DNS and Bind：网络域名解析权威指南

5星 · 超过95%的资源需积分: 35 181 浏览量更新于2024-07-21 收藏 4.66MB PDF 举报

"DNS And Bind 5th edition" DNS（域名系统）是互联网上的一种核心服务，它负责将人类可读的域名转换为IP地址，使得网络通信能够顺利进行。BIND（Berkeley Internet Name Domain）是DNS系统中最常用、最广泛部署的DNS服务器软件，由Internet Systems Consortium (ISC) 维护。 DNS 和 BIND 这本书的第五版深入介绍了DNS的工作原理和BIND的配置与管理。以下是该书可能涵盖的一些关键知识点： 1. **DNS体系结构**：书中会解释DNS的层次结构，包括根域名服务器、顶级域（TLD）服务器、权威名称服务器、缓存（递归）名称服务器等角色及其相互作用。 2. **DNS记录类型**：如A记录（IP地址到域名的映射）、MX记录（邮件交换器记录）、CNAME记录（别名记录）、PTR记录（反向解析）、NS记录（名称服务器记录）等。 3. **BIND基础**：介绍如何安装、配置和管理BIND服务器，包括区域文件的创建、主从复制设置以及安全配置。 4. **DNS查询与响应**：解释DNS查询过程，包括UDP和TCP协议的使用、递归和迭代查询的区别。 5. **DNS安全扩展（DNSSEC）**：讨论DNSSEC如何通过数字签名增强DNS的安全性，防止DNS欺骗。 6. **BIND高级功能**：可能涵盖DNS轮询、动态更新、视图（views）机制，用于根据客户端IP提供不同的DNS响应。 7. **性能优化**：如何调整BIND的配置以提高查询速度和服务器性能。 8. **故障排查**：介绍诊断DNS问题的方法，包括日志分析、使用dig和nslookup命令等工具。 9. **IPv6支持**：在DNS和BIND中配置IPv6的指南，确保服务对IPv4和IPv6双栈的支持。 10. **DNS策略与规划**：如何根据组织需求设计和实施DNS策略，包括子域划分、负载均衡和容错设计。此外，O'Reilly出版社还提供了其他相关资源，如《DNS and BIND Cookbook》提供实用的解决方案和脚本，以及针对Windows Server 2003的DNS服务指南。访问O'Reilly网站可以获取更多关于DNS、BIND以及开放和新兴技术的新闻、事件、文章、博客、样章和代码示例。O'Reilly还举办各类技术会议，聚集创新者交流思想，并提供在线参考图书馆Safari Bookshelf，供程序员和IT专业人士搜索数千本书籍，快速找到答案。 DNS和BIND这本书是理解、管理和维护DNS服务的宝贵资源，对于网络管理员和IT专业人员来说，是提升技能和解决实际问题的重要工具。

This is the Title of the Book, eMatter Edition

xiv

Preface

• A new chapter (Chapter 16) on the design of a complete DNS architecture for an

organization

• ENUM, which maps E.164 telephone numbers to URIs, in Chapter 17

• Internationalized Domain Names, or IDN, a standard for encoding Unicode

characters in the labels of domain names, in Chapter 17

• A revised section on accommodating Active Directory with BIND, in Chapter 17

Organization

This book is organized, more or less, to follow the evolution of a zone and its admin-

istrator. Chapters 1 and 2 discuss Domain Name System theory. Chapters 3 through

6 help you decide whether or not to set up your own zones, then describe how to go

about it, should you choose to. The middle of the book, Chapters 7 through 11,

describe how to maintain your zones, configure hosts to use your nameservers, plan

for the growth of your zones, create subdomains, and secure your nameservers.

Chapters 12 through 16 deal with troubleshooting tools, common problems, and the

lost art of programming with the resolver library routines. Chapter 16 puts it all

together in an end-to-end architecture.

Here’s a more detailed, chapter-by-chapter breakdown:

Chapter 1, Background

Provides a little historical perspective and discusses the problems that motivated

the development of DNS, then presents an overview of DNS theory.

Chapter 2, How Does DNS Work?

