A cikin wannan labarin mai taken Sanya sabobin Linux, mai amfani zai iya sanin yadda ake aiwatar da wannan aikin, yakamata kawai a ɗauke shi ta cikin sauƙi da fahimta abun ciki.
Sanya sabobin Linux
Gudanar da daidaitawa da shigar da sabobin Linux, DNS wanda ke tsaye don Tsarin Sunan Domain, yana nufin tsarin sunaye na musamman don tsarin, ana kiran aikinsa da uwar garken DNS, wanda ke kaiwa zuwa adireshin IP da mai amfani ya zaɓa.
Yana da tsari mai mahimmanci kuma makasudinsa shine kula da Intanet, sabis ne na asali akan sabobin.
Daga wannan sakin layi, muna sanar da mai amfani duk abin da ke da alaƙa da daidaitawa da shigar da sabar Linux.
Fayil / etc / runduna
A cikin daidaita sabobin Linux, zaku san fayil ɗin mai masaukin mallaka na kwamfuta, tsarin aiki yana amfani da shi don adana bayanan da ke tsakanin yankin Intanet da adiresoshin IP, yana nufin ɗayan hanyoyin daban -daban waɗanda tsarin aiki ke amfani da su tare da ra'ayin na warware sunayen yanki, teburin da aka sani da / sauransu / runduna, na fayiloli ne akan tsarin Linux.
Wato, idan mai amfani ba shi da sabar DNS, ko ya gaza hakan, ba a samun sabar DNS, fayil ɗin /etc / runduna suna da ikon fassara adireshin IP zuwa sunaye ta amfani da fayil ɗin sa.
Wannan yana nufin cewa tsarin yana tuntuɓar fayil ɗin kafin tafiya zuwa uwar garken DNS, kuma da zarar an sami yankin, ana iya fassara shi ba tare da zuwa uwar garken DNS ba.
Ana samunsa ta hanyar gyara kamar yadda aka nuna a ƙasa: 127.0.0.1 google.com. Sannan dole ne ku shiga mashigar yanar gizo, rubuta google.com kuma kuna iya ganin sakamakon, idan kuna da sabar Apache a cikin tsarin, kuma an daidaita sabar gida, don ku iya duba shafin ma'aunin uwar garken na gida, maimakon nuna shafin Google.
Muna ba da shawarar wannan labarin mai ban sha'awa da ya shafi kwamfuta: Nau'in sabobin.
Kuna da zaɓi wanda zaku iya matsar da google.com zuwa wani adireshin IP daban da aka samu ko'ina kuma ku lura da sakamakon don tabbatarwa.
Aikin wannan fayil ɗin shine fassara adireshin IP daban -daban zuwa sunaye, duk da haka, akan cibiyar sadarwar da aka haɗa inda sabar da aka haɗa take.
Sunan yanki
Idan kun ziyarci gidan yanar gizo, dole ne ku rubuta FQDN, wanda ke nufin cikakken sunan yankin, ko rashin nasarar hakan, sunan yankin kamar haka: likegeeks.com ko www.google.com.
Dole ne a san cewa kowane yanki ya ƙunshi sassan yanki, kuma ma'anar ita ce ke da alhakin raba waɗannan abubuwan.
Rubutun com, yana nufin ɓangaren yanki na matakin farko; Google shine bangaren yanki na mataki na biyu, yayin da www shine bangaren yanki na mataki na uku.
Gaskiyar ita ce lokacin da kuka ziyarci kowane gidan yanar gizon, mai binciken yana shiru yana ƙara lokaci zuwa ƙarshe, ba a bayyane, don haka ana nuna ainihin yankin www.google.com, dole ne a tuna cewa lokacin yana bayyana bayan. Com , a wannan lokacin ana kiranta tushen yankin.
Mutane da yawa za su yi tambaya, me yasa aka ƙara wannan yankin tushen ko maki, kawai saboda wannan wurin ana amfani da wannan sunan ta hanyar sabobin suna, akwai kusan sabobin sunan tushen a duniya guda 13, cewa aikin su shine kwakwalwar intanet .
Tushen sunaye masu taken suna kamar haka: a.root-server.net, b.root-server.net.
Sunayen yanki na matakin farko (TLD)
Yakamata a bayyana cewa an kasu kashi Babban Mataki (TLDs) zuwa nau'ikan da suka danganci yanki ko abubuwan aiki.
Akwai kusan manyan manyan yankuna sama da 800 akan yanar gizo, muna nuna su a ƙasa:
Yankuna na matakin farko kamar: org, .com, .net. Edu, da sauransu.
