{"id":115364,"date":"2026-10-12T01:25:30","date_gmt":"2026-10-11T17:25:30","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/115364.html"},"modified":"2026-10-12T01:25:30","modified_gmt":"2026-10-11T17:25:30","slug":"dns-%e5%9f%9f%e5%90%8d%e7%b3%bb%e7%bb%9f-%e5%8e%9f%e7%90%86%e3%80%81%e7%b1%bb%e5%9e%8b%e5%8f%8a%e8%a7%a3%e6%9e%90%e6%97%b6%e6%95%88","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/115364.html","title":{"rendered":"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548"},"content":{"rendered":"

DNS \u57df\u540d\u7cfb\u7edf<\/h2>\n

1. DNS \u6982\u8ff0<\/h3>\n

1.1 \u57df\u540d\u7cfb\u7edf\u7b80\u4ecb<\/h4>\n

DNS（Domain Name System，\u57df\u540d\u7cfb\u7edf）\u662f\u4e92\u8054\u7f51\u4e2d\u7528\u4e8e\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d（\u4f8b\u5982 www.example.com）\u8f6c\u6362\u4e3a\u8ba1\u7b97\u673a\u53ef\u7406\u89e3\u7684 IP \u5730\u5740（\u4f8b\u5982 192.168.1.1）\u7684\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u7cfb\u7edf\u3002DNS \u5145\u5f53\u4e92\u8054\u7f51\u4e2d\u7684"\u7535\u8bdd\u7c3f"\u89d2\u8272，\u5c06\u7528\u6237\u8f93\u5165\u7684\u57df\u540d\u6620\u5c04\u5230\u5b9e\u9645\u7684\u7f51\u7edc\u5730\u5740，\u4f7f\u8ba1\u7b97\u673a\u80fd\u591f\u5b9a\u4f4d\u5e76\u8fde\u63a5\u81f3\u76ee\u6807\u670d\u52a1\u5668\u3002<\/p>\n

DNS \u8fd8\u6709\u53e6\u4e00\u5c42\u542b\u4e49：DNS（Domain Name Server，\u57df\u540d\u670d\u52a1\u5668）\u662f\u6267\u884c\u57df\u540d\u89e3\u6790\u4efb\u52a1\u7684\u4e13\u7528\u670d\u52a1\u5668\u3002\u57df\u540d\u4fbf\u4e8e\u4eba\u7c7b\u8bb0\u5fc6，\u4f46\u7f51\u7edc\u4e2d\u7684\u8ba1\u7b97\u673a\u4e4b\u95f4\u4ec5\u80fd\u8bc6\u522b IP \u5730\u5740，\u4e8c\u8005\u4e4b\u95f4\u7684\u8f6c\u6362\u5de5\u4f5c\u79f0\u4e3a\u57df\u540d\u89e3\u6790，\u57df\u540d\u89e3\u6790\u9700\u8981\u7531\u4e13\u95e8\u7684\u57df\u540d\u89e3\u6790\u670d\u52a1\u5668\u5b8c\u6210\u3002<\/p>\n

1.2 \u57df\u540d\u89e3\u6790\u5de5\u4f5c\u539f\u7406<\/h4>\n

\u57df\u540d\u89e3\u6790\u7684\u5de5\u4f5c\u6d41\u7a0b\u5982\u4e0b：<\/p>\n

  • \u67e5\u8be2\u53d1\u8d77：\u7528\u6237\u5728\u6d4f\u89c8\u5668\u4e2d\u8f93\u5165\u57df\u540d（\u5982 www.example.com），\u6d4f\u89c8\u5668\u5411\u672c\u5730\u8ba1\u7b97\u673a\u7684 DNS \u89e3\u6790\u5668\u53d1\u8d77\u67e5\u8be2\u8bf7\u6c42\u3002<\/li>\n
  • \u672c\u5730\u7f13\u5b58\u67e5\u8be2：\u672c\u5730\u89e3\u6790\u5668\u9996\u5148\u68c0\u67e5\u672c\u5730\u7f13\u5b58，\u786e\u8ba4\u662f\u5426\u5df2\u7f13\u5b58\u8be5\u57df\u540d\u7684\u89e3\u6790\u7ed3\u679c\u3002\u82e5\u5b58\u5728\u6709\u6548\u7f13\u5b58，\u5219\u76f4\u63a5\u8fd4\u56de\u3002<\/li>\n
  • \u9012\u5f52\u89e3\u6790：\u82e5\u672c\u5730\u7f13\u5b58\u672a\u547d\u4e2d，\u89e3\u6790\u5668\u5c06\u67e5\u8be2\u8bf7\u6c42\u8f6c\u53d1\u81f3 ISP（Internet Service Provider，\u4e92\u8054\u7f51\u670d\u52a1\u63d0\u4f9b\u5546）\u7684 DNS \u670d\u52a1\u5668\u3002ISP \u7684 DNS \u670d\u52a1\u5668\u6267\u884c\u9012\u5f52\u89e3\u6790：\u9996\u5148\u67e5\u8be2\u9876\u7ea7\u57df（TLD，Top-Level Domain）\u670d\u52a1\u5668（\u5982 .com），\u518d\u67e5\u8be2\u6b21\u7ea7\u57df（\u5982 example.com）\u7684\u6743\u5a01 DNS \u670d\u52a1\u5668，\u9010\u5c42\u5411\u4e0b\u76f4\u81f3\u627e\u5230\u8d1f\u8d23\u8be5\u57df\u540d\u7684\u6743\u5a01\u670d\u52a1\u5668\u3002<\/li>\n
  • \u54cd\u5e94\u8fd4\u56de：\u9012\u5f52\u89e3\u6790\u5668\u4ece\u6743\u5a01\u670d\u52a1\u5668\u83b7\u53d6\u57df\u540d\u5bf9\u5e94\u7684 IP \u5730\u5740，\u5e76\u5c06\u8be5\u5730\u5740\u8fd4\u56de\u7ed9\u672c\u5730\u89e3\u6790\u5668\u3002<\/li>\n
  • \u7f13\u5b58\u66f4\u65b0：\u672c\u5730\u89e3\u6790\u5668\u5c06\u83b7\u53d6\u7684 IP \u5730\u5740\u5b58\u5165\u672c\u5730\u7f13\u5b58，\u4f9b\u540e\u7eed\u67e5\u8be2\u4f7f\u7528，\u4ee5\u63d0\u5347\u89e3\u6790\u6027\u80fd\u3002<\/li>\n
  • \u8fde\u63a5\u5efa\u7acb：\u672c\u5730\u89e3\u6790\u5668\u5c06 IP \u5730\u5740\u8fd4\u56de\u7ed9\u7528\u6237\u8ba1\u7b97\u673a，\u6d4f\u89c8\u5668\u4f7f\u7528\u8be5 IP \u5730\u5740\u5efa\u7acb\u4e0e\u670d\u52a1\u5668\u7684\u8fde\u63a5，\u83b7\u53d6\u7f51\u9875\u5185\u5bb9\u6216\u6267\u884c\u5176\u4ed6\u7f51\u7edc\u64cd\u4f5c\u3002<\/li>\n

