1、配置配置DNS 效力器和日常管理效力器和日常管理福州大學福州大學 吳海東吳海東MCSE/MCDBA,CIWSA,MOE講師講師whd1972msnWindows Server 2019: 網絡根本架構的實現和管理系列網絡根本架構的實現和管理系列涉及教材：第涉及教材：第7章、第章、第8章、第章、第9章章n課程導入n稱號解析與DNS的作用nDNS效力實現與原理nDNS區域及復制nDNS效力器管理與維護nDNS疑問討論nQ&A1 課程導入課程導入n網絡效力訪問的多種方法nIP地址與稱號的區別能否通知我張三的號碼？讓我找找哦，不好意思，我找不到。不過，我幫他問其他人，請稍等哦，張三的，沒有問題

2、，我有，是878933332 稱號解析與稱號解析與DNS作用作用n稱號解析的方法n計算機稱號NetBIOSn主機稱號FQDNn稱號解析的順序n尋求本地緩存n尋求DNS效力器n尋求NetBIOS稱號解析nDNS的作用n正向解析n反向解析什么是正向搜索、反向搜索？什么是正向搜索、反向搜索？稱號空間稱號空間: training.nwtraders.msft.DNS Client1DNS Client2DNS Client3DNS Server Authorizedfor trainingForward zoneTrainingDNS Client15DNS Client2192

3、.168.2.46DNS Client37Reverse zone 1.168.192.5DNS Client16DNS Client27DNS Client3DNS Client2 = ?6 = ?3 DNS效力實現與原理效力實現與原理nDNS效力實現n效力器版本n靜態地址n管理員權限nDNS任務原理n域稱號空間n查詢過程：遞歸查詢，迭代查詢n根提示n轉發器n緩存n動態更新什么是域稱號空間？什么是域稱號空間？FQDN:server1.sales.south.n

4、wtraderssouthnwtraderscomsaleswesteastorgnetHost: server1遞歸查詢如何任務？遞歸查詢如何任務？Computer1Recursive query for mail1.nwtraders1A recursive query is a query made to a DNS server, in which the DNS client asks the DNS server to provide a complete answer to the query DNS server checks the forward lo

5、okup zone and cache for an answer to the queryDatabaseLocal DNS Server迭代查詢如何任務？迭代查詢如何任務？An iterative query is a query made to a DNS server in which the DNS client requests the best answer that the DNS server can provide without seeking further help from other DNS servers. The result of an iterative

6、query is often a referral to another DNS server lower in the DNS tree Computer1Local DNS ServernwtradersRoot Hint (.)Recursive query for mail1.nwtraders1Iterative QueryIterative QueryIterative QueryAsk Ask nwtradersAuthoritative Response321根提示如何任務？根提示如何任務？Root hints are DNS resource recor

7、ds stored on a DNS server that list the IP addresses for the DNS root serversmicrosoftCluster ofDNS ServersRoot HintsDNS ServerCluster of Root (.) ServerscomComputer1轉發器如何任務？轉發器如何任務？A forwarder is a DNS server designated by other internal DNS servers to forward queries for resolving external or offs

8、ite DNS domain namesComputer1nwtradersRoot Hint (.)Iterative QueryIterative QueryIterative QueryAsk Ask nwtradersAuthoritative ResponseLocal DNS ServerForwarderRecursive query for mail1.nwtraders11Recursive QueryDNS緩存如何任務？緩存如何任務？Caching is the process of temporarily storing rec

9、ently accessed information in a special memory subsystem for quicker accessWheres Client A?Client1Client2ClientAClientA is at 4Wheres Client A?ClientA is at 4Caching TableHost NameIP AddressTTLclientA.contoso.msft.428 seconds什么是動態更新？什么是動態更新？A dynamic update is the pr

10、ocess of a DNS client dynamically creating, registering, or updating its records in zones that are maintained by DNS servers that can accept and process messages for dynamic updatesDNS客戶端如何運用動態更新功能注冊和更新本人客戶端如何運用動態更新功能注冊和更新本人的資源記錄？的資源記錄？Client sends SOA query 1DNS server sends zone name and server IP

11、 address2Client verifies existing registration3DNS server responds by stating that registration does not existClient sends dynamic update to DNS server5Windows Server 2019Windows XPWindows 2000DNS ServerResourceRecords1234544 DNS區域及其復制區域及其復制n由稱號空間而來n區域的類型n規范主要n規范輔助n存根區域n區域復制n作用n類型n實現什么是什么是DNS區域區域Nwt

12、radersWestSouthSupportSalesTrainingNorthA zone is a portion of the DNS database that contains the resource records with the owner names that belong to the contiguous portion of the DNS namespace區域傳送如何任務？區域傳送如何任務？Secondary ServerPrimary andMaster ServerSOA query for a zoneSOA query answeredIXFR or AX

13、FR query for a zoneIXFR or AXFR query answered(zone transfer)A DNS zone transfer is the synchronization of authoritative DNS zone data between DNS servers1234DNS通知機制通知機制Secondary ServerPrimary andMaster ServerDNS notifyZone transferA DNS notify is an update to the original DNS protocol specification

14、 that permits notification to secondary servers when zone changes occurSource ServerDestination Server1234Resource record is updatedSOA serial number is updated5 DNS效力器管理與維護效力器管理與維護n生存時間n老化與清理n測試DNS效力器配置n性能監視什么是老化與清理？什么是老化與清理？ParameterDescriptionExampleNo Refresh IntervalThe time period when the DNS

15、 server does not accept refresh attempts7-days (default)Refresh IntervalThe time period when the DNS server does accept refresh attempts7-days (default)Aging is the process that determines whether a stale DNS resource record should be removed from the DNS database Scavenging is the process of cleani

16、ng and removing outdated or extinct names data from the DNS databaseA refresh attempt is the process of a computer requesting a refresh on its DNS record老化與清理是如何任務的？老化與清理是如何任務的？Jan 1Jan 15Jan 8ScavengeNo-RefreshintervalRefreshintervalTime stampedAging7-days7-days6 DNS的疑問討論的疑問討論n什么是DNS循環復用n作為一種負載平衡的機制來分擔網絡資源的訪問載荷。當滿足查詢要求的資源記錄有多條時，可以用循環的方式把這些記錄前往給客戶機。n循環復用的作用n負載平衡n缺點并舉n如何實現循環復用nDEMO6 DNS的疑問討論的疑問討論n實現DNS循環復用n對于多宿主稱號，本地子網優先取代循環復用。n假設啟動了循環復用，作為對呼應列表進展排序的一種輔選方法，可以運用循環復用來循環運用各資源記錄。n如何禁用循環