配置DNS服務(wù)器和日常管理ppt課件

1、配置配置DNS 效力器和日常管理效力器和日常管理福州大學(xué)福州大學(xué) 吳海東吳海東MCSE/MCDBA,CIWSA,MOE講師講師whd1972msnWindows Server 2019: 網(wǎng)絡(luò)根本架構(gòu)的實現(xiàn)和管理系列網(wǎng)絡(luò)根本架構(gòu)的實現(xiàn)和管理系列涉及教材：第涉及教材：第7章、第章、第8章、第章、第9章章n課程導(dǎo)入n稱號解析與DNS的作用nDNS效力實現(xiàn)與原理nDNS區(qū)域及復(fù)制nDNS效力器管理與維護nDNS疑問討論nQ&A1 課程導(dǎo)入課程導(dǎo)入n網(wǎng)絡(luò)效力訪問的多種方法nIP地址與稱號的區(qū)別能否通知我張三的號碼？讓我找找哦，不好意思，我找不到。不過，我?guī)退麊柶渌耍埳缘扰?，張三的，沒有問題

2、，我有，是878933332 稱號解析與稱號解析與DNS作用作用n稱號解析的方法n計算機稱號NetBIOSn主機稱號FQDNn稱號解析的順序n尋求本地緩存n尋求DNS效力器n尋求NetBIOS稱號解析nDNS的作用n正向解析n反向解析什么是正向搜索、反向搜索？什么是正向搜索、反向搜索？稱號空間稱號空間: training.nwtraders.msft.DNS Client1DNS Client2DNS Client3DNS Server Authorizedfor trainingForward zoneTrainingDNS Client15DNS Client2192

3、.168.2.46DNS Client37Reverse zone 1.168.192.5DNS Client16DNS Client27DNS Client3DNS Client2 = ?6 = ?3 DNS效力實現(xiàn)與原理效力實現(xiàn)與原理nDNS效力實現(xiàn)n效力器版本n靜態(tài)地址n管理員權(quán)限nDNS任務(wù)原理n域稱號空間n查詢過程：遞歸查詢，迭代查詢n根提示n轉(zhuǎn)發(fā)器n緩存n動態(tài)更新什么是域稱號空間？什么是域稱號空間？FQDN:server1.sales.south.n

4、wtraderssouthnwtraderscomsaleswesteastorgnetHost: server1遞歸查詢?nèi)绾稳蝿?wù)？遞歸查詢?nèi)绾稳蝿?wù)？Computer1Recursive query for mail1.nwtraders1A recursive query is a query made to a DNS server, in which the DNS client asks the DNS server to provide a complete answer to the query DNS server checks the forward lo

5、okup zone and cache for an answer to the queryDatabaseLocal DNS Server迭代查詢?nèi)绾稳蝿?wù)？迭代查詢?nèi)绾稳蝿?wù)？An iterative query is a query made to a DNS server in which the DNS client requests the best answer that the DNS server can provide without seeking further help from other DNS servers. The result of an iterative

6、query is often a referral to another DNS server lower in the DNS tree Computer1Local DNS ServernwtradersRoot Hint (.)Recursive query for mail1.nwtraders1Iterative QueryIterative QueryIterative QueryAsk Ask nwtradersAuthoritative Response321根提示如何任務(wù)？根提示如何任務(wù)？Root hints are DNS resource recor

7、ds stored on a DNS server that list the IP addresses for the DNS root serversmicrosoftCluster ofDNS ServersRoot HintsDNS ServerCluster of Root (.) ServerscomComputer1轉(zhuǎn)發(fā)器如何任務(wù)？轉(zhuǎn)發(fā)器如何任務(wù)？A forwarder is a DNS server designated by other internal DNS servers to forward queries for resolving external or offs

8、ite DNS domain namesComputer1nwtradersRoot Hint (.)Iterative QueryIterative QueryIterative QueryAsk Ask nwtradersAuthoritative ResponseLocal DNS ServerForwarderRecursive query for mail1.nwtraders11Recursive QueryDNS緩存如何任務(wù)？緩存如何任務(wù)？Caching is the process of temporarily storing rec