Goes over DNS theory in more detail, including the organization of the DNS

namespace, domains, zones, and nameservers. We also introduce important

concepts such as name resolution and caching.

Chapter 3, Where Do I Start?

Covers how to get the BIND software if you don’t already have it, what to do

with it once you’ve got it, how to figure out what your domain name should be,

and how to contact the organization that can delegate your zone to you.

Chapter 4, Setting Up BIND

Details how to set up your first two BIND nameservers, including creating your

nameserver database, starting up your nameservers, and checking their operation.

Chapter 5, DNS and Electronic Mail

Deals with DNS’s MX record, which allows administrators to specify alternate

hosts to handle a given destination’s mail. This chapter covers mail-routing strat-

egies for a variety of networks and hosts, including networks with Internet fire-

walls and hosts without direct Internet connectivity. The chapter also covers the

Sender Policy Framework, which uses DNS to authorize mail servers sending

mail from particular email addresses.

This is the Title of the Book, eMatter Edition

Preface

Chapter 6, Configuring Hosts

Explains how to configure a BIND resolver. We also include notes on the idio-

syncrasies of the Windows resolver.

Chapter 7, Maintaining BIND

Describes the periodic maintenance administrators must perform to keep their

zones running smoothly, such as checking nameserver health and authority.

Chapter 8, Growing Your Domain

Covers how to plan for the growth and evolution of your zones, including how

to get big and how to plan for moves and outages.

Chapter 9, Parenting

Explores the joys of becoming a parent zone. We explain when to become a par-

ent (create subdomains), what to call your children, how to create them (!), and

how to watch over them.

Chapter 10, Advanced Features

Goes over some less common nameserver configuration options that can help

you tune your nameserver’s performance and ease administration.

Chapter 11, Security

Describes how to secure your nameserver and how to configure your nameserv-

ers to deal with Internet firewalls, and describes two new security enhancements

to DNS: the DNS Security Extensions and Transaction Signatures.

Chapter 12, nslookup and dig

Shows the ins and outs of the most popular tools for doing DNS debugging,

including techniques for digging obscure information out of remote nameservers.

Chapter 13, Reading BIND Debugging Output

Is the Rosetta stone of BIND’s debugging information. This chapter will help

you make sense of the cryptic debugging information that BIND emits, which in

turn will help you better understand your nameserver.

Chapter 14, Troubleshooting DNS and BIND

Covers many common DNS and BIND problems and their solutions, and then

describes a number of less common, harder-to-diagnose scenarios.

Chapter 15, Programming with the Resolver and Nameserver Library Routines

Demonstrates how to use BIND’s resolver routines to query nameservers and

retrieve data from within a C program or a Perl script. We include a useful (we

hope!) program to check the health and authority of your nameservers.

Chapter 16, Architecture

Presents an end-to-end design for DNS infrastructure, including external

nameservers, forwarders, and internal nameservers.

This is the Title of the Book, eMatter Edition

xvi

Preface

Chapter 17, Miscellaneous

Ties up all the loose ends. We cover DNS wildcards, hosts and networks with

intermittent Internet connectivity via dialup, network name encoding, addi-

tional record types, ENUM, IDN, and Active Directory.

Appendix A, DNS Message Format and Resource Records

Contains a byte-by-byte breakdown of the formats used in DNS queries and

responses, as well as a comprehensive list of the currently defined resource

record types.

Appendix B, BIND Compatibility Matrix

Contains a matrix showing the most important features of the most popular

BIND releases.

Appendix C, Compiling and Installing BIND on Linux

Contains step-by-step instructions on how to compile the 9.3.2 version of BIND

on Linux.

Appendix D, Top-Level Domains

Lists the current top-level domains in the Internet domain namespace.

Appendix E, BIND Nameserver and Resolver Configuration

Summarizes the syntax and semantics of each of the parameters available for

configuring nameservers and resolvers.

