DNS与BIND权威指南第五版：深入解析与实践

PDF文件

下载需积分: 10 | 5.73MB | 更新于2024-07-17 | 197 浏览量 | 举报收藏

立即下载

《DNS与BIND,第五版》(DNS and BIND, 5th Edition)是由Cricket Liu和Paul Albitz共同编著的一本权威指南，专注于介绍DNS（域名系统）的理论与实践。这本书是O'Reilly出版社的经典之作，第五版更新了最新的技术和最佳实践，为读者提供了深入理解DNS工作原理、配置和管理DNS服务器的详尽内容。该书涵盖了DNS的基本概念，如域名解析过程、递归查询、迭代查询、区域传输（Zone Transfer）以及DNS安全相关议题，例如DNSSEC（DNS安全扩展）。此外，书中还讨论了BIND（Berkeley Internet Name Domain）软件，这是最流行的DNS软件之一，特别是在Linux和Unix系统中。 O'Reilly出版社不仅提供了《DNS and BIND Cookbook™》等配套资源，还推荐了针对Windows Server 2003环境下的DNS管理教程，以满足不同平台用户的需求。访问oreilly.com，读者可以找到关于最新技术、编程语言和操作系统的新闻、文章、博客、样章和代码示例，这对于开发者和IT专业人员来说是极有价值的资源库。 O'Reilly出版社的会议活动也是一个不容忽视的部分，他们定期召集创新者交流，推动技术发展。对于技术爱好者而言，oreilly.net是一个探索开放和新兴技术的重要入口，包括新的平台、编程语言和操作系统趋势。 SafariBookshelf作为在线参考图书馆，订阅者可以在超过1000本书籍中进行搜索，解决实际问题的速度极快。读者可以直接在网页上浏览全书或快速定位所需章节，体验其便利性。《DNS与BIND》这本书也提供在线版本，供读者随时查阅学习。《DNS and BIND, 5th Edition》是一本深入浅出的DNS技术指南，无论是初学者还是经验丰富的管理员都能从中受益匪浅，它不仅传授理论知识，还注重实用性，是IT专业人士必备的参考书籍。通过O'Reilly的丰富资源和持续更新，读者能够紧跟行业发展，提升自己的技术能力。

This is the Title of the Book, eMatter Edition

xiv

Preface

• A new chapter (Chapter 16) on the design of a complete DNS architecture for an

organization

• ENUM, which maps E.164 telephone numbers to URIs, in Chapter 17

• Internationalized Domain Names, or IDN, a standard for encoding Unicode

characters in the labels of domain names, in Chapter 17

• A revised section on accommodating Active Directory with BIND, in Chapter 17

Organization

This book is organized, more or less, to follow the evolution of a zone and its admin-

istrator. Chapters 1 and 2 discuss Domain Name System theory. Chapters 3 through

6 help you decide whether or not to set up your own zones, then describe how to go

about it, should you choose to. The middle of the book, Chapters 7 through 11,

describe how to maintain your zones, configure hosts to use your nameservers, plan

for the growth of your zones, create subdomains, and secure your nameservers.

Chapters 12 through 16 deal with troubleshooting tools, common problems, and the

lost art of programming with the resolver library routines. Chapter 16 puts it all

together in an end-to-end architecture.

Here’s a more detailed, chapter-by-chapter breakdown:

Chapter 1, Background

Provides a little historical perspective and discusses the problems that motivated

the development of DNS, then presents an overview of DNS theory.

Chapter 2, How Does DNS Work?

Goes over DNS theory in more detail, including the organization of the DNS

namespace, domains, zones, and nameservers. We also introduce important

concepts such as name resolution and caching.

Chapter 3, Where Do I Start?

Covers how to get the BIND software if you don’t already have it, what to do

with it once you’ve got it, how to figure out what your domain name should be,

and how to contact the organization that can delegate your zone to you.

Chapter 4, Setting Up BIND

Details how to set up your first two BIND nameservers, including creating your

nameserver database, starting up your nameservers, and checking their operation.

Chapter 5, DNS and Electronic Mail

Deals with DNS’s MX record, which allows administrators to specify alternate

hosts to handle a given destination’s mail. This chapter covers mail-routing strat-

egies for a variety of networks and hosts, including networks with Internet fire-

walls and hosts without direct Internet connectivity. The chapter also covers the

Sender Policy Framework, which uses DNS to authorize mail servers sending

mail from particular email addresses.

This is the Title of the Book, eMatter Edition

Preface

Chapter 6, Configuring Hosts

Explains how to configure a BIND resolver. We also include notes on the idio-

syncrasies of the Windows resolver.

Chapter 7, Maintaining BIND

Describes the periodic maintenance administrators must perform to keep their

zones running smoothly, such as checking nameserver health and authority.

Chapter 8, Growing Your Domain

Covers how to plan for the growth and evolution of your zones, including how

to get big and how to plan for moves and outages.

Chapter 9, Parenting

Explores the joys of becoming a parent zone. We explain when to become a par-

ent (create subdomains), what to call your children, how to create them (!), and

how to watch over them.

Chapter 10, Advanced Features

Goes over some less common nameserver configuration options that can help

you tune your nameserver’s performance and ease administration.

Chapter 11, Security

Describes how to secure your nameserver and how to configure your nameserv-

ers to deal with Internet firewalls, and describes two new security enhancements

to DNS: the DNS Security Extensions and Transaction Signatures.

Chapter 12, nslookup and dig

Shows the ins and outs of the most popular tools for doing DNS debugging,

including techniques for digging obscure information out of remote nameservers.

Chapter 13, Reading BIND Debugging Output

Is the Rosetta stone of BIND’s debugging information. This chapter will help

you make sense of the cryptic debugging information that BIND emits, which in

turn will help you better understand your nameserver.

