Mbiri ya Domain Name System: Ma seva Oyamba a DNS

Nthawi yapitayi ife anayamba kufotokoza nkhani ya DNS - tidakumbukira momwe polojekitiyi idayambira, ndi mavuto otani omwe adapangidwa kuti athetse pa intaneti ya ARPANET. Lero tikambirana za seva yoyamba ya BIND DNS.

Фото - John Markos O'Neill - CC BY SA

Ma seva oyamba a DNS

Pambuyo pa Paul Mockapetris ndi Jon Postel adapereka lingaliro mayina amtundu wa netiweki ya ARPANET, idalandira kuvomerezedwa mwachangu ndi gulu la IT. Mainjiniya ochokera ku Yunivesite ya Berkeley anali m'gulu la oyamba kugwiritsa ntchito. Mu 1984, ophunzira anayi adayambitsa seva yoyamba ya DNS, Berkeley Internet Name Domain (BIND). Adagwira ntchito mothandizidwa ndi Defense Advanced Research Projects Agency (DARPA).

Dongosololi, lopangidwa ndi ophunzira aku yunivesite, lidasinthiratu dzina la DNS kukhala adilesi ya IP ndi mosemphanitsa. Chochititsa chidwi, pamene code yake idakwezedwa BSD (mapulogalamu ogawa mapulogalamu), magwero oyamba anali kale ndi nambala 4.3. Poyamba, seva ya DNS idagwiritsidwa ntchito ndi ogwira ntchito ku labotale yaku yunivesite. Mpaka mtundu wa 4.8.3, mamembala a University of Berkeley's Computer Systems Research Group (CSRG) anali ndi udindo wopanga BIND, koma theka lachiwiri la zaka za m'ma 1980, seva ya DNS idatuluka ku yunivesite ndikusamutsidwa ku manja a Paul Vixie kuchokera ku bungwe DEC. Paul adatulutsa zosintha 4.9 ndi 4.9.1, kenako adayambitsa Internet Software Consortium (ISC), yomwe yakhala ikuyang'anira kusunga BIND kuyambira pamenepo. Malinga ndi Paul, matembenuzidwe onse am'mbuyomu adadalira ma code ochokera kwa ophunzira a Berkeley, ndipo pazaka khumi ndi zisanu zapitazi adatheratu kuthekera kwake kwamakono. Chifukwa chake mu 2000, BIND idalembedwanso kuchokera koyambira.

Seva ya BIND imaphatikizapo malaibulale angapo ndi zigawo zomwe zimagwiritsa ntchito zomangamanga za DNS za "client-server" ndipo zimakhala ndi udindo wokonza ntchito za seva ya DNS. BIND imagwiritsidwa ntchito kwambiri, makamaka pa Linux, ndipo imakhalabe yodziwika bwino ya seva ya DNS. Izi chisankho imayikidwa pa ma seva omwe amapereka chithandizo zone mizu.

Pali njira zina zosinthira BIND. Mwachitsanzo, PowerDNS, yomwe imabwera ndi magawo a Linux. Linalembedwa ndi Bert Hubert wochokera ku kampani ya Dutch PowerDNS.COM ndipo imasungidwa ndi gulu lotseguka. Mu 2005, PowerDNS idakhazikitsidwa pa ma seva a Wikimedia Foundation. Yankho lake limagwiritsidwanso ntchito ndi opereka mitambo akulu, makampani aku Europe olankhulana ndi mabungwe a Fortune 500.

BIND ndi PowerDNS ndi zina mwazofala, koma osati ma seva a DNS okha. Komanso tiyenera kuzindikira Osalephera, djbdns и dnsmasq.

Kupanga Domain Name System

M'mbiri yonse ya DNS, zosintha zambiri zapangidwa pamatchulidwe ake. Monga imodzi mwazosintha zoyamba komanso zazikulu anawonjezera NOTIFY ndi njira za IXFR mu 1996. Anapangitsa kuti zikhale zosavuta kubwereza nkhokwe za Domain Name System pakati pa ma seva oyambirira ndi apamwamba. Yankho latsopanolo linapangitsa kuti zitheke kukhazikitsa zidziwitso za kusintha kwa ma DNS Record. Njirayi imatsimikizira kuti madera achiwiri ndi oyambirira a DNS ndi ndani, kuphatikizapo kupulumutsa magalimoto - kulunzanitsa kunachitika pokhapokha ngati kuli kofunikira, osati pakapita nthawi.

Фото - Richard Mason - CC BY SA

Poyambirira, netiweki ya DNS inali yosafikirika kwa anthu wamba ndipo zovuta zomwe zingachitike ndi chitetezo chazidziwitso sizinali zofunika kwambiri popanga dongosolo, koma njira iyi idadzipangitsa kumva pambuyo pake. Ndi chitukuko cha intaneti, ziwopsezo zamakina zidayamba kugwiritsidwa ntchito - mwachitsanzo, zidawoneka ngati DNS spoofing. Pachifukwa ichi, cache ya ma seva a DNS imadzazidwa ndi deta yomwe ilibe gwero lovomerezeka, ndipo zopempha zimatumizidwa ku ma seva owukira.

Kuthetsa vutoli, mu DNS zakhazikitsidwa ma signature a crypto pamayankho a DNS (DNSSEC) - njira yomwe imakulolani kuti mupange unyolo wodalirika wa domain kuchokera kumadera a mizu. Zindikirani kuti njira yofananira idawonjezedwa kuti itsimikizire olandila posamutsa malo a DNS - idatchedwa TSIG.


Zosintha zomwe zimathandizira kubwerezedwanso kwa nkhokwe za DNS komanso zovuta zachitetezo zolondola zidalandiridwa mwamphamvu ndi gulu la IT. Koma panalinso zosintha zomwe anthu ammudzi sanasangalale nazo. Makamaka, kusintha kwa ufulu kwa analipira ankalamulira mayina. Ndipo ichi ndi chitsanzo cha imodzi mwa "nkhondo" m'mbiri ya DNS. Tidzakambirana zambiri za zimenezi m’nkhani yotsatira.

Ife ku 1cloud timapereka chithandizo "Seva yeniyeni" Ndi chithandizo chake, mutha kubwereka ndikusintha seva yakutali ya VDS/VPS mumphindi zingapo.
Komanso pali pulogalamu yothandizira kwa ogwiritsa ntchito onse. Ikani maulalo otumiza ku ntchito yathu ndikulandila mphotho kwa omwe atumizidwa.

Source: www.habr.com