{"id":54351,"date":"2019-12-24T00:00:00","date_gmt":"2019-12-23T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/istoriya-sistemy-domennyh-imen-pervye-dns-servery"},"modified":"2020-02-18T14:02:21","modified_gmt":"2020-02-18T11:02:21","slug":"istoriya-sistemy-domennyh-imen-pervye-dns-servery","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/istoriya-sistemy-domennyh-imen-pervye-dns-servery","title":{"rendered":"Historie syst\u00e9mu dom\u00e9nov\u00fdch jmen: prvn\u00ed DNS servery","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Minul\u00fdkr\u00e1t jsme za\u010dali vypr\u00e1v\u011bt p\u0159\u00edb\u011bh DNS<\/a><\/noindex> \u2014 vzpomn\u011bli jsme, jak projekt za\u010dal, a jak\u00e9 probl\u00e9my m\u011bl vy\u0159e\u0161it v s\u00edti ARPANET. Dnes si pov\u00edme o prvn\u00edm DNS serveru BIND.<\/p>\n

\"Historie<\/a><\/noindex><\/a><\/noindex>
\nFoto \u2014 John Markos O'Neill<\/a><\/noindex> \u2014 CC BY-SA<\/i><\/p>\n

Prvn\u00ed DNS servery<\/h2>\n

\nPo t\u00e9, co v roce 1983 Paul Mockapetris a Jon Postel\u00a0navrhli koncept<\/a><\/noindex>\u00a0dom\u00e9nov\u00fdch jmen pro s\u00ed\u0165 ARPANET, byl rychle schv\u00e1len IT komunitou. Mezi prvn\u00edmi, kdo jej realizovali v praxi, byli in\u017een\u00fd\u0159i z Univerzity v Berkeley. V roce 1984 \u010dty\u0159i studenti p\u0159edstavili prvn\u00ed DNS server \u2014 Berkeley Internet Name Domain (BIND). Pracovali v r\u00e1mci grantu, kter\u00fd poskytlo \u0158\u00edzen\u00ed pokro\u010dil\u00fdch v\u00fdzkumn\u00fdch projekt\u016f Ministerstva obrany USA (DARPA).<\/p>\n

Syst\u00e9m vyvinut\u00fd studenty univerzity automaticky p\u0159ev\u00e1d\u011bl DNS n\u00e1zev na IP adresu a naopak. Zaj\u00edmav\u00e9 je, \u017ee kdy\u017e byl jeho k\u00f3d nahr\u00e1n na BSD<\/a><\/noindex> (syst\u00e9m distribuce softwaru), prvn\u00ed zdrojov\u00e9 k\u00f3dy ji\u017e m\u011bly \u010d\u00edslo verze 4.3. Zprvu server pou\u017e\u00edvali zam\u011bstnanci laborato\u0159\u00ed univerzity. A\u017e do verze 4.8.3 byla v\u00fdvoj na BIND zodpov\u011bdn\u00e1 skupina v\u011bdc\u016f Univerzity v Berkeley \u2014 Computer Systems Research Group (CSRG), ale v druh\u00e9 polovin\u011b 80. let se DNS server dostal i mimo univerzitu \u2014 byl sv\u011b\u0159en Paulu Vixiemu z korporace\u00a0DEC<\/a><\/noindex>. Paul vydal aktualizace 4.9 a 4.9.1, a pot\u00e9 zalo\u017eil Internet Software Consortium (ISC), kter\u00fd od t\u00e9 doby zaji\u0161\u0165uje podporu BINDu. Podle Paula se v\u0161echny p\u0159edchoz\u00ed verze op\u00edraly o k\u00f3d student\u016f z Berkeley a b\u011bhem uplynul\u00fdch patn\u00e1cti let vy\u010derpaly v\u0161echny mo\u017enosti pro modernizaci. Proto byl v roce 2000 BIND p\u0159eps\u00e1n od z\u00e1kladu.<\/p>\n

