配置DNS服务器和日常管理.ppt
配置配置DNS DNS 服务器和日常管理服务器和日常管理福州大学 吴海东MCSE/MCDBA,CIWSA,MOE讲师Windows Server 2003:Windows Server 2003:网络基本架构的实现和管理系列网络基本架构的实现和管理系列涉及教材：第涉及教材：第77章、第章、第88章、第章、第99章章今日议题今日议题1.课程导入2.名称解析与DNS的作用3.DNS服务实现与原理4.DNS区域及复制5.DNS服务器管理与维护6.DNS疑难探讨7.Q&A1 1 课程导入课程导入n网络服务访问的多种方法nIP地址与名称的区别能否告诉我张三的电话号码？让我找找哦，不好意思，我找不到。不过，我帮你问其他人，请稍等哦，张三的电话，没有问题，我有，是878933332 2 名称解析与名称解析与DNSDNS作用作用n名称解析的方法n计算机名称NetBIOSn主机名称FQDNn名称解析的顺序n寻求本地缓存n寻求DNS服务器n寻求NetBIOS名称解析nDNS的作用n正向解析n反向解析什么是正向搜索、反向搜索？什么是正向搜索、反向搜索？名称空间名称空间:training.nwtraders.msft.DNS Client1DNS Client2DNS Client3DNS Server Authorizedfor trainingForward zoneTrainingDNS Client1DNS Client1192.168.2.45192.168.2.45DNS Client2DNS Client2192.168.2.46192.168.2.46DNS Client3DNS Client3192.168.2.47192.168.2.47Reverse zone 1.168.192.in-addr.arpa192.168.2.45192.168.2.45DNS Client1DNS Client1192.168.2.46192.168.2.46DNS Client2DNS Client2192.168.2.47192.168.2.47DNS Client3DNS Client3DNS Client2=?192.168.2.46=?3 DNS3 DNS服务实现与原理服务实现与原理nDNS服务实现n服务器版本n静态地址n管理员权限nDNS工作原理n域名称空间n查询过程：递归查询，迭代查询n根提示n转发器n缓存n动态更新什么是域名称空间？什么是域名称空间？Root DomainRoot DomainSubdomainsSubdomainsSecond-Level DomainSecond-Level DomainTop-Level DomainTop-Level DomainFQDN:southnwtraderscomsaleswesteastorgnetHost:server1递归查询如何工作？递归查询如何工作？Computer1Recursive query for 172.16.64.11A recursive query is a query made to a DNS server,in which the DNS client asks the DNS server to provide a complete answer to the query DNS server checks the forward lookup zone and cache for an answer to the queryDatabaseLocal DNS Server迭代查询如何工作？迭代查询如何工作？An iterative query is a query made to a DNS server in which the DNS client requests the best answer that the DNS server can provide without seeking further help from other DNS servers.The result of an iterative query is often a referral to another DNS server lower in the DNS tree Computer1Local DNS ServerRoot Hint(.).comRecursive query for Iterative QueryIterative QueryIterative QueryAAuthoritative Response321根提示如何工作？根提示如何工作？Root hints are DNS resource records stored on a DNS server that list the IP addresses for the DNS root serversmicrosoftCluster ofDNS ServersRoot HintsDNS ServerCluster of Root(.)ServerscomComputer1转发器如何工作？转发器如何工作？A forwarder is a DNS server designated by other internal DNS servers to forward queries for resolving external or offsite DNS domain namesComputer1Root Hint(.).comIterative QueryIterative QueryIterative QueryAAuthoritative ResponseLocal DNS ServerForwarderRecursive query for Recursive QueryDNSDNS缓存如何工作？缓存如何工作？Caching is the process of temporarily storing recently accessed information in a special memory subsystem for quicker accessWheres Client A?Client1Client2ClientAWheres Client A?Caching TableHost NameIP AddressTTLclientA.contoso.msft.clientA.contoso.msft.192.168.8.44192.168.8.4428 seconds28 seconds什么是动态更新？什么是动态更新？A dynamic update is the process of a DNS client dynamically creating,registering,or updating its records in zones that are maintained by DNS servers that can accept and process messages for dynamic updatesDNSDNS客户端如何使用动态更新功能注册和更新自己客户端如何使用动态更新功能注册和更新自己的资源记录？的资源记录？Client sends SOA query 1DNS server sends zone name and server IP address2Client verifies existing registration3DNS server responds by stating that registration does not existClient sends dynamic update to DNS server5Windows Server 2003Windows XPWindows 2000DNS ServerResourceRecords1234544 DNS4 DNS区域及其复制区域及其复制n由名称空间而来n区域的类型n标准主要n标准辅助n存根区域n区域复制n作用n类型n实现什么是什么是DNSDNS区域区域NwtradersWestSouthSupportSalesTrainingNorthA zone is a portion of the DNS database that contains the resource records with the owner names that belong to the contiguous portion of the DNS namespace区域传递如何工作？区域传递如何工作？Secondary ServerPrimary andMaster ServerSOA query for a zoneSOA query answeredIXFR or AXFR query for a zoneIXFR or AXFR query answered(zone transfer)A DNS zone transfer is the synchronization of authoritative DNS zone data between DNS servers1234DNSDNS通知机制通知机制Secondary ServerPrimary andMaster ServerDNS notifyZone transferA DNS notify is an update to the original DNS protocol specification that permits notification to secondary servers when zone changes occurSource ServerDestination Server1234Resource record is updatedSOA serial number is updated5 DNS5 DNS服务器管理与维护服务器管理与维护n生存时间n老化与清理n测试DNS服务器配置n性能监视什么是老化与清理？什么是老化与清理？ParameterDescriptionExampleNo Refresh IntervalThe time period when the The time period when the DNS server DNS server does notdoes not accept accept refresh attemptsrefresh attempts7-days 7-days(default)(default)Refresh IntervalThe time period when the The time period when the DNS server DNS server does does accept accept refresh attemptsrefresh attempts7-days 7-days(default)(default)Aging is the process that determines whether a stale DNS resource record should be removed from the DNS database Scavenging is the process of cleaning and removing outdated or extinct names data from the DNS databaseA refresh attempt is the process of a computer requesting a refresh on its DNS record老化与清理是如何工作的？老化与清理是如何工作的？Jan 1Jan 15Jan 8ScavengeNo-RefreshintervalRefreshintervalTime stampedAging7-days7-days6 DNS6 DNS的疑难探讨的疑难探讨n什么是DNS循环复用n作为一种负载平衡的机制来分担网络资源的访问载荷。当满足查询要求的资源记录有多条时，可以用循环的方式把这些记录返回给客户机。n循环复用的作用n负载平衡n故障并举n如何实现循环复用nDEMO6 DNS6 DNS的疑难探讨的疑难探讨n实现DNS循环复用n对于多宿主名称，本地子网优先取代循环复用。n若启动了循环复用，作为对响应列表进行排序的一种辅选方法，可以使用循环复用来循环使用各资源记录。n如何禁用循环复用n位置：HK_L_MSYSTEMCurrentControlSetServicesDNSParametersndonotroundrobintypes(REG_SZ)，值如a ptr srv ns。n如果对所有类型的资源记录限制循环复用则对roundrobin(REG_DWORD)，将其值设置为0。今日回顾今日回顾1.课程导入2.名称解析与DNS的作用3.DNS服务实现与原理4.DNS区域及复制5.DNS服务器管理与维护6.DNS疑难探讨微软教学研究会欢迎您！微软教学研究会欢迎您！
