[日常] DNS解析概述

Posted 2021-01-23 陶士涵的菜地

DNS DomainNameSystem域名系统，根据域名查出IP地址
1.dig命令可以显示整个查询的过程

[email protected]-38-204-ubuntu:~# dig www.sopans.com
//这一段是查询参数和统计
; <<>> DiG 9.10.3-P4-Ubuntu <<>> www.sopans.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1899
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

//这一段是查询内容，查询www.sopans.com的A记录，A是Address意思
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.sopans.com.                        IN      A

//DNS服务器的答复，两条A记录，575是TTL的值（Time to live）缓存时间575秒内不用重新查询
;; ANSWER SECTION:
www.sopans.com.         575     IN      A       123.206.7.231
www.sopans.com.         575     IN      A       115.159.28.111

//DNS服务器的一些传输信息，本机DNS服务器是10.236.158.106，端口53，返回了75字节
;; Query time: 58 msec
;; SERVER: 10.236.158.106#53(10.236.158.106)
;; WHEN: Wed Nov 28 21:36:03 CST 2018
;; MSG SIZE  rcvd: 75

2.
+short参数只返回两条A记录IP地址
[email protected]-38-204-ubuntu:~# dig www.sopans.com +short
123.206.7.231
115.159.28.111

3.
本机DNS服务器的IP地址位于/etc/resolv.conf
[email protected]-38-204-ubuntu:~# cat /etc/resolv.conf
nameserver 10.236.158.106
nameserver 10.236.158.114
options timeout:1 rotate

4.使用@参数指定DNS服务器地址，例如指定DNS服务器地址为8.8.8.8
dig www.sopans.com @8.8.8.8

5.域名的层级结构
主机名.次级域名.顶级域名.根域名 www.sopans.com.root ,root可以省略因此会显示成www.sopans.com.

6.使用+trace参数，查看分级查询的过程，
NS记录是管理该级域名的域名服务器，按每一级逐级查询的过程
[email protected]-38-204-ubuntu:~# dig www.sopans.com +trace
.                       294897  IN      NS      c.root-servers.net.
.                       294897  IN      NS      d.root-servers.net.
.                       294897  IN      NS      e.root-servers.net.
.                       294897  IN      NS      f.root-servers.net.
.                       294897  IN      NS      g.root-servers.net.
.                       294897  IN      NS      h.root-servers.net.
.                       294897  IN      NS      i.root-servers.net.
.                       294897  IN      NS      a.root-servers.net.
.                       294897  IN      NS      j.root-servers.net.
.                       294897  IN      NS      k.root-servers.net.
.                       294897  IN      NS      l.root-servers.net.
.                       294897  IN      NS      m.root-servers.net.
.                       294897  IN      NS      b.root-servers.net.
;; Received 239 bytes from 10.236.158.106#53(10.236.158.106) in 0 ms

com.                    172800  IN      NS      e.gtld-servers.net.
com.                    172800  IN      NS      b.gtld-servers.net.
com.                    172800  IN      NS      j.gtld-servers.net.
com.                    172800  IN      NS      m.gtld-servers.net.
com.                    172800  IN      NS      i.gtld-servers.net.
com.                    172800  IN      NS      f.gtld-servers.net.
com.                    172800  IN      NS      a.gtld-servers.net.
com.                    172800  IN      NS      g.gtld-servers.net.
com.                    172800  IN      NS      h.gtld-servers.net.
com.                    172800  IN      NS      l.gtld-servers.net.
com.                    172800  IN      NS      k.gtld-servers.net.
com.                    172800  IN      NS      c.gtld-servers.net.
com.                    172800  IN      NS      d.gtld-servers.net.
com.                    86400   IN      DS      30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766
com.                    86400   IN      RRSIG   DS 8 1 86400 20181211050000 20181128040000 2134 . FeSgJRqqq/LY82e1pAM38Eiu07pepp53zIY23OlA65VDqA4ynhKWb8Ov OKiWzHhWb=
;; Received 1174 bytes from 198.41.0.4#53(a.root-servers.net) in 224 ms

sopans.com.             172800  IN      NS      dns2.hichina.com.
sopans.com.             172800  IN      NS      dns1.hichina.com.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400 20181202054332 20181125043332 37490 com. R+QjJnuxe+1Bs7+KvcUsTaFaNlUGt+wxLpwdpF9Mxkccm+Re8YJS2R=
O7K3MHPOSL4GCSK01O8ER0LQ04KLNNUT.com. 86400 IN NSEC3 1 1 0 - O7K5ETU7SVNP269R4U7KIQRE79H62BPM NS DS RRSIG
O7K3MHPOSL4GCSK01O8ER0LQ04KLNNUT.com. 86400 IN RRSIG NSEC3 8 2 86400 20181203062329 20181126051329 37490 com. OKTU40+7GCLv+yWhDXu9GEuklwOKrjTgEVYe51v8C7CgIMiBH0Cysy=
;; Received 886 bytes from 192.43.172.30#53(i.gtld-servers.net) in 362 ms

www.sopans.com.         600     IN      A       115.159.28.111
www.sopans.com.         600     IN      A       123.206.7.231
;; Received 75 bytes from 140.205.41.23#53(dns1.hichina.com) in 4 ms


7.ns参数和+short参数可以直接查询该级域名的NS记录
[email protected]-38-204-ubuntu:~# dig ns +short sopans.com    
dns1.hichina.com.
dns2.hichina.com.

8.
A记录：地址记录，域名指向的IP地址
MX记录：邮件记录，使用邮箱时设置的服务器地址
CNAME:别名记录，当前查询的域名跳转到另一个域名，
    比如www.baidu.com.          1080    IN      CNAME   www.a.shifen.com.
    这样的好处是，当要变更www.baidu.com指向的IP地址时，只需更改www.a.shifen.com的就可以了，www.baidu.com不需要变动；一旦设置了cname,就不能设置其他记录了
NS记录：管理该级域名的域名服务器
PTR:逆向查询记录，从IP地址查询域名

9.-x参数是查询PTR记录，从IP地址反查域名
dig -x 192.30.252.153