    \"DNS\u89e3\u6790\u6d41\u7a0b\"<\/p>\n

    \u8bf4\u660e：IP \u5730\u5740\u76f8\u5f53\u4e8e\u5bb6\u5ead\u5730\u5740（\u5982"\u6e56\u5317\u7701\u6b66\u6c49\u5e02 xxx \u5c0f\u533a 101 \u5ba4"），\u57df\u540d\u76f8\u5f53\u4e8e\u4eba\u540d\u3002DNS \u7684\u4f5c\u7528\u5373\u662f\u5c06\u4eba\u540d\u4e0e\u5730\u5740\u7ed1\u5b9a，\u4f7f\u4ed6\u4eba\u65e0\u9700\u8bb0\u5fc6\u590d\u6742\u5730\u5740\u5373\u53ef\u627e\u5230\u76ee\u6807\u3002<\/p>\n

    \n

    2. DNS \u8bb0\u5f55\u7c7b\u578b<\/h3>\n

    DNS \u8bb0\u5f55\u662f DNS \u6570\u636e\u5e93\u4e2d\u5b58\u50a8\u7684\u57df\u540d\u4e0e IP \u5730\u5740\u4e4b\u95f4\u7684\u6620\u5c04\u5173\u7cfb\u3002\u5e38\u89c1\u7684 DNS \u8bb0\u5f55\u7c7b\u578b\u5982\u4e0b\u8868\u6240\u793a：<\/p>\n\n\u8bb0\u5f55\u7c7b\u578b\u5168\u79f0\u7528\u9014<\/tr>\n\n\n\n\n\n\n\n\n\n
    A<\/td>\nAddress<\/td>\n\u5c06\u57df\u540d\u6620\u5c04\u5230 IPv4 \u5730\u5740<\/td>\n<\/tr>\n
    AAAA<\/td>\nIPv6 Address<\/td>\n\u5c06\u57df\u540d\u6620\u5c04\u5230 IPv6 \u5730\u5740<\/td>\n<\/tr>\n
    CNAME<\/td>\nCanonical Name<\/td>\n\u4e3a\u57df\u540d\u8bbe\u7f6e\u522b\u540d<\/td>\n<\/tr>\n
    NS<\/td>\nName Server<\/td>\n\u6307\u5b9a\u57df\u540d\u7684\u6743\u5a01 DNS \u670d\u52a1\u5668<\/td>\n<\/tr>\n
    MX<\/td>\nMail Exchanger<\/td>\n\u6307\u5b9a\u90ae\u4ef6\u670d\u52a1\u5668<\/td>\n<\/tr>\n
    TXT<\/td>\nText<\/td>\n\u5b58\u50a8\u6587\u672c\u4fe1\u606f（\u5982 SPF \u53cd\u5783\u573e\u90ae\u4ef6）<\/td>\n<\/tr>\n
    PTR<\/td>\nPointer<\/td>\nIP \u5730\u5740\u53cd\u5411\u89e3\u6790\u4e3a\u57df\u540d<\/td>\n<\/tr>\n
    SOA<\/td>\nStart of Authority<\/td>\n\u8bb0\u5f55\u57df\u540d\u7684\u6743\u5a01\u670d\u52a1\u5668\u53ca\u7ba1\u7406\u4fe1\u606f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    2.1 A \u8bb0\u5f55（Address Record）<\/h4>\n