Ƙungiyoyin babban matakin ƙasa, wato: .us, .ca, da wasu da yawa, na lambobin ƙasar, a wannan yanayin Amurka da Kanada.
Sabbin yankuna masu girman kai daga samfura kamar: Linux, .Microsoft, .CompanyNamey.
Ƙungiyoyin manyan matakan ababen hawa azaman yanki.
Reshen yanki
A cikin waɗannan lokuta, da zarar kun shiga gidan yanar gizo, misali google.com, imel ɗin yanki ne na google.com.
Sabbin sunan mail.google.com kawai, sun san wanzuwar duk rundunonin da ke ƙarƙashinsa, dalilin da Google ya gane a cikin yanayin cewa akwai yanki ko babu, sunan sabobin a tushen da suke da shi. ban sani ba game da wannan.
Nau'in sabobin DNS
A cikin yanayin sarrafa kwamfuta, akwai nau'ikan sabobin DNS guda uku, kamar:
- Sabis na DNS na farko sune waɗanda ke da fayilolin tsarin yanki kuma suna amsa tambayoyin DNS.
- Sabis na sakandare na DNS sune waɗanda ke aiki azaman madadin kuma suna da alhakin rarraba kaya; sabobin na farko sun san cewa akwai manyan sunaye na sakandare ta hanyar da suke aika sabuntawa.
- Sabunta uwar garken DNS, aikin waɗannan kawai yana ɓoye duk amsoshin da aka bayar daga DNS, don kada uwar garken DNS na farko ko sakandare ta sake tambaya.
- Ana iya sarrafa shi don tsarin don yin ayyuka cikin sauƙi, kamar sabar uwar garke.
Sanya uwar garken DNS na Linux
A cikin kasuwa akwai fakitoci daban -daban na Linux waɗanda ke ba da damar aiwatar da ayyukan DNS, duk da haka, za mu yi magana game da sabar DNS BIND, ana amfani da ita a yawancin sabobin DNS a duk sassan duniya.
A cikin yanayin cewa mai amfani yana amfani da rarraba wanda ya dogara da Red Hat, kamar CentOs, hanyar shigar da kunshin shine kamar haka: $ dnf -y install bind.
Idan kuna nufin tsarin Debian kamar Ubuntu: $ apt-get install bind9.
A cikin daidaita sabobin Linux, yana nuna mai karatu lokacin da aka kammala aikin shigarwa, ana iya fara sabis ɗin da yin aiki don yin daidai lokacin da aka fara: $ systemctl fara mai suna; $ systemctl kunna suna.
Kafa BIND
An bayyana cewa ana iya samun daidaiton sabis ɗin a cikin fayil /etc/named.conf.
Akwai wasu maganganun da BIND ke amfani da su a cikin fayil kamar:
- Zaɓuɓɓuka: Wanne ake amfani da shi don daidaita BIND na duniya.
- Shiga: Ana iya shiga, kuma ana iya yin watsi da shi.
- Yanki: An kira shi yankin DNS.
- Haɗa: An yi amfani da shi don haɗa wani fayil a cikin zaɓi mai suna.conf.
- Kuna iya gani daga bayanin zaɓuɓɓuka, littafin aikin da aka bayar don BIND shine jagorar: / var / mai suna.
- Yakamata a tuna cewa ayyana yankin yana ba da damar ƙuntata yankin DNS, kamar yankin google.com, wanda kuma yana da ƙananan yankuna, sanannen mail.google.com, da kuma analy.google.com, bugu da kari daga wasu ƙananan yankuna.
- Yana da mahimmanci a lura cewa kowane ɗayan waɗannan ukun: yanki da ƙananan yankuna, yana da yankin da bayanin yankin ya bayyana.
Bayyana yanki na farko
Da zarar mun san nau'ikan sabobin DNS waɗanda ke wanzu kamar sabobin DNS na farko da na sakandare, kazalika da na cache.
Sabis na farko da na sakandare ana ɗaukar su masu iko a cikin martanin su, wanda ya bambanta da sabar uwar garke.
Yanzu, don ƙaddara yankin farko a cikin fayil ɗin, ana iya amfani da mai zuwa: zone «likegeeks.com» {; irin master; fayil likegeeks.com.db; }}; Ba.
Don ilimin masu amfani, fayil ɗin da ke da bayanan bayanan da suka dace da yankin da / var / sunan mai suna yake, saboda shine littafin aiki inda zaɓuɓɓukan suke.