9、ently accessed information in a special memory subsystem for quicker accessWheres Client A?Client1Client2ClientAClientA is at 4Wheres Client A?ClientA is at 4Caching TableHost NameIP AddressTTLclientA.contoso.msft.428 seconds什么是動態(tài)更新？什么是動態(tài)更新？A dynamic update is the pr

10、ocess of a DNS client dynamically creating, registering, or updating its records in zones that are maintained by DNS servers that can accept and process messages for dynamic updatesDNS客戶端如何運用動態(tài)更新功能注冊和更新本人客戶端如何運用動態(tài)更新功能注冊和更新本人的資源記錄？的資源記錄？Client sends SOA query 1DNS server sends zone name and server IP

11、 address2Client verifies existing registration3DNS server responds by stating that registration does not existClient sends dynamic update to DNS server5Windows Server 2019Windows XPWindows 2000DNS ServerResourceRecords1234544 DNS區(qū)域及其復(fù)制區(qū)域及其復(fù)制n由稱號空間而來n區(qū)域的類型n規(guī)范主要n規(guī)范輔助n存根區(qū)域n區(qū)域復(fù)制n作用n類型n實現(xiàn)什么是什么是DNS區(qū)域區(qū)域Nwt

12、radersWestSouthSupportSalesTrainingNorthA zone is a portion of the DNS database that contains the resource records with the owner names that belong to the contiguous portion of the DNS namespace區(qū)域傳送如何任務(wù)？區(qū)域傳送如何任務(wù)？Secondary ServerPrimary andMaster ServerSOA query for a zoneSOA query answeredIXFR or AX

13、FR query for a zoneIXFR or AXFR query answered(zone transfer)A DNS zone transfer is the synchronization of authoritative DNS zone data between DNS servers1234DNS通知機制通知機制Secondary ServerPrimary andMaster ServerDNS notifyZone transferA DNS notify is an update to the original DNS protocol specification

14、 that permits notification to secondary servers when zone changes occurSource ServerDestination Server1234Resource record is updatedSOA serial number is updated5 DNS效力器管理與維護效力器管理與維護n生存時間n老化與清理n測試DNS效力器配置n性能監(jiān)視什么是老化與清理？什么是老化與清理？ParameterDescriptionExampleNo Refresh IntervalThe time period when the DNS

15、 server does not accept refresh attempts7-days (default)Refresh IntervalThe time period when the DNS server does accept refresh attempts7-days (default)Aging is the process that determines whether a stale DNS resource record should be removed from the DNS database Scavenging is the process of cleani

16、ng and removing outdated or extinct names data from the DNS databaseA refresh attempt is the process of a computer requesting a refresh on its DNS record老化與清理是如何任務(wù)的？老化與清理是如何任務(wù)的？Jan 1Jan 15Jan 8ScavengeNo-RefreshintervalRefreshintervalTime stampedAging7-days7-days6 DNS的疑問討論的疑問討論n什么是DNS循環(huán)復(fù)用n作為一種負載平衡的機制來分擔(dān)網(wǎng)絡(luò)資源的訪問載荷。當(dāng)滿足查詢要求的資源記錄有多條時，可以用循環(huán)的方式把這些記錄前往給客戶機。n循環(huán)復(fù)用的作用n負載平衡n缺點并舉n如何實現(xiàn)循環(huán)復(fù)用nDEMO6 DNS的疑問討論的疑問討論n實現(xiàn)DNS循環(huán)復(fù)用n對于多宿主稱號，本地子網(wǎng)優(yōu)先取代循環(huán)復(fù)用。n假設(shè)啟動了循環(huán)復(fù)用，作為對呼應(yīng)列表進展排序的一種輔選方法，可以運用循環(huán)復(fù)用來循環(huán)運用各資源記錄。n如何禁用循環(huán)