    A \u8bb0\u5f55\u7528\u4e8e\u5c06\u57df\u540d\u6216\u4e3b\u673a\u540d\u6620\u5c04\u5230 IPv4 \u5730\u5740\u3002\u901a\u8fc7\u8bbe\u7f6e A \u8bb0\u5f55，\u53ef\u5c06\u7279\u5b9a\u57df\u540d\u76f4\u63a5\u6307\u5411\u4e00\u4e2a\u5177\u4f53\u7684 IP \u5730\u5740，\u4f7f\u7528\u6237\u901a\u8fc7\u8be5\u57df\u540d\u8bbf\u95ee\u5bf9\u5e94\u7684\u670d\u52a1\u5668\u6216\u7f51\u7edc\u8d44\u6e90\u3002<\/p>\n

    \u8bbe\u7f6e\u6b65\u9aa4：<\/p>\n

  • \u767b\u5f55\u57df\u540d\u6ce8\u518c\u5546\u6216 DNS \u6258\u7ba1\u670d\u52a1\u63d0\u4f9b\u5546\u7684\u63a7\u5236\u9762\u677f\u3002<\/li>\n
  • \u8fdb\u5165 DNS \u8bbe\u7f6e（DNS \u7ba1\u7406 \/ \u57df\u540d\u7ba1\u7406）\u9875\u9762\u3002<\/li>\n
  • \u9009\u62e9\u76ee\u6807\u57df\u540d\u3002<\/li>\n
  • \u5728 DNS \u8bb0\u5f55\u7ba1\u7406\u9875\u9762\u4e2d，\u9009\u62e9"\u6dfb\u52a0\u8bb0\u5f55"\u5e76\u9009\u62e9\u8bb0\u5f55\u7c7b\u578b\u4e3a A \u8bb0\u5f55\u3002<\/li>\n
  • \u586b\u5199\u8bb0\u5f55\u4fe1\u606f：<\/li>\n\n\u5b57\u6bb5\u8bf4\u660e<\/tr>\n\n\n\n\n
    \u4e3b\u673a\u540d（Hostname）<\/td>\n\u5b50\u57df\u540d\u540d\u79f0，\u5982 www\u3001@（\u4ee3\u8868\u6839\u57df\u540d）<\/td>\n<\/tr>\n
    \u8bb0\u5f55\u7c7b\u578b<\/td>\n\u9009\u62e9 A<\/td>\n<\/tr>\n
    \u8bb0\u5f55\u503c（IPv4 Address）<\/td>\n\u76ee\u6807\u670d\u52a1\u5668\u7684 IPv4 \u5730\u5740<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \"A<\/p>\n

    \u6ce8\u610f\u4e8b\u9879：<\/p>\n

      \n
    • A \u8bb0\u5f55\u7684\u76ee\u6807\u5730\u5740\u53ea\u80fd\u4f7f\u7528 IP \u5730\u5740，\u4e0d\u652f\u6301\u57df\u540d\u3002<\/li>\n
    • \u540c\u4e00\u57df\u540d\u53ef\u8bbe\u7f6e\u591a\u6761 A \u8bb0\u5f55\u5b9e\u73b0\u8f6e\u8be2\u8d1f\u8f7d\u5747\u8861\u3002<\/li>\n<\/ul>\n

      2.2 AAAA \u8bb0\u5f55（IPv6 Address Record）<\/h4>\n

      AAAA \u8bb0\u5f55\u7528\u4e8e\u5c06\u57df\u540d\u6620\u5c04\u5230 IPv6 \u5730\u5740，\u529f\u80fd\u4e0e A \u8bb0\u5f55\u7c7b\u4f3c，\u533a\u522b\u5728\u4e8e\u76ee\u6807\u5730\u5740\u4e3a IPv6 \u683c\u5f0f\u3002\u968f\u7740 IPv6 \u7684\u666e\u53ca，AAAA \u8bb0\u5f55\u5728\u53cc\u6808\u90e8\u7f72\u4e2d\u5177\u6709\u91cd\u8981\u4f5c\u7528\u3002<\/p>\n

      AAAA \u8bb0\u5f55\u540d\u79f0\u7531\u6765（"\u56db\u4e2a A"\u7684\u542b\u4e49）：<\/p>\n

      AAAA \u8bb0\u5f55\u4e4b\u6240\u4ee5\u88ab\u79f0\u4e3a"\u56db\u4e2a A"，\u662f\u56e0\u4e3a IPv6 \u5730\u5740\u957f\u5ea6\u662f IPv4 \u5730\u5740\u7684 4 \u500d\u3002DNS \u534f\u8bae\u6700\u65e9\u5b9a\u4e49 A \u8bb0\u5f55\u65f6，\u7528\u4e8e\u5c06\u57df\u540d\u6620\u5c04\u5230 32 \u4f4d\u7684 IPv4 \u5730\u5740\u3002\u540e\u6765\u9700\u8981\u652f\u6301 128 \u4f4d\u7684 IPv6 \u5730\u5740，\u9700\u8981\u4e00\u4e2a\u65b0\u7684\u8bb0\u5f55\u7c7b\u578b\u3002\u8bbe\u8ba1\u8005\u9009\u62e9\u4e86 AAAA（quad-A），\u53d6"\u56db\u4e2a A"\u4e4b\u610f\u2014\u20144 x 32 \u4f4d = 128 \u4f4d，\u6b63\u597d\u5bf9\u5e94 IPv6 \u5730\u5740\u7684\u957f\u5ea6\u3002\u8fd9\u662f\u4e00\u79cd\u52a9\u8bb0\u7b26\u8bbe\u8ba1，\u65b9\u4fbf\u8bb0\u5fc6\u548c\u7406\u89e3\u4e24\u8005\u4e4b\u95f4\u7684\u5173\u7cfb\u3002<\/p>\n