A cikin daidaita sabobin Linux, yana nuna cewa dole ne a tuna cewa software na uwar garke ko kwamitin karɓar bakuncin yana ƙirƙirar wannan fayil ɗin ta atomatik tare da sunan, don haka idan yankin shine example.org, za a sanya sunan fayil / var / mai suna / example.org.db.
A cikin yanayin da nau'in ya bayyana a matsayin maigida, yana nufin cewa yana cikin yanki na farko.
Ma'anar wani yanki na sakandare
Ma'anar yanki na biyu yayi kamanceceniya da abin da ake kira yanki na farko, yana da 'yan gyare -gyare kaɗan, bari mu gani: zone «likegeeks.com» {; irin bawa; masters Adireshin IP na Nameserver anan; ; fayil likegeeks.com.db da};.
Yankin a yankuna na sakandare yayi daidai da na yankuna na farko, dole ne ya zama nau'in bawa, yana nufin cewa shiyya ce ta sakandare, zaɓin maigida yana aiki don jera adireshin IP daban -daban na sabar sunan farko, don kammalawa yana iya ba da rahoton cewa fayil ɗin ita ce hanyar shigar fayilolin yanki na farko.
Ƙayyade yankin ɓoye
A cikin daidaita sabobin Linux, muna nuna muku ma'anar wuraren ajiyar kayan ajiya, ana iya cewa wannan yanayin ya zama dole, duk da haka, bai kamata ya cika yana da yankin ɓoye ba, wanda ke taimakawa rage girman tambayoyin da aka yi wa sabar DNS.
- Don ayyana menene yankin caching, ana buƙatar sassan yanki uku, tare da masu zuwa a cikin tsari na farko:
- zone ". IN {rubuta alamar; fayil "root.hint"; }}; Ba.
- A cikin na farko akwai lokaci, saboda sune tushen sunaye, nau'in da aka nuna azaman: ambato; yana nufin samun dama a cikin yankin cache, yayin fayil ɗin "root.hints"; yana nufin fayil ɗin da ke da tushen sabobin.
- Ana iya samun sabon tushen sunan mai amfani daga http://www.internic.net/zones/named.root.
A cikin shiyya ta biyu an bayyana shi tare da fayil ɗin da aka nuna a ƙasa: /etc / named.rfc1912.zones, Bugu da kari, yana da /etc/named.conf, ta hanyar “hada” umarnin da aka saka ta tsoho, kamar:
- Yankin "localhost" IN {type master; fayil "localhost.db"; }}; Ba.
- A ƙarshe a cikin yanki na uku ana samun kishiyar binciken don localhost.
- Yanki "0.0.127.in-addr.arpa" A {Type master; Fayil "127.0.0.rev"; }; -.
- Yana da mahimmanci a lura cewa sanya waɗannan yankuna uku a /etc/named.conf, suna taimakawa tsarin yin aiki azaman uwar garken DNS, dole ne a rubuta bayanan fayilolin a cikin masu zuwa kamar likeeeks.com.db, localhost. db da 127.0.0.rev.
Nau'in rikodin DNS
Fayilolin da ke cikin rumbun bayanai iri ne na rikodi kamar: SOA, NS, A, PTR, MX, CNAME, da TXT.
Na gaba, mun sadaukar da kanmu don ambaton kowane nau'in rikodin, zamu fara da:
SOA: fara rikodin iko
Nau'in rikodin SOA ya lissafa shigarwar DNS don rukunin tare da masu zuwa: example.com. 86400 A SOA ns1.example.com. mail.example.com. (2017012604; serial 86400; wartsakewa, daƙiƙa 7200; sake gwadawa, sakanni 3600000; ƙare, sakanni 86400; ƙarami, sakanni ).
Ana iya ganin cewa layin farko yana farawa da yankin domain.com. kuma ya ƙare tare da lokaci, daidai yake da ma'anar yankin a cikin fayil /etc/named.conf.
Ya kamata a yi la’akari da cewa fayilolin da ke cikin tsarin DNS suna da tsauri.
A cikin wannan labarin da ke daidaita sabobin Linux, za mu nuna muku waɗannan sharuɗɗan:
- IN yana tsaye don rijistar Intanet.
- SOA, fassara farkon rikodin iko.
- Ns1.example.com., Yana nufin sabar sunan yankin.
- Mail.host.com.es, shine imel ɗin @, an maye gurbin shi da wani lokaci, kuma an sanya wani lokacin don ƙarewa.
A cikin layi na 2, kuna da lambar serial da ake amfani da ita don sanar da uwar garken sunan lokacin da aka sabunta fayil ɗin, wanda ke nufin cewa lokacin da aka yi gyara ga bayanan yankin, dole ne a ƙara wannan. Lambar, tana nufin lambar serial wanda ke da tsarin YYYYMMDDxx yana sanya xx kuma farawa da 00.
