Domain Name System (DNS)

1.DNS和WINS的作用

DNS：（Domain Name Server，域名服务）用于实现域名和IP地址的相互转换。
WINS：(Windows Internet Name Service) 用来将计算机的NetBIOS(Network Basic Input Output System,网络基本输入\输出系统)名称解析成IP地址。

DNS介绍

The Domain Name System (DNS) is a hierarchical distributed naming system for computers, services, or any resource connected to the Internet or a private network. It associates various information with domain names assigned to each of the participating entities. Most prominently, it translates domain names, which can be easily memorized by humans, to the numerical IP addresses needed for the purpose of computer services and devices worldwide. The Domain Name System is an essential component of the functionality of most Internet services because it is the Internet's primary directory service.

bind 介绍

BIND /ˈbaɪnd/, or named /ˈneɪmdiː/, is the most widely used Domain Name System (DNS) software on the Internet.[2][3] On Unix-like operating systems it is the de facto standard.

The software was originally designed at the University of California Berkeley (UCB) in the early 1980s. The name originates as an acronym of Berkeley Internet Name Domain,[4] reflecting the application's use within UCB. The software consists, most prominently, of the DNS server component, called named, a contracted form of name daemon. In addition the suite contains various administration tools, and a DNS resolver interface library. The latest version of BIND is BIND 9, first released in 2000.

Starting in 2009, the Internet Software Consortium (ISC) developed a new software suite, initially called BIND10. With release version 1.2.0 the project was renamed Bundy to terminate ISC involvement in the project.

---

DNS 基础资料可以从下面的书籍中获取。

相关书籍

百度云地址
BIND9管理员手册 中文 pdf
Pro DNS and BIND 英文原版pdf

在线阅读
Pro DNS and BIND
DNS for Rocket Scientists

---

BIND —— BIND 10 正式发布 1.0 版本。BIND 10 提供一个 DNS 的 C++ 库和很多提供服务的守护进程、动态 DNS、zone 转换和域名服务等等。

当前特性包括：

• IXFR and AXFR zone transfers in and out
• In-memory backend for zone data for faster performance
• SQLite3 backend for quick startup or huge amounts of zone data
• DNSSEC: serving signed zones by authoritative server
• Either in-memory or from DB backend
• Including NSEC3
• DDNS (Dynamic Updates) support
• Access Control (for DDNS and outbound zone transfers)
• TSIG support:
• Part of general ACLs (DDNS uses it)
• Authoritative server can verify and sign DNS messages with TSIG
• Zone transfers can have signed transfers

BIND 10 可通过不同可运行的模块来启用和禁用的功能，提供半交互的客户端来查看和设置一些配置选项。提供详细的日志消息系统，并可通过 XML over HTTP 查看一些统计信息。

提供基于 HTTPS 的 RESTful 的配置和控制接口。

文档：http://bind10.isc.org/docs/

下载地址：ftp://ftp.isc.org/isc/bind10/1.0.0/bind10-1.0.0.tar.gz

DNS服务介绍

BIND配置文件详解（一）
BIND配置文件详解（二）
BIND配置文件详解（三）

---

相关阅读

2014年1月21日中国互联网DNS瘫痪事件原因分析
自建DNS以防止GFW干扰
强制刷新本地 DNS 缓存记录
关于 SOCKS 代理的远端 DNS 解析
DNS 隧道
nslookup通往DNS的桥梁
dig挖出DNS的秘密
DNS解析过程及DNS TTL值
CentOS下通过Webmin管理BIND实现DNS轮询
DNS
public DNS servers

从理论到实践，全方位认识DNS（实践篇）