      \u8be5\u8bb0\u5f55\u7c7b\u578b\u6700\u521d\u5728 RFC 1886（1996 \u5e74）\u4e2d\u5b9a\u4e49，\u540e\u7531 RFC 3596（2003 \u5e74）\u66f4\u65b0\u66ff\u4ee3\u3002IANA \u5206\u914d\u7684\u7c7b\u578b\u503c\u4e3a 28\u3002<\/p>\n

      2.3 CNAME \u8bb0\u5f55（Canonical Name Record）<\/h4>\n

      CNAME \u8bb0\u5f55\u7528\u4e8e\u5c06\u4e00\u4e2a\u57df\u540d\u6620\u5c04\u5230\u53e6\u4e00\u4e2a\u57df\u540d（\u5373\u8bbe\u7f6e\u522b\u540d）\u3002\u5f53\u76ee\u6807\u57df\u540d\u7684 IP \u5730\u5740\u53d1\u751f\u53d8\u5316\u65f6，\u53ea\u9700\u66f4\u65b0\u76ee\u6807\u57df\u540d\u7684 DNS \u8bb0\u5f55，\u65e0\u9700\u4fee\u6539\u6240\u6709\u5f15\u7528\u8be5\u57df\u540d\u7684 CNAME \u8bb0\u5f55，\u4ece\u800c\u7b80\u5316\u57df\u540d\u7ba1\u7406\u3002<\/p>\n

      \u5178\u578b\u5e94\u7528\u573a\u666f：<\/p>\n

        \n
      • \u540c\u65f6\u63d0\u4f9b WWW \u548c MAIL \u670d\u52a1\u7684\u8ba1\u7b97\u673a\u53ef\u8bbe\u7f6e\u591a\u4e2a CNAME \u522b\u540d\u6307\u5411\u540c\u4e00\u4e2a A \u8bb0\u5f55\u4e3b\u673a\u540d\u3002<\/li>\n
      • CDN（Content Delivery Network，\u5185\u5bb9\u5206\u53d1\u7f51\u7edc）\u52a0\u901f\u670d\u52a1\u901a\u5e38\u8981\u6c42\u7528\u6237\u57df\u540d\u8bbe\u7f6e CNAME \u6307\u5411 CDN \u63d0\u4f9b\u5546\u63d0\u4f9b\u7684\u57df\u540d\u3002<\/li>\n<\/ul>\n

        \u9650\u5236\u6761\u4ef6：<\/p>\n

      • CNAME \u8bb0\u5f55\u4e0d\u80fd\u4e0e\u5176\u4ed6\u8bb0\u5f55（\u5982 A \u8bb0\u5f55\u3001MX \u8bb0\u5f55\u7b49）\u5171\u5b58\u4e8e\u540c\u4e00\u4e3b\u673a\u540d\u4e0b\u3002<\/li>\n
      • CNAME \u8bb0\u5f55\u7684\u76ee\u6807\u57df\u540d\u82e5\u5b58\u5728\u5176\u4ed6\u8bb0\u5f55，\u53ef\u80fd\u5bfc\u81f4\u51b2\u7a81\u3002<\/li>\n
      • \u9876\u7ea7\u57df\u540d（\u5982 example.com）\u901a\u5e38\u4e0d\u5141\u8bb8\u8bbe\u7f6e CNAME \u8bb0\u5f55（\u56e0\u9700\u540c\u65f6\u914d\u7f6e MX \u7b49\u8bb0\u5f55）\u3002<\/li>\n
      • \u4f7f\u7528 CNAME \u4f1a\u5f15\u5165\u989d\u5916\u7684 DNS \u67e5\u8be2\u6b65\u9aa4，\u53ef\u80fd\u7565\u5fae\u589e\u52a0\u89e3\u6790\u5ef6\u8fdf\u3002<\/li>\n

        CDN \u573a\u666f\u793a\u4f8b：<\/p>\n

        \u7528\u6237\u57df\u540d www.dd.com \u7684\u670d\u52a1\u5668 IP \u4e3a 1.1.1.1，\u8d2d\u4e70 CDN \u670d\u52a1\u540e，CDN \u63d0\u4f9b\u5546\u5206\u914d\u57df\u540d www.dd.cdn.com\u3002\u7528\u6237\u9700\u5c06 www.dd.com \u8bbe\u7f6e CNAME \u6307\u5411 www.dd.cdn.com：<\/p>\n

        www.dd.com \u2192 www.dd.cdn.com \u2192 CDN\u8282\u70b9IP<\/p>\n

        \u5f53\u7528\u6237\u8bbf\u95ee www.dd.com \u65f6，\u672c\u5730 DNS \u83b7\u53d6 CNAME \u6307\u5411\u7684 www.dd.cdn.com，\u518d\u901a\u8fc7 DNS \u8c03\u5ea6\u7cfb\u7edf\u667a\u80fd\u89e3\u6790\u5230\u8ddd\u79bb\u5ba2\u6237\u7aef\u5730\u7406\u4f4d\u7f6e\u6700\u8fd1（\u6216\u8d1f\u8f7d\u6700\u4f4e）\u7684 CDN \u670d\u52a1\u5668 IP，\u4ece\u800c\u964d\u4f4e\u8bbf\u95ee\u5ef6\u8fdf\u3002<\/p>\n