Layi na 3, yana nufin mitar da ake sabunta su a cikin daƙiƙa, yana nuna mitar cewa dole ne sabobin DNS na biyu su tuntubi babban sabar, don fara bincike don sabuntawa.
A cikin layi na 4, yana nufin ƙimar kuɗi a cikin daƙiƙa, shine lokacin da ake ɗauka don sabar DNS na sakandare bayan yayi ƙoƙarin haɗawa da sabar DNS na farko, kuma ba zai iya isa gare ta ba.
Layi na 5, game da manufofin ƙarewa ne, idan uwar garken na biyu ba zai iya haɗawa da sabar ta farko don aiwatar da sabuntawa ba, to, dole ne ku soke ƙimar bayan adadin da aka nuna na sakanni.
A ƙarshe, layi na 6, yana bayyana sabobin caching waɗanda ba za su iya haɗawa da sabar DNS na farko ba, suna jira kafin shigowar ta ƙare, ita ce layin da ke kula da iyakance lokacin jira.
NS: Sunan bayanan uwar garke
Waɗannan bayanan za su iya amfani da sabar NS don yin cikakken bayani kan sunayen masu amfani don takamaiman yanki, ana iya rubuta bayanan NS ta hanyoyi masu zuwa:
- IN NS ns1.example.com. IN NS ns2.example.com.
- Ba lallai ne ku sami rikodin 2 NS ba, duk da haka, ya fi dacewa a sami madadin sunaye.
- A da AAAA: Bayanan adireshi.
- Dole ne ku yi rijistar A, ita ce ke kula da yin taswirar sunan mai masaukin zuwa adireshin IP: goyan baya A A 192.168.1.5. A cikin yanayin cewa mai amfani yana da mai masauki a suppor.example.com a adireshin IP 192.168.1.5, ana iya rubuta shi kamar yadda aka ambata a baya.
PTR: bayanan rikodin
Ana amfani da rikodin PTR don yin ƙudurin suna sabanin haka, yana dawo da adireshin IP, kuma yana dawo da sunan mai masaukin. Shi ne cikakken akasin abin da rijistar A ke aiwatarwa; 192.168.1.5 A PTR support.example.com. a wannan yanayin, ana sanya cikakken sunan mai masaukin baki ta hanyar sanya cikakken tasha.
MX: Rikodin musayar imel
Wannan nau'in rikodin MX yana nufin fayiloli akan sabar mail, kamar haka: example.com. A cikin wasiƙar MX 10, ana iya ganin yankin ya ƙare tare da lokaci, lambar 10 tana nufin mahimmancin sabar wasiƙa, a cikin yanayin cewa akwai sabar wasiƙa daban -daban, ƙaramin lamba yana nufin yana da ɗan dacewa.
CNAME: Rikodin Sunan Canonical
Nau'in bayanan CNAME sune waɗanda ke ba da damar kai tsaye ga sunayen mai masaukin baki.
Misali, an nuna kasancewar haka ne cewa kuna da rukunin yanar gizon da ke da sunan mai masaukin kowane nau'in -bignameis.example.com, saboda tsarin sabar yanar gizo ce, kuna da zaɓi na ƙirƙirar www ko CNAME wanda aka fi sani da rikodin ga mai gida.
Don ƙirƙirar rikodin CNAME kuna iya amfani da sunan www.example.com:
- komai-bignameis A cikin 192.168.1.5.
- www IN CNAME komai-bignameis.
Layin farko yana ba da bayani ga uwar garken DNS game da wurin da ake kira alias, yayin da layin na biyu ke bayyana laƙabin da ke nuna www.
Bayanan TXT
Duk wani nau'in rubutu ana iya sanya shi a cikin bayanan TXT, kamar bayanin lamba ko wasu bayanan da mai amfani yake so mutane su gane lokacin tuntubar uwar garken DNS.
Hakanan, kuna da zaɓi na amfani da rikodin RP, don sanya bayanin lamba: example.com. A TXT »BAYANIN KA YA SHIGA NAN».
Darajar TTL ta DNS
A cikin wannan ɓangaren /etc/named.conf a saman ƙarshen akwai shigar $ TTL, an yi niyyar sanar da BIND game da rayuwar kowane rikodin.
Ana ɗaukar ƙimar a cikin daƙiƙa kamar sakan 14400 (awanni 4), sabobin DNS sannan ku ɓoye yankinku na tsawon awanni huɗu sannan ku sake tambayar uwar garken DNS.