Tarihin Tsarin Sunan Domain: Sabar DNS ta Farko

Karshe mu ya fara ba da labarin DNS - mun tuna yadda aikin ya fara, da kuma irin matsalolin da aka yi nufin warwarewa akan hanyar sadarwar ARPANET. Yau za mu yi magana game da uwar garken DNS na BIND na farko.

Ото - John Markos O'Neill karfinsu - CC BY SA

Sabar DNS ta farko

Bayan Paul Mockapetris da Jon Postel ya ba da shawara sunayen yanki na cibiyar sadarwar ARPANET, cikin sauri ya sami amincewa daga al'ummar IT. Injiniyoyin Jami'ar Berkeley na daga cikin wadanda suka fara aiwatar da shi a aikace. A cikin 1984, ɗalibai huɗu sun gabatar da sabar DNS ta farko, Domain Sunan Intanet na Berkeley (BIND). Sun yi aiki a ƙarƙashin tallafi daga Hukumar Kula da Ayyukan Bincike na Tsaro (DARPA).

Tsarin, wanda ɗaliban jami'a suka haɓaka, ya canza sunan DNS kai tsaye zuwa adireshin IP kuma akasin haka. Abin sha'awa, lokacin da aka loda lambarta zuwa BSD (tsarin rarraba software), tushen farko sun riga sun sami lambar sigar 4.3. Da farko, ma'aikatan dakin gwaje-gwaje na jami'a sun yi amfani da uwar garken DNS. Har zuwa nau'in 4.8.3, membobin Jami'ar Berkeley's Computer Systems Research Group (CSRG) ne ke da alhakin haɓaka BIND, amma a cikin rabin na biyu na 1980s, uwar garken DNS ya barke daga jami'ar kuma an canza shi zuwa ga jami'ar. hannun Paul Vixie daga kamfani Dec. Bulus ya fitar da sabuntawar 4.9 da 4.9.1, sannan ya kafa Cibiyar Software na Intanet (ISC), wacce ke da alhakin kiyaye BIND tun daga lokacin. A cewar Paul, duk nau'ikan da suka gabata sun dogara ne da lambar daga ɗaliban Berkeley, kuma a cikin shekaru goma sha biyar da suka gabata ta ƙare gaba ɗaya damar ta na zamani. Don haka a cikin 2000, an sake rubuta BIND daga karce.

Sabar ta BIND ta haɗa da ɗakunan karatu da abubuwan haɗin gwiwa waɗanda ke aiwatar da gine-ginen “abokin ciniki-uwar garken” DNS kuma suna da alhakin daidaita ayyukan sabar DNS. Ana amfani da BIND sosai, musamman akan Linux, kuma ya kasance sanannen aiwatar da sabar DNS. Wannan yanke shawara shigar a kan sabobin da ke ba da tallafi yankin tushen.

Akwai hanyoyin da za a bi don BIND. Misali, PowerDNS, wanda ya zo tare da rarraba Linux. Bert Hubert daga kamfanin Dutch PowerDNS.COM ne ya rubuta kuma bude tushen al'umma ne ke kiyaye shi. A cikin 2005, an aiwatar da PowerDNS akan sabar gidauniyar Wikimedia. Hakanan ana amfani da maganin ta manyan masu samar da girgije, kamfanonin sadarwa na Turai da ƙungiyoyin Fortune 500.

BIND da PowerDNS wasu na kowa ne, amma ba kawai sabobin DNS ba. Hakanan abin lura Sakakken, djbdns и DNSmasq.

Haɓaka Tsarin Sunan Domain

A cikin tarihin DNS, an yi canje-canje da yawa ga ƙayyadaddun sa. A matsayin ɗaya daga cikin na farko kuma manyan sabuntawa ya kara da cewa NOTIFY da hanyoyin IXFR a cikin 1996. Sun sauƙaƙa yin kwafin bayanan Tsarin Sunan Domain tsakanin sabar firamare da sakandare. Sabuwar bayani ya ba da damar daidaita sanarwar game da canje-canje a cikin bayanan DNS. Wannan tsarin ya ba da garantin asalin yanki na biyu da na farko na DNS, da kuma adana zirga-zirga - aiki tare ya faru ne kawai idan ya cancanta, kuma ba a ƙayyadaddun tazara ba.

Ото - Richard Mason - CC BY SA

Da farko, cibiyar sadarwar DNS ba ta da isa ga jama'a kuma matsalolin matsalolin tsaro na bayanai ba su da fifiko yayin haɓaka tsarin, amma wannan hanyar ta sa kanta ta ji daga baya. Tare da ci gaba da Intanet, an fara amfani da raunin tsarin - alal misali, hare-hare irin su DNS spoofing sun bayyana. A wannan yanayin, cache na sabobin DNS yana cike da bayanan da ba su da tushe mai tushe, kuma ana tura buƙatun zuwa sabobin maharan.

Don magance matsalar, a cikin DNS aiwatar sa hannu na crypto don martanin DNS (DNSSEC) - hanyar da ke ba ku damar gina sarkar amana don yanki daga yankin tushen. Lura cewa an ƙara irin wannan hanyar don tabbatar da mai watsa shiri lokacin canja wurin yankin DNS - an kira shi TSIG.


gyare-gyaren da ke sauƙaƙe kwafin bayanan bayanan DNS da daidaitattun matsalolin tsaro sun sami karbuwa sosai daga al'ummar IT. Amma kuma akwai sauye-sauyen da al’umma ba su yi da kyau ba. Musamman, sauyawa daga kyauta zuwa sunayen yanki da aka biya. Kuma wannan misali ne na ɗaya daga cikin "yaƙe-yaƙe" a cikin tarihin DNS. Za mu ƙara yin magana game da wannan a talifi na gaba.

Mu a 1cloud muna ba da sabis "Sabar mara kyau" Tare da taimakonsa, zaku iya yin hayan kuma saita sabar VDS/VPS mai nisa a cikin 'yan mintuna kaɗan.
Akwai kuma shirin haɗin gwiwa ga duk masu amfani. Sanya hanyoyin haɗin kai zuwa sabis ɗinmu kuma sami lada ga abokan ciniki da aka ambata.

source: www.habr.com