        \"CDN<\/p>\n

        CNAME \u4e3a\u4ec0\u4e48\u88ab\u79f0\u4e3a"\u522b\u540d"：<\/p>\n

        CNAME \u662f Canonical Name \u7684\u7f29\u5199，canonical \u610f\u4e3a"\u89c4\u8303\u7684\u3001\u6b63\u5f0f\u7684\u3001\u771f\u5b9e\u7684"\u3002\u8be5\u8bb0\u5f55\u7c7b\u578b\u5b9a\u4e49\u4e8e RFC 1034\u3002RFC 2181 \u7684\u660e\u786e\u8bf4\u660e：\u8be5\u6587\u6863\u4e13\u95e8\u6307\u51fa"CNAME"\u4e00\u8bcd\u5e38\u88ab\u8bef\u7528\u3002\u4e25\u683c\u800c\u8a00，CNAME \u8bb0\u5f55\u53f3\u4fa7\u7684\u503c\u624d\u662f\u771f\u6b63\u7684"\u89c4\u8303\u540d\u79f0"，\u5de6\u4fa7\u7684\u6807\u7b7e\u53ea\u662f\u8be5\u89c4\u8303\u540d\u79f0\u7684\u4e00\u4e2a\u522b\u540d\u3002<\/p>\n

        \u89e3\u6790\u5668\u67e5\u8be2\u5de6\u4fa7\u57df\u540d\u65f6，\u6536\u5230\u7684\u662f"\u8bf7\u53bb\u67e5\u53e6\u4e00\u4e2a\u57df\u540d"\u7684\u6307\u793a，\u968f\u540e\u4ee5\u53f3\u4fa7\u57df\u540d\u4e3a\u76ee\u6807\u91cd\u65b0\u53d1\u8d77\u67e5\u8be2，\u76f4\u81f3\u83b7\u5f97 A \u6216 AAAA \u8bb0\u5f55\u3002<\/p>\n

        \u4ee5\u8bb0\u5f55\u4e3a\u4f8b：<\/p>\n

          \n
        • blog.example.com \u2014\u2014 \u522b\u540d<\/li>\n
        • example.com \u2014\u2014 \u89c4\u8303\u540d\u79f0（\u771f\u5b9e\u540d\u79f0）<\/li>\n<\/ul>\n

          \u7c7b\u6bd4\u7406\u89e3：\u82e5\u67d0\u4eba\u7684\u6b63\u5f0f\u59d3\u540d\u4e3a"\u5f20\u4e09"，\u201c\u5c0f\u5f20"\u662f\u5176\u522b\u540d\u3002\u8be2\u95ee"\u5c0f\u5f20\u7684\u4f4f\u5740"\u65f6，\u5f97\u5230\u7684\u56de\u7b54\u662f"\u5c0f\u5f20\u5c31\u662f\u5f20\u4e09，\u8bf7\u67e5\u5f20\u4e09\u7684\u4f4f\u5740\u201d\u3002CNAME \u8bb0\u5f55\u4e2d\u7684\u5de6\u4fa7\u5373"\u5c0f\u5f20"，\u53f3\u4fa7\u5373"\u5f20\u4e09"\u3002<\/p>\n

          \u56e0\u6b64，CNAME \u8bb0\u5f55\u540d\u79f0\u672c\u8eab\u53d6\u81ea\u53f3\u4fa7\u7684"\u89c4\u8303\u540d\u79f0"，\u800c\u6574\u6761\u8bb0\u5f55\u7684\u529f\u80fd\u662f\u4e3a\u5de6\u4fa7\u57df\u540d\u63d0\u4f9b\u4e00\u4e2a\u522b\u540d\u673a\u5236，\u6545\u5728\u65e5\u5e38\u8868\u8ff0\u4e2d\u5e38\u76f4\u63a5\u79f0\u5176\u4e3a"\u522b\u540d\u8bb0\u5f55"\u3002<\/p>\n

          2.4 NS \u8bb0\u5f55（Name Server Record）<\/h4>\n

          NS \u8bb0\u5f55\u7528\u4e8e\u6307\u5b9a\u8be5\u57df\u540d\u7531\u54ea\u4e2a DNS \u670d\u52a1\u5668\u8fdb\u884c\u6743\u5a01\u89e3\u6790\u3002\u6ce8\u518c\u57df\u540d\u65f6，\u7cfb\u7edf\u4f1a\u5206\u914d\u9ed8\u8ba4\u7684 DNS \u670d\u52a1\u5668，\u6bcf\u4e2a\u57df\u540d\u7684 NS \u8bb0\u5f55\u5730\u5740\u901a\u5e38\u4ee5\u5982\u4e0b\u5f62\u5f0f\u51fa\u73b0：<\/p>\n

          ns1.domain.com
          \nns2.domain.com<\/p>\n

          NS \u8bb0\u5f55\u7684\u76ee\u6807\u5730\u5740\u53ef\u4ee5\u4f7f\u7528\u57df\u540d\u6216 IP \u5730\u5740\u3002\u6ce8\u610f：\u4ec5\u4e00\u7ea7\u57df\u540d（\u9876\u7ea7\u57df\u540d）\u624d\u62e5\u6709 NS \u8bb0\u5f55，\u5b50\u57df\u540d\u67e5\u8be2\u4e0d\u4f1a\u8fd4\u56de NS \u8bb0\u5f55\u3002<\/p>\n