Server BIND obsahuje n\u011bkolik knihoven a komponent\u016f, kter\u00e9 implementuj\u00ed \"klient-server\" architekturu DNS a jsou zodpov\u011bdn\u00e9 za nastaven\u00ed funkc\u00ed DNS serveru. BIND je \u0161iroce roz\u0161\u00ed\u0159en, zejm\u00e9na na Linuxu, a z\u016fst\u00e1v\u00e1 popul\u00e1rn\u00ed realizac\u00ed DNS serveru. To rozhodnut\u00ed<\/a><\/noindex> bylo nainstalov\u00e1no na serverech, kter\u00e9 zaji\u0161\u0165uj\u00ed podporu ko\u0159enov\u00e9 z\u00f3ny<\/a><\/noindex>.<\/p><\/blockquote>\n

\nExistuj\u00ed tak\u00e9 alternativy k BIND, jako je nap\u0159\u00edklad PowerDNS, kter\u00fd je sou\u010d\u00e1st\u00ed linuxov\u00fdch distribuc\u00ed. Napsal ho Bert Hubert z holandsk\u00e9 spole\u010dnosti PowerDNS.COM a je podporov\u00e1n komunitou open source. V roce 2005 byl PowerDNS nasazen na serverech nadace Wikimedia. Toto \u0159e\u0161en\u00ed vyu\u017e\u00edvaj\u00ed tak\u00e9 velc\u00ed cloudov\u00ed poskytovatel\u00e9, evropsk\u00e9 telekomunika\u010dn\u00ed spole\u010dnosti a organizace z \u017eeb\u0159\u00ed\u010dku Fortune 500.<\/p>\n

BIND a PowerDNS jsou jedny z nejroz\u0161\u00ed\u0159en\u011bj\u0161\u00edch, ale ne jedin\u00e9 DNS servery. Je tak\u00e9 t\u0159eba zm\u00ednit\u00a0Unbound<\/a><\/noindex>,\u00a0djbdns<\/a><\/noindex> a\u00a0Dnsmasq<\/a><\/noindex>.<\/p>\n

V\u00fdvoj syst\u00e9mu dom\u00e9nov\u00fdch jmen<\/h2>\n

\nB\u011bhem historie DNS do jeho specifikace bylo vlo\u017eeno mnoho zm\u011bn. Jako jedna z prvn\u00edch a v\u00fdznamn\u00fdch aktualizac\u00ed\u00a0p\u0159idali<\/a><\/noindex>\u00a0byly mechanismy NOTIFY a IXFR v roce 1996. Tyto mechanismy zjednodu\u0161ily replikaci datab\u00e1z\u00ed syst\u00e9mu dom\u00e9nov\u00fdch jmen mezi prim\u00e1rn\u00edmi a sekund\u00e1rn\u00edmi servery. Nov\u00e9 \u0159e\u0161en\u00ed umo\u017enilo nastavovat upozorn\u011bn\u00ed na zm\u011bny DNS z\u00e1znam\u016f. Takov\u00fd p\u0159\u00edstup zaru\u010dil identitu sekund\u00e1rn\u00ed a prim\u00e1rn\u00ed DNS z\u00f3ny a z\u00e1rove\u0148 \u0161et\u0159il provoz \u2013 synchronizace prob\u00edhala pouze v p\u0159\u00edpad\u011b pot\u0159eby, nikoli v pevn\u00fdch intervalech.<\/p>\n

\"Historie
\nFoto \u2014 Richard Masoner<\/a><\/noindex> \u2014 CC BY-SA<\/i><\/p>\n

P\u016fvodn\u011b byla s\u00ed\u0165 DNS nedostupn\u00e1 pro \u0161irokou ve\u0159ejnost a potenci\u00e1ln\u00ed probl\u00e9my s informa\u010dn\u00ed bezpe\u010dnost\u00ed nebyly p\u0159i v\u00fdvoji syst\u00e9mu prioritou, ale tato strategie se pozd\u011bji uk\u00e1zala jako problematick\u00e1. S rozvojem internetu za\u010dali \u00fato\u010dn\u00edci zneu\u017e\u00edvat zranitelnosti syst\u00e9mu \u2013 nap\u0159\u00edklad se objevily \u00fatoky jako DNS spoofing. V tomto p\u0159\u00edpad\u011b jsou cache DNS server\u016f zapl\u0148ov\u00e1ny daty, kter\u00e1 nemaj\u00ed d\u016fv\u011bryhodn\u00fd zdroj, a po\u017eadavky jsou p\u0159esm\u011brov\u00e1ny na servery \u00fato\u010dn\u00edk\u016f.<\/p>\n

