ukuthi inqubo ye-DNS iyasebenza yini. Iqale nge-net start DNS ku-Windows futhi uqinisekise ukuthi ilalele ekhelini le-IP elilungile (izakhiwo zeseva, ithebhu Yezikhombimsebenzisi). Qinisekisa ukuthi i-UDP/TCP 53 ivunyelwe ukusuka ekupheleni ku-firewall.
Ukuphindaphinda, abadluliseli, neziphakamiso zezimpande
Uma i-DNS ephindaphindayo ingaxazululi izizinda zangaphandle, iketango lingaphuka kunoma iyiphi i-hop. Hlola ukuthi iseva yakho isebenzisa abadluliseli (izakhiwo, ithebhu yabadluliseli) futhi, uma kunjalo, qinisekisa ukuthi labo badluliseli baphendula ngendlela efanele.
Uma bengekho abadluliseli noma isahluleka, zama ngokumelene nempande. Kumodi yokusebenzisana ye-nslookup: iseva IP-of-the-server bese setha q=NS ukucela amaseva ezimpande noma izizinda zomzali bese ulandela ukuthunyelwa.
Ukuze uthole ukuthunyelwa okuphukile, sebenzisa ukulandelana okungaphindi: setha i-norecurse, setha i-querytype=TYPE bese uhlola i-FQDN. Uma i-NS ishoda noma i-NS ayinawo amarekhodi A, engeza noma lungisa o-A beglue endaweni yokuthumela.
Kumaseva e-Windows, hlola ifayela le- Amacebo ezimpande kuzakhiwo futhi uhlole uxhumano lwe-IP kulawo maseva ezimpande. Uma ingekho impendulo, kungase kube nenkinga yenethiwekhi noma uhlu lwamacebo aphelelwe yisikhathi.
Kuqoqwe imiyalo ewusizo
I-arsenal encane esandleni isheshisa noma yikuphi ukuxilongwa; thintana nomhlahlandlela wethu ku Imiyalo ye-CMD yamanethiwekhi ukuze uthole izinkomba nezibonelo. IWindows (iklayenti): ipconfig/all, nslookup -type=ns domain. I-Linux/macOS (iklayenti): dig +short ns domain, noma dig ukubhaliswa kwesizinda.
I-Windows Server (DNS): dnscmd /clearcache y Sula i-DnsServerCache okwenqolobane; dnscmd /zonerefresh zone ukuphoqa ukudluliselwa; net qala i-DNS ukuqala isevisi. interactive nslookup Ukulandela umzila: iseva ye-IP, setha u-q=NS, setha i-norecurse.
Thuthukisa ukusebenza: umzila, ukulinganiswa komthwalo, nokungadingeki
Uma ibhodlela isitholiwe, yisikhathi sokuthuthukisa. Ukuphathwa kwethrafikhi ngomzila wendawo kanye nokulinganisa ukulayisha Isabalalisa imibuzo phakathi kwamaphoyinti eduze nomsebenzisi futhi inciphisa ukubambezeleka.
Umzila wangaphakathi nawo ubalulekile: cwenga imizila phakathi kwabaxazululi nabagunyaziweIqeda ama-hops angadingekile futhi isebenzisa amanethiwekhi abambezeleka kancane engxenyeni ebalulekile.
Ungavumeli ukwehluleka kukushiye ebumnyameni. Lungiselela ukuphindaphinda (ama-NS amaningi kumanethiwekhi ahlukene kanye ne-AS)Ichaza izinqubomgomo ze-faillover futhi iqinisekisa ngezikhathi ezithile ukuthi i-faillover iqala ukusebenza.
Futhi ungakuyeki kube yinhlanhla: Iqapha izikhathi zokuphendula, amaphutha e-SERVFAIL, kanye nezilinganiso ze-NXDOMAIN ngesikhathi sangempela, futhi ibuyekeza idatha yomlando ukuze kutholwe ama-spikes esifunda noma imiphumela yezinguquko.
Izithuthukisi zokuphepha: I-DNSSEC, imikhawulo yemvamisa, nokuqapha
Ukuvikela ubuqotho bezimpendulo, Nika amandla i-DNSSEC ezindaweni zakho Iphinde iphathe okhiye ngempumelelo (ukusayina, ukugoqa, kanye nokunamathisela kwirejista). Ivimbela ubuthi kanye nokuphazamisa endleleni yokuhamba.