          2.5 MX \u8bb0\u5f55（Mail Exchanger Record）<\/h4>\n

          MX \u8bb0\u5f55\u7528\u4e8e\u6307\u5b9a\u8d1f\u8d23\u5904\u7406\u53d1\u5f80\u8be5\u57df\u540d\u90ae\u4ef6\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u3002MX \u8bb0\u5f55\u5141\u8bb8\u8bbe\u7f6e\u4f18\u5148\u7ea7，\u6570\u503c\u8d8a\u5c0f\u4f18\u5148\u7ea7\u8d8a\u9ad8\u3002\u5f53\u5b58\u5728\u591a\u4e2a\u90ae\u4ef6\u670d\u52a1\u5668\u65f6，\u90ae\u4ef6\u6295\u9012\u7cfb\u7edf\u6839\u636e\u4f18\u5148\u7ea7\u51b3\u5b9a\u6295\u9012\u76ee\u6807\u670d\u52a1\u5668\u3002<\/p>\n

          \u5173\u952e\u89c4\u5219：<\/p>\n

            \n
          • MX \u8bb0\u5f55\u7684\u76ee\u6807\u57df\u540d\u5fc5\u987b\u80fd\u591f\u6620\u5c04\u5230 A \u8bb0\u5f55\u6216 AAAA \u8bb0\u5f55\u3002<\/li>\n
          • \u6839\u636e RFC 2181，MX \u8bb0\u5f55\u539f\u5219\u4e0a\u7981\u6b62\u6307\u5411 CNAME \u8bb0\u5f55\u3002<\/li>\n
          • MX \u8bb0\u5f55\u7684\u76ee\u6807\u5730\u5740\u53ef\u4ee5\u4f7f\u7528\u57df\u540d\u6216 IP \u5730\u5740\u3002<\/li>\n<\/ul>\n

            2.6 TXT \u8bb0\u5f55（Text Record）<\/h4>\n

            TXT \u8bb0\u5f55\u7528\u4e8e\u5728 DNS \u4e2d\u5b58\u50a8\u6587\u672c\u4fe1\u606f\u3002\u5e38\u89c1\u7528\u9014\u5305\u62ec：<\/p>\n

              \n
            • SPF（Sender Policy Framework）\u53cd\u5783\u573e\u90ae\u4ef6：SPF \u8bb0\u5f55\u5199\u5728 DNS \u7684 TXT \u8bb0\u5f55\u4e2d，\u7528\u4e8e\u58f0\u660e\u54ea\u4e9b\u90ae\u4ef6\u670d\u52a1\u5668\u88ab\u6388\u6743\u4ee3\u8868\u8be5\u57df\u540d\u53d1\u9001\u90ae\u4ef6，\u9632\u6b62\u53d1\u4ef6\u4eba\u57df\u540d\u4f2a\u9020\u3002<\/li>\n
            • \u57df\u540d\u9a8c\u8bc1：\u90e8\u5206\u670d\u52a1（\u5982 Google Workspace\u3001Microsoft 365）\u4f7f\u7528 TXT \u8bb0\u5f55\u9a8c\u8bc1\u57df\u540d\u6240\u6709\u6743\u3002<\/li>\n
            • DMARC \/ DKIM：\u90ae\u4ef6\u8ba4\u8bc1\u76f8\u5173\u914d\u7f6e\u4e5f\u53ef\u5b58\u50a8\u5728 TXT \u8bb0\u5f55\u4e2d\u3002<\/li>\n<\/ul>\n

              \u793a\u4f8b：<\/p>\n

              admin IN TXT "\u7ba1\u7406\u5458, \u7535\u8bdd：XXXXXXXXXXX"
              \nmail IN TXT "\u90ae\u4ef6\u4e3b\u673a，\u5b58\u653e\u5728 xxx, \u7ba1\u7406\u4eba：AAA"<\/p>\n

              2.7 PTR \u8bb0\u5f55（Pointer Record）<\/h4>\n

              PTR \u8bb0\u5f55\u7528\u4e8e\u5c06 IP \u5730\u5740\u53cd\u5411\u89e3\u6790\u4e3a\u57df\u540d，\u662f A \u8bb0\u5f55\u7684\u53cd\u5411\u6620\u5c04\u3002PTR \u8bb0\u5f55\u4e3b\u8981\u5e94\u7528\u4e8e\u90ae\u4ef6\u670d\u52a1\u5668\u573a\u666f：\u90ae\u4ef6\u670d\u52a1\u5668\u5728\u63a5\u6536\u90ae\u4ef6\u65f6\u4f1a\u68c0\u67e5\u53d1\u4ef6\u670d\u52a1\u5668\u7684 IP \u5730\u5740\u5e76\u8fdb\u884c\u53cd\u5411\u89e3\u6790，\u82e5\u89e3\u6790\u7ed3\u679c\u4e0e\u53d1\u4ef6\u57df\u540d\u5339\u914d\u5219\u63a5\u53d7\u90ae\u4ef6，\u5426\u5219\u53ef\u80fd\u62d2\u7edd\u63a5\u6536\u3002<\/p>\n

