配置DNS服务器和日常管理

配置DNS服务器和日常管理,福州大学吴海东MCSE/MCDBA,CIWSA,MOE讲师whd1972,WindowsServer2003:网络基本架构的实现和管理系列,涉及教材：第7章、第8章、第9章,2,今日议题,课程导入名称解析与DNS的作用DNS服务实现与原理DNS区域及复制DNS服务器管理与维护DNS疑难探讨Q&A,3,1课程导入,网络服务访问的多种方法IP地址与名称的区别,能否告诉我张三的电话号码？,让我找找哦，不好意思，我找不到。不过，我帮你问其他人，请稍等,哦，张三的电话，没有问题，我有，是87893333,4,2名称解析与DNS作用,名称解析的方法计算机名称NetBIOS主机名称FQDN名称解析的顺序寻求本地缓存寻求DNS服务器寻求NetBIOS名称解析DNS的作用正向解析反向解析,5,什么是正向搜索、反向搜索？,名称空间:training.nwtraders.msft.,DNSClient1,DNSClient2,DNSClient3,DNSServerAuthorizedfortraining,DNSClient2=?,6=?,6,3DNS服务实现与原理,DNS服务实现服务器版本静态地址管理员权限DNS工作原理域名称空间查询过程：递归查询，迭代查询根提示转发器缓存动态更新,7,什么是域名称空间？,RootDomain,Subdomains,Second-LevelDomain,Top-LevelDomain,FQDN:,south,nwtraders,com,sales,west,east,org,net,Host:server1,8,递归查询如何工作？,ArecursivequeryisaquerymadetoaDNSserver,inwhichtheDNSclientaskstheDNSservertoprovideacompleteanswertothequery,DNSservercheckstheforwardlookupzoneandcacheforananswertothequery,Database,LocalDNSServer,9,迭代查询如何工作？,AniterativequeryisaquerymadetoaDNSserverinwhichtheDNSclientrequeststhebestanswerthattheDNSservercanprovidewithoutseekingfurtherhelpfromotherDNSservers.TheresultofaniterativequeryisoftenareferraltoanotherDNSserverlowerintheDNStree,Computer1,LocalDNSServer,RootHint(.),.com,R,1,IterativeQuery,IterativeQuery,IterativeQuery,A,A,AuthoritativeResponse,3,2,1,10,根提示如何工作？,RoothintsareDNSresourcerecordsstoredonaDNSserverthatlisttheIPaddressesfortheDNSrootservers,microsoft,ClusterofDNSServers,RootHints,DNSServer,ClusterofRoot(.)Servers,com,Computer1,11,转发器如何工作？,AforwarderisaDNSserverdesignatedbyotherinternalDNSserverstoforwardqueriesforresolvingexternaloroffsiteDNSdomainnames,Computer1,RootHint(.),.com,IterativeQuery,IterativeQuery,IterativeQuery,A,A,AuthoritativeResponse,LocalDNSServer,Forwarder,R,1,1,RecursiveQuery,12,DNS缓存如何工作？,Cachingistheprocessoftemporarilystoringrecentlyaccessedinformationinaspecialmemorysubsystemforquickeraccess,WheresClientA?,Client1,Client2,ClientA,ClientAisat4,WheresClientA?,ClientAisat4,13,什么是动态更新？,AdynamicupdateistheprocessofaDNSclientdynamicallycreating,registering,orupdatingitsrecordsinzonesthataremaintainedbyDNSserversthatcanacceptandprocessmessagesfordynamicupdates,14,DNS客户端如何使用动态更新功能注册和更新自己的资源记录？,ClientsendsSOAquery,1,DNSserversendszonenameandserverIPaddress,2,Clientverifiesexistingregistration,3,DNSserverrespondsbystatingthatregistrationdoesnotexist,ClientsendsdynamicupdatetoDNSserver,5,WindowsServer2003,WindowsXP,Windows2000,DNSServer,ResourceRecords,4,15,4DNS区域及其复制,由名称空间而来区域的类型标准主要标准辅助存根区域区域复制作用类型实现,16,什么是DNS区域,AzoneisaportionoftheDNSdatabasethatcontainstheresourcerecordswiththeownernamesthatbelongtothecontiguousportionoftheDNSnamespace,17,区域传递如何工作？,SecondaryServer,PrimaryandMasterServer,SOAqueryforazone,SOAqueryanswered,IXFRorAXFRqueryforazone,IXFRorAXFRqueryanswered(zonetransfer),ADNSzonetransferisthesynchronizationofauthoritativeDNSzonedatabetweenDNSservers,1,2,3,4,18,DNS通知机制,SecondaryServer,PrimaryandMasterServer,DNSnotify,Zonetransfer,ADNSnotifyisanupdatetotheoriginalDNSprotocolspecificationthatpermitsnotificationtosecondaryserverswhenzonechangesoccur,SourceServer,DestinationServer,1,2,3,4,Resourcerecordisupdated,SOAserialnumberisupdated,19,5DNS服务器管理与维护,生存时间老化与清理测试DNS服务器配置性能监视,20,什么是老化与清理？,AgingistheprocessthatdetermineswhetherastaleDNSresourcerecordshouldberemovedfromtheDNSdatabase,ScavengingistheprocessofcleaningandremovingoutdatedorextinctnamesdatafromtheDNSdatabase,ArefreshattemptistheprocessofacomputerrequestingarefreshonitsDNSrecord,21,老化与清理是如何工作的？,Jan1,Jan15,Jan8,Scavenge,No-Refreshinterval,Refreshinterval,Timestamped,Aging,7-days,7-days,22,6DNS的疑难探讨,什么是DNS循环复用作为一种负载平衡的机制来分担网络资源的访问载荷。当满足查询要求的资源记录有多条时，可以用循环的方式把这些记录返回给客户机。循环复用的作用负载平衡故障并举如何实现循环复用DEMO,23,6DNS的疑难探讨,实现DNS循环复用对于多宿主名称，本地子网优先取代循环复用。若启动了循环复用，作为对响应列表进行排序的一种辅选方法，可以使用循环复用来循环使用各资源记录。如何禁用循环复用位置：HK_L_MSYSTEMCurrentControlS