Nciphisa i-DDoS ezingeni le-DNS nge umkhawulo wesilinganiso (imikhawulo yemvamisa ngomthombo) kanye nanoma yikuphi ukwakhiwa kwezakhiwo ezinciphisa ukuhlasela ngokukusabalalisa phakathi kwamanodi amaningi.
Ekugcineni, uqapha ukuziphatha okungavamileUkunyuka kwe-NXDOMAIN, izimpendulo ezingajwayelekile, izinguquko zamaphethini emibuzo, noma ama-TLD angalindelekile abuzwe abaxazululi bakho konke kuyizimpawu okufanele ziphenywe.
Amathuluzi ewebhu okuhlola okusheshayo nangempumelelo
Ukuze kuqinisekiswe ngaphandle kokuvula itheminali, kukhona izinsiza eziwusizo kakhulu. Izinjini zokusesha ze-DNS ezifana neSite24x7 Bafaka ohlwini A, AAAA, MX, CNAME, TXT, namarekhodi e-NS futhi babonisa ukubambezeleka ngendawo.
Uma ubuhlungu buseposini, Amathuluzi okuhlaziya we-MX kanye nokuxilongwa kwendawo yokusebenza Basiza ukuqinisekisa izinto eziza kuqala, amarekhodi e-SPF nokhiye be-DKIM, kanye nezinqumo ezihlehlisiwe ezidingekayo.
Uma ufuna umbono wembulunga yonke, Izinsizakalo ezifana ne-NSLookup.io zinikeza izithombe ezigcwele umzimba ye-DNS yomphakathi, ama-IP, namaseva wamagama. Ukuze ulandele indlela ephelele yombuzo, sebenzisa izibukeli zezithunywa kanye nokulandelelwa kwesinyathelo ngesinyathelo.
Izinhlobo zemibuzo nokusabalalisa: yini ongayilindela
Emhlabeni wangempela uzobona imibuzo ephindaphindayo (iklayenti licela impendulo yokugcina) kanye nemibuzo ephindaphindwayo (amaseva ayaqhubeka nokuphathisa). Ukuqonda lo mehluko kukusiza ukuthi ubone amaphutha lapho impendulo ilahleka endleleni.
Ukusabalala kwezinguquko akukona ngokushesha: i-solvents cache ngokusho kwe-TTL futhi amanye ama-ISP engeza izendlalelo zawoSivamise ukukhuluma ngamahora ambalwa, kodwa kunganweba kufikela emahoreni angama-72 ezimeni ezithile.
Veza uhlu lokuhlola ngaphambi kokwandisa isigameko
1) Ama-nameservers alindelwe ku-WHOIS? 2) Amarekhodi angukhiye angaguquki (A/AAAA, CNAME, MX, TXT)? 3) Ingabe ukuphindaphinda kwangaphandle kusebenza kuma-ISP amaningi? 4) Awekho amabhulokhi e-UDP/TCP 53? 5) Izindawo ezinezinombolo ze-serial ezibuyekeziwe kanye nokudluliselwa KULUNGILE?
Uma udlula kulolo hlu futhi kusebuhlungu, Ubufakazi bedokhumenti (imiyalo, izitembu zesikhathi, ukulandelelwa) bese ubudlulisele kumhlinzeki wakho ye-DNS ephethwe noma noma ubani osebenzisa ingqalasizinda egunyaziwe/ephindaphindayo.
Kungcono ukukhumbula umqondo oyinhloko: i-DNS akuyona imfihlakalo engaqondakali. Ngokuqinisekiswa kwe-WHOIS, imibuzo embalwa ye-nslookup/dig, ukubuyekezwa komcimbi, nokuhlolwa kwe-recursion Ungakwazi ukukhomba ngemizuzu ukuthi inkinga ikuklayenti, inethiwekhi, inqolobane, ihhovisi legatsha, noma isifunda. Ukusuka lapho, ukwenza ngcono ukubambezeleka ngokuphathwa kwethrafikhi, ukuqinisa ngokuphindaphindeka kanye ne-DNSSEC, nokuqapha ngokuqhubekayo kuvimbela izimanga futhi kuqinisekisa ukuthi iwebhusayithi yakho yenza ngokusabela okufanele.