Aby se vy\u0159e\u0161il probl\u00e9m, v DNS\u00a0zavedli<\/a><\/noindex>\u00a0byly zavedeny kryptografick\u00e9 podpisy pro DNS odpov\u011bdi (DNSSEC) \u2013 mechanismus, kter\u00fd umo\u017e\u0148uje vytvo\u0159it \u0159et\u011bzec d\u016fv\u011bry pro dom\u00e9nu od ko\u0159enov\u00e9 z\u00f3ny. Je t\u0159eba poznamenat, \u017ee podobn\u00fd mechanismus byl p\u0159id\u00e1n pro autentizaci hostitel\u016f p\u0159i p\u0159enosu DNS z\u00f3ny \u2013 dostal n\u00e1zev TSIG.<\/p>\n

Modifikace, kter\u00e9 zjednodu\u0161ily replikaci DNS z\u00e1znam\u016f a vy\u0159e\u0161ily probl\u00e9my s bezpe\u010dnost\u00ed, byly IT komunitou velmi v\u00edt\u00e1ny. Ale byly i zm\u011bny, kter\u00e9 komunita nep\u0159ijala s nad\u0161en\u00edm. Zejm\u00e9na p\u0159echod od bezplatn\u00fdch k placen\u00fdm dom\u00e9nov\u00fdm jm\u00e9n\u016fm. A to je pouze jeden p\u0159\u00edklad \u201ev\u00e1lek\u201c v historii DNS. O tom si pov\u00edme v\u00edce v dal\u0161\u00edm materi\u00e1lu.<\/p>\n

\"HistorieMy v 1cloud nab\u00edz\u00edme slu\u017ebu \u201eVirtu\u00e1ln\u00ed server<\/a><\/noindex>\u201c. S jej\u00ed pomoc\u00ed si m\u016f\u017eete za p\u00e1r minut pronajmout a nastavit vzd\u00e1len\u00fd VDS\/VPS server.
\n\"HistorieTak\u00e9 je k dispozici partnersk\u00fd program<\/a><\/noindex> pro v\u0161echny u\u017eivatele. Um\u00edst\u011bte referral odkazy na na\u0161i slu\u017ebu a z\u00edsk\u00e1vejte odm\u011bny za p\u0159iveden\u00e9 z\u00e1kazn\u00edky.<\/p>\n

Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u043c\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0440\u0438\u044e DNS \u2014 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0441 \u0447\u0435\u0433\u043e \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442, \u0438 \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b \u043f\u0440\u0438\u0437\u0432\u0430\u043d \u0440\u0435\u0448\u0438\u0442\u044c \u0432 \u0441\u0435\u0442\u0438 ARPANET. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043f\u0435\u0440\u0432\u043e\u043c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 BIND. \u0424\u043e\u0442\u043e \u2014 John Markos O’Neill \u2014 CC BY-SA \u041f\u0435\u0440\u0432\u044b\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0432 1983 \u0433\u043e\u0434\u0443 \u041f\u043e\u043b \u041c\u043e\u043a\u0430\u043f\u0435\u0442\u0440\u0438\u0441 (Paul Mockapetris) \u0438 \u0414\u0436\u043e\u043d \u041f\u043e\u0441\u0442\u0435\u043b (Jon Postel)\u00a0\u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e\u00a0\u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54351","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u0159\u00edb\u011bh syst\u00e9mu dom\u00e9nov\u00fdch jmen: prvn\u00ed DNS servery | ProHoster","description":"Minule jsme za\u010dali vypr\u00e1v\u011bt p\u0159\u00edb\u011bh DNS \u2014 p\u0159ipomn\u011bli jsme si, jak projekt za\u010dal a jak\u00e9 probl\u00e9my m\u011bl vy\u0159e\u0161it.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/istoriya-sistemy-domennyh-imen-pervye-dns-servery","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d: \u043f\u0435\u0440\u0432\u044b\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u043c\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0440\u0438\u044e DNS \u2014 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043b\u0438, \u0441 \u0447\u0435\u0433\u043e \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442, \u0438 \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b \u043f\u0440\u0438\u0437\u0432\u0430\u043d \u0440\u0435\u0448\u0438\u0442\u044c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/istoriya-sistemy-domennyh-imen-pervye-dns-servery","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-23T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54351","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 11:00:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:07:25","updated":"2026-01-24 11:00:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=54351"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54351\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=54351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=54351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=54351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}