Imbali yeNkqubo yeGama leDomain: Iiseva zeDNS zokuQala

Ngexesha lokugqibela thina waqala ukubalisa ibali le-DNS - sakhumbula indlela iprojekthi eyaqala ngayo, kwaye yeyiphi ingxaki eyayijoliswe ukuyicombulula kwinethiwekhi ye-ARPANET. Namhlanje siza kuthetha nge-BIND DNS server yokuqala.

--Ото - UJohn Markos O'Neill — CC BY-SA

Iiseva ze-DNS zokuqala

Emva kukaPaul Mockapetris kunye noJon Postel icetywayo ingqikelelo amagama esizinda kwinethiwekhi ye-ARPANET, ngokukhawuleza yafumana imvume kuluntu lwe-IT. Iinjineli zeDyunivesithi yaseBerkeley zaziphakathi kwabokuqala ukuzisebenzisa. Ngo-1984, abafundi abane bazise iseva yokuqala ye-DNS, i-Berkeley Internet Name Domain (BIND). Basebenza phantsi kwenkxaso-mali evela kwi-Arhente yeeProjekthi zoPhando oluPhezulu lwezoKhuselo (DARPA).

Inkqubo, ephuhliswe ngabafundi baseyunivesithi, iguqule ngokuzenzekelayo igama le-DNS kwidilesi ye-IP kunye nokunye. Okubangela umdla kukuba, xa ikhowudi yakhe yafakwa kuyo BSD (inkqubo yokusasazwa kwesoftware), imithombo yokuqala sele inenombolo yenguqulo 4.3. Ekuqaleni, iseva ye-DNS yayisetyenziswa ngabasebenzi baseyunivesithi. Ukuza kuthi ga kwinguqulelo ye-4.8.3, amalungu eQela loPhando lweeNkqubo zeKhompyutha yeYunivesithi yaseBerkeley (CSRG) ayenoxanduva lokuphuhlisa i-BIND, kodwa kwisiqingatha sesibini seminyaka yee-1980, iseva ye-DNS yaqhambuka eyunivesithi yaza yatshintshelwa kwi-BIND. izandla zikaPaul Vixie kwiqumrhu uDEC. UPawulos wakhulula uhlaziyo lwe-4.9 kunye ne-4.9.1, kwaye emva koko waseka i-Internet Software Consortium (ISC), enoxanduva lokugcina i-BIND ukususela ngoko. NgokukaPaul, zonke iinguqulelo zangaphambili zixhomekeke kwikhowudi evela kubafundi baseBerkeley, kwaye kule minyaka ilishumi elinesihlanu idlulileyo iye yawagqiba ngokupheleleyo amathuba ayo okuphucula. Ke ngo-2000, i-BIND yaphinda yabhalwa ukusuka ekuqaleni.

Umncedisi we-BIND uquka amathala eencwadi amaninzi kunye namacandelo aphumeza "umncedisi womthengi" we-DNS architecture kwaye unoxanduva lokuqwalasela imisebenzi yomncedisi we-DNS. I-BIND isetyenziswa ngokubanzi, ngakumbi kwiLinux, kwaye ihlala iyinto edumileyo yokuphunyezwa kweseva ye-DNS. Oku isigqibo ifakwe kwiiseva ezibonelela ngenkxaso indawo yeengcambu.

Kukho iindlela ezizezinye ze-BIND. Umzekelo, iPowerDNS, eza nokuhanjiswa kweLinux. Ibhalwe nguBert Hubert ovela kwinkampani yaseDatshi PowerDNS.COM kwaye igcinwe ngumthombo ovulekileyo woluntu. Kwi-2005, i-PowerDNS yaphunyezwa kwiiseva zeWikimedia Foundation. Isisombululo sikwasetyenziswa ngababoneleli bamafu amakhulu, iinkampani zonxibelelwano zaseYurophu kunye nemibutho ye-Fortune 500.

I-BIND kunye ne-PowerDNS zezinye zezona ziqhelekileyo, kodwa ayizizo iiseva ze-DNS kuphela. Kwakhona kubalulekile ukuqaphela engadityaniswanga, djbdns и dnsmasq.

Uphuhliso lweNkqubo yeGama leDomain

Kuyo yonke imbali ye-DNS, utshintsho oluninzi lwenziwe kwinkcazo yayo. Njengolunye lohlaziyo lokuqala noluphambili yongezwa UKWAZISA kunye neendlela ze-IXFR ngo-1996. Benza kube lula ukuphindaphinda i-Domain Name System yogcino-lwazi phakathi kweeseva eziphambili kunye nezizisekondari. Isisombululo esitsha senze ukuba kube lula ukuqwalasela izaziso malunga notshintsho kwiirekhodi zeDNS. Le ndlela iqinisekisa ubuni beendawo ze-DNS eziziisekondari kunye nezingundoqo, kunye ne-traffic egciniweyo - ungqamaniso lwenzeka kuphela xa kukho imfuneko, kwaye hayi ngamaxesha amiselweyo.

--Ото - URichard Mason — CC BY-SA

Ekuqaleni, inethiwekhi ye-DNS yayingafikeleleki kuluntu ngokubanzi kwaye iingxaki ezinokubakho ngokhuseleko lolwazi zazingeyona nto iphambili xa kusenziwa inkqubo, kodwa le ndlela yazenza yaziva kamva. Ngokuphuhliswa kwe-Intanethi, ubuthathaka benkqubo baqala ukusetyenziswa - umzekelo, uhlaselo olufana ne-DNS spoofing lwavela. Kule meko, i-cache yeeseva ze-DNS igcwele idatha engenawo umthombo ogunyazisiweyo, kwaye izicelo zithunyelwa kwiiseva zabahlaseli.

Ukusombulula ingxaki, kwi-DNS iphunyeziwe iisignesha ze-crypto kwiimpendulo ze-DNS (DNSSEC) - indlela evumela ukuba wakhe ikhonkco lokuthembela kwi-domain ukusuka kummandla weengcambu. Qaphela ukuba indlela efanayo yongezwa kuqinisekiso lwenginginya xa kugqithiselwa indawo ye-DNS - ibibizwa ngokuba yi-TSIG.


Ukuguqulwa okwenza kube lula ukuphindaphinda kwedatha ye-DNS kunye neengxaki zokhuseleko ezichanekileyo zamkelwe ngamandla luluntu lwe-IT. Kodwa kwabakho utshintsho olungathabathi kakuhle ekuhlaleni. Ngokukodwa, utshintsho olusuka kwi-free ukuya kumagama e-domain ahlawulweyo. Kwaye lo ngumzekelo wenye nje "yeemfazwe" kwimbali ye-DNS. Siza kuthetha ngakumbi ngoku kwinqaku elilandelayo.

Thina kwa-1cloud sinikezela ngenkonzo "Umncedisi wenyani" Ngoncedo lwayo, unokurenta kwaye uqwalasele iseva ekude yeVDS/VPS kwimizuzu embalwa.
Kananjalo babe inkqubo yobulungu kubo bonke abasebenzisi. Beka amakhonkco okuthumela kwinkonzo yethu kwaye ufumane umvuzo kubathengi abathunyelwe.

umthombo: www.habr.com