Chapter 14, Troubleshooting DNS and BIND

Covers many common DNS and BIND problems and their solutions, and then

describes a number of less common, harder-to-diagnose scenarios.

Chapter 15, Programming with the Resolver and Nameserver Library Routines

Demonstrates how to use BIND’s resolver routines to query nameservers and

retrieve data from within a C program or a Perl script. We include a useful (we

hope!) program to check the health and authority of your nameservers.

Chapter 16, Architecture

Presents an end-to-end design for DNS infrastructure, including external

nameservers, forwarders, and internal nameservers.

This is the Title of the Book, eMatter Edition

xvi

Preface

Chapter 17, Miscellaneous

Ties up all the loose ends. We cover DNS wildcards, hosts and networks with

intermittent Internet connectivity via dialup, network name encoding, addi-

tional record types, ENUM, IDN, and Active Directory.

Appendix A, DNS Message Format and Resource Records

Contains a byte-by-byte breakdown of the formats used in DNS queries and

responses, as well as a comprehensive list of the currently defined resource

record types.

Appendix B, BIND Compatibility Matrix

Contains a matrix showing the most important features of the most popular

BIND releases.

Appendix C, Compiling and Installing BIND on Linux

Contains step-by-step instructions on how to compile the 9.3.2 version of BIND

on Linux.

Appendix D, Top-Level Domains

Lists the current top-level domains in the Internet domain namespace.

Appendix E, BIND Nameserver and Resolver Configuration

Summarizes the syntax and semantics of each of the parameters available for

configuring nameservers and resolvers.

Audience

This book is intended primarily for system and network administrators who manage

zones and one or more nameservers, but it also includes material for network engi-

neers, postmasters, and others. Not all of the book’s chapters will be equally interest-

ing to a diverse audience, though, and you don’t want to wade through 17 chapters

to find the information pertinent to your job. We hope the following roadmap will

help you plot your way through the book:

System administrators setting up their first zones

Should read Chapters 1 and 2 for DNS theory, Chapter 3 for information on get-

ting started and selecting a good domain name, then Chapters 4 and 5 to learn

how to set up a zone for the first time. Chapter 6 explains how to configure

hosts to use the new nameservers. Later, they should read Chapter 7, which

explains how to “flesh out” their implementation by setting up additional

nameservers and adding zone data. Chapters 12 through 14 describe trouble-

shooting tools and techniques.

Experienced administrators

May benefit from reading Chapter 6 to learn how to configure DNS resolvers on

different hosts, and Chapter 7 for information on maintaining their zones.

Chapter 8 contains instructions on planning for a zone’s growth and evolution,

which should be especially valuable to administrators of large zones. Chapter 9

This is the Title of the Book, eMatter Edition

Preface

xvii

explains parenting—creating subdomains—which is de rigueur reading for those

considering the big move. Chapter 10 covers many new and advanced features of

the BIND 9.3.2 and 8.4.7 nameservers. Chapter 11 goes over securing nameserv-

ers, which may be of particular interest to experienced administrators. Chapters

12 through 14 describe tools and techniques for troubleshooting, which even

advanced administrators may find worth reading. Chapter 16 may help adminis-

trators get a grasp of the big picture.

System administrators on networks without full Internet connectivity

Should read Chapter 5 to learn how to configure mail on such networks, and

Chapters 11 and 17 to learn how to set up an independent DNS infrastructure.

Programmers

Can read Chapters 1 and 2 for DNS theory, then Chapter 15 for detailed cover-

age of how to program with the BIND resolver library routines.

Network administrators not directly responsible for any zones

Should still read Chapters 1 and 2 for DNS theory, Chapter 12 to learn how to

use nslookup and dig, and Chapter 14 for troubleshooting tactics.

Postmasters

Should read Chapters 1 and 2 for DNS theory, then Chapter 5 to find out how

DNS and electronic mail coexist. Chapter 12, which describes nslookup and dig,

will also help postmasters dig mail-routing information from the domain

namespace.

Interested users

Can read Chapters 1 and 2 for DNS theory, and then whatever else they like!

Note that we assume you’re familiar with basic Unix system administration, TCP/IP

networking, and programming using simple shell scripts and Perl. We don’t assume

you have any other specialized knowledge, though. When we introduce a new term

or concept, we’ll do our best to define or explain it. Whenever possible, we’ll use

analogies from Unix (and from the real world) to help you understand.

Obtaining the Example Programs

The example programs in this book

are available electronically via FTP from the fol-

lowing URLs:

• ftp://ftp.uu.net/published/oreilly/nutshell/dnsbind/dns.tar.Z

• ftp://ftp.oreilly.com/published/oreilly/nutshell/dnsbind/

In either case, extract the files from the archive by typing:

% zcat dns.tar.Z | tar xf -

* Examples are also available online at http://examples.oreilly.com/dns5.

剩余641页未读，继续阅读

水果沙拉勇士

粉丝: 0

DNS与BIND权威指南第五版：深入解析与实践

DNS and BIND

DNS and BIND 5th

OReilly-DNS-and-BIND-英文版213123.rar

Configure-the-Linux-DNS-and-BIND-Server.rar_DNS Server_The Bind

bind-dynamic-dns-update：用于更新动态绑定DNS条目的脚本

bind-dns-server-basic-config:BIND DNS服务器的基本配置

DNS and Bind 第五版和Pro DNS and Bind 10

掌握Linux下的DNS管理利器 - DNS and BIND 5th

Linux系统DNS搭建：Bind-9.11.2-P1源码安装包详解

bind-zone-builder:从XML源定义文档生成格式正确的BIND DNS区域文件-Source zone

最新资源