Audience

This book is intended primarily for system and network administrators who manage

zones and one or more nameservers, but it also includes material for network engi-

neers, postmasters, and others. Not all of the book’s chapters will be equally interest-

ing to a diverse audience, though, and you don’t want to wade through 17 chapters

to find the information pertinent to your job. We hope the following roadmap will

help you plot your way through the book:

System administrators setting up their first zones

Should read Chapters 1 and 2 for DNS theory, Chapter 3 for information on get-

ting started and selecting a good domain name, then Chapters 4 and 5 to learn

how to set up a zone for the first time. Chapter 6 explains how to configure

hosts to use the new nameservers. Later, they should read Chapter 7, which

explains how to “flesh out” their implementation by setting up additional

nameservers and adding zone data. Chapters 12 through 14 describe trouble-

shooting tools and techniques.

Experienced administrators

May benefit from reading Chapter 6 to learn how to configure DNS resolvers on

different hosts, and Chapter 7 for information on maintaining their zones.

Chapter 8 contains instructions on planning for a zone’s growth and evolution,

which should be especially valuable to administrators of large zones. Chapter 9

This is the Title of the Book, eMatter Edition

Preface

xvii

explains parenting—creating subdomains—which is de rigueur reading for those

considering the big move. Chapter 10 covers many new and advanced features of

the BIND 9.3.2 and 8.4.7 nameservers. Chapter 11 goes over securing nameserv-

ers, which may be of particular interest to experienced administrators. Chapters

12 through 14 describe tools and techniques for troubleshooting, which even

advanced administrators may find worth reading. Chapter 16 may help adminis-

trators get a grasp of the big picture.

System administrators on networks without full Internet connectivity

Should read Chapter 5 to learn how to configure mail on such networks, and

Chapters 11 and 17 to learn how to set up an independent DNS infrastructure.

Programmers

Can read Chapters 1 and 2 for DNS theory, then Chapter 15 for detailed cover-

age of how to program with the BIND resolver library routines.

Network administrators not directly responsible for any zones

Should still read Chapters 1 and 2 for DNS theory, Chapter 12 to learn how to

use nslookup and dig, and Chapter 14 for troubleshooting tactics.

Postmasters

Should read Chapters 1 and 2 for DNS theory, then Chapter 5 to find out how

DNS and electronic mail coexist. Chapter 12, which describes nslookup and dig,

will also help postmasters dig mail-routing information from the domain

namespace.

Interested users

Can read Chapters 1 and 2 for DNS theory, and then whatever else they like!

Note that we assume you’re familiar with basic Unix system administration, TCP/IP

networking, and programming using simple shell scripts and Perl. We don’t assume

you have any other specialized knowledge, though. When we introduce a new term

or concept, we’ll do our best to define or explain it. Whenever possible, we’ll use

analogies from Unix (and from the real world) to help you understand.

Obtaining the Example Programs

The example programs in this book

are available electronically via FTP from the fol-

lowing URLs:

• ftp://ftp.uu.net/published/oreilly/nutshell/dnsbind/dns.tar.Z

• ftp://ftp.oreilly.com/published/oreilly/nutshell/dnsbind/

In either case, extract the files from the archive by typing:

% zcat dns.tar.Z | tar xf -

* Examples are also available online at http://examples.oreilly.com/dns5.

剩余641页未读，继续阅读

sinat_14981037

粉丝: 0
资源: 1

DNS and Bind：网络域名解析权威指南

DNS and BIND 第五版

DNS与BIND英文版（第四版）

dns-and-bind

如何在Ubuntu使用bind搭建dns服务器

centos配置bind 报错dnskey set

YARN Registry DNS 端口变更

readline.parse_and_bind

利用 bind9 软件，配置 Linux-1 为主 DNS 服务器，采用 rndc 技术提供不间断的 DNS 服务

利用 bind9 软件，配置 Linux-1 为主 DNS 服务器，采用 rndc 技术提供不 间断的 DNS 服务；配置 Linux-2 为备用 DNS 服务器。为所有 Linux 主机提供冗 余 DNS 正反向解析服务

vm虚拟机如何 安装DNS服务软件，软件名为“bind”

最新资源

利用 bind9 软件，配置 Linux-1 为主 DNS 服务器，采用 rndc 技术提供不间断的 DNS 服务；配置 Linux-2 为备用 DNS 服务器。为所有 Linux 主机提供冗余 DNS 正反向解析服务

vm虚拟机如何安装DNS服务软件，软件名为“bind”