              PTR \u8bb0\u5f55\u7684\u67e5\u8be2\u9700\u8981\u4f7f\u7528 in-addr.arpa \u57df（IPv4）\u6216 ip6.arpa \u57df（IPv6）\u3002<\/p>\n

              2.8 SOA \u8bb0\u5f55（Start of Authority Record）<\/h4>\n

              SOA \u8bb0\u5f55\u8bb0\u5f55\u57df\u540d\u7684\u6388\u6743\u4fe1\u606f，\u5305\u62ec\u4e3b\u670d\u52a1\u5668\u540d\u79f0\u3001\u7ba1\u7406\u5458\u90ae\u7bb1\u3001\u6570\u636e\u5e93\u7248\u672c\u5e8f\u53f7\u53ca\u5237\u65b0\u53c2\u6570\u7b49\u3002\u6bcf\u4e2a\u57df\u540d\u5728\u6743\u5a01 DNS \u670d\u52a1\u5668\u4e0a\u5fc5\u987b\u5b58\u5728\u4e00\u6761 SOA \u8bb0\u5f55\u3002<\/p>\n

              SOA \u8bb0\u5f55\u7684\u5b57\u6bb5\u7ed3\u6784\u5982\u4e0b：<\/p>\n

              \u57df\u540d. TTL IN SOA \u4e3b\u670d\u52a1\u5668\u540d \u7ba1\u7406\u5458\u90ae\u7bb1 \u5e8f\u5217\u53f7 \u5237\u65b0\u95f4\u9694 \u91cd\u8bd5\u95f4\u9694 \u8fc7\u671f\u65f6\u95f4 \u6700\u5c0fTTL<\/p>\n

              \u5404\u5b57\u6bb5\u542b\u4e49：<\/p>\n\n\u5b57\u6bb5\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n
              \u4e3b\u670d\u52a1\u5668\u540d<\/td>\n\u57df\u540d\u7684\u4e3b DNS \u670d\u52a1\u5668\u4e3b\u673a\u540d<\/td>\n<\/tr>\n
              \u7ba1\u7406\u5458\u90ae\u7bb1<\/td>\n\u57df\u540d\u7ba1\u7406\u5458\u90ae\u7bb1（@ \u7528 . \u66ff\u4ee3）<\/td>\n<\/tr>\n
              \u5e8f\u5217\u53f7<\/td>\n\u6570\u636e\u5e93\u6587\u4ef6\u7248\u672c\u53f7，\u4fee\u6539\u8bb0\u5f55\u540e\u9700\u9012\u589e<\/td>\n<\/tr>\n
              \u5237\u65b0\u95f4\u9694<\/td>\nSlave \u670d\u52a1\u5668\u5411 Master \u540c\u6b65\u7684\u95f4\u9694\u65f6\u95f4<\/td>\n<\/tr>\n
              \u91cd\u8bd5\u95f4\u9694<\/td>\nSlave \u540c\u6b65\u5931\u8d25\u540e\u7684\u91cd\u8bd5\u95f4\u9694<\/td>\n<\/tr>\n
              \u8fc7\u671f\u65f6\u95f4<\/td>\nSlave \u65e0\u6cd5\u8054\u7cfb Master \u65f6，\u6570\u636e\u8fc7\u671f\u65f6\u95f4<\/td>\n<\/tr>\n
              \u6700\u5c0f TTL<\/td>\n\u8d1f\u7f13\u5b58（NXDOMAIN）\u7684\u9ed8\u8ba4\u7f13\u5b58\u65f6\u95f4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
              \n

              3. TTL \u503c<\/h3>\n

              3.1 TTL \u539f\u7406<\/h4>\n

              TTL（Time-To-Live，\u751f\u5b58\u65f6\u95f4）\u662f IP \u534f\u8bae\u9996\u90e8\u4e2d\u7684\u4e00\u4e2a 8 \u4f4d\u5b57\u6bb5，\u7528\u4e8e\u9650\u5236\u6570\u636e\u5305\u5728\u7f51\u7edc\u4e2d\u7684\u6700\u5927\u5b58\u6d3b\u65f6\u95f4\u3002\u5728 DNS \u8bed\u5883\u4e0b，TTL \u8868\u793a\u4e00\u6761\u57df\u540d\u89e3\u6790\u8bb0\u5f55\u5728 DNS \u670d\u52a1\u5668\u4e2d\u7684\u7f13\u5b58\u6709\u6548\u671f（\u5355\u4f4d\u4e3a\u79d2）\u3002<\/p>\n

              TTL \u7684\u539f\u59cb\u8bbe\u8ba1\u76ee\u7684\u662f\u9632\u6b62\u6570\u636e\u5305\u56e0\u8def\u7531\u9519\u8bef\u9677\u5165\u65e0\u9650\u5faa\u73af：\u6bcf\u4e2a\u8def\u7531\u5668\u5728\u5904\u7406\u6570\u636e\u5305\u65f6\u5c06 TTL \u503c\u51cf 1，\u5f53 TTL \u51cf\u81f3 0 \u65f6，\u8def\u7531\u5668\u4e22\u5f03\u8be5\u6570\u636e\u5305\u5e76\u5411\u53d1\u9001\u8005\u8fd4\u56de ICMP \u8d85\u65f6\u62a5\u6587\u3002<\/p>\n

              \u5728 DNS \u7f13\u5b58\u673a\u5236\u4e2d，TTL \u7684\u4f5c\u7528\u5982\u4e0b：<\/p>\n

                \n
              • DNS \u670d\u52a1\u5668\u6536\u5230\u89e3\u6790\u8bf7\u6c42\u540e，\u5411\u57df\u540d\u7684 NS \u670d\u52a1\u5668\u67e5\u8be2\u5e76\u83b7\u5f97\u89e3\u6790\u8bb0\u5f55\u3002<\/li>\n
              • \u8be5\u8bb0\u5f55\u5c06\u5728 DNS \u670d\u52a1\u5668\u4e2d\u7f13\u5b58 TTL \u6307\u5b9a\u7684\u65f6\u95f4\u3002<\/li>\n
              • \u5728\u7f13\u5b58\u6709\u6548\u671f\u5185，\u76f8\u540c\u57df\u540d\u7684\u89e3\u6790\u8bf7\u6c42\u5c06\u76f4\u63a5\u8fd4\u56de\u7f13\u5b58\u7ed3\u679c，\u4e0d\u518d\u5411 NS \u670d\u52a1\u5668\u53d1\u8d77\u67e5\u8be2\u3002<\/li>\n
              • \u7f13\u5b58\u8fc7\u671f\u540e，DNS \u670d\u52a1\u5668\u5c06\u91cd\u65b0\u5411 NS \u670d\u52a1\u5668\u53d1\u8d77\u67e5\u8be2\u4ee5\u66f4\u65b0\u8bb0\u5f55\u3002<\/li>\n<\/ul>\n

                3.2 TTL \u8bbe\u7f6e\u7b56\u7565<\/h4>\n

                \u589e\u5927 TTL \u503c：<\/p>\n

                  \n
                • \u9002\u7528\u4e8e\u57df\u540d\u8bb0\u5f55\u957f\u671f\u4e0d\u53d8\u7684\u7a33\u5b9a\u573a\u666f\u3002<\/li>\n
                • \u589e\u5927 TTL \u53ef\u51cf\u5c11 DNS \u67e5\u8be2\u6b21\u6570，\u964d\u4f4e\u89e3\u6790\u5ef6\u8fdf，\u63d0\u5347\u7f51\u7ad9\u8bbf\u95ee\u901f\u5ea6\u3002<\/li>\n
                • \u4e00\u822c\u5efa\u8bae\u5c06 TTL \u8bbe\u7f6e\u4e3a\u8f83\u5927\u503c（\u5982 86400 \u79d2，\u5373 1 \u5929）\u3002<\/li>\n<\/ul>\n

                  \u51cf\u5c0f TTL \u503c：<\/p>\n

                    \n
                  • \u9002\u7528\u4e8e\u8ba1\u5212\u8fdb\u884c DNS \u8bb0\u5f55\u53d8\u66f4（\u5982\u66f4\u6362\u670d\u52a1\u5668 IP）\u7684\u573a\u666f\u3002<\/li>\n
                  • \u8f83\u5c0f\u7684 TTL \u53ef\u52a0\u901f\u5168\u7403 DNS \u7f13\u5b58\u66f4\u65b0，\u51cf\u5c11\u65b0\u65e7\u670d\u52a1\u5668\u5e76\u5b58\u671f\u95f4\u7684\u8bbf\u95ee\u4e0d\u4e00\u81f4\u95ee\u9898\u3002<\/li>\n
                  • \u5efa\u8bae\u5728\u53d8\u66f4\u524d\u63d0\u524d\u5c06 TTL \u8bbe\u7f6e\u4e3a\u8f83\u5c0f\u503c（\u5982 60 \u79d2）\u3002<\/li>\n<\/ul>\n

                    DNS \u8bb0\u5f55\u53d8\u66f4\u7684\u6807\u51c6\u64cd\u4f5c\u6d41\u7a0b：<\/p>\n

                  • \u67e5\u770b\u57df\u540d\u5f53\u524d\u7684 TTL \u503c（\u5047\u8bbe\u4e3a 1 \u5929）\u3002<\/li>\n
                  • \u5c06 TTL \u4fee\u6539\u4e3a\u53ef\u8bbe\u7f6e\u7684\u6700\u5c0f\u503c（\u5efa\u8bae 60 \u79d2）\u3002<\/li>\n
                  • \u7b49\u5f85\u81f3\u5c11 1 \u5929，\u786e\u4fdd\u5168\u7403\u5404\u5730 DNS \u670d\u52a1\u5668\u7684\u65e7\u7f13\u5b58\u5168\u90e8\u8fc7\u671f\u3002<\/li>\n
                  • \u4fee\u6539 DNS \u89e3\u6790\u8bb0\u5f55（\u5982\u66f4\u6362 A \u8bb0\u5f55\u7684\u76ee\u6807 IP）\u3002<\/li>\n
                  • \u786e\u8ba4\u5404\u5730 DNS \u5df2\u66f4\u65b0\u5b8c\u6210\u540e，\u5c06 TTL \u8bbe\u7f6e\u4e3a\u76ee\u6807\u503c\u3002<\/li>\n

                    \u5e38\u89c1\u64cd\u4f5c\u7cfb\u7edf\u7684\u9ed8\u8ba4 TTL \u521d\u503c：<\/p>\n\n\u64cd\u4f5c\u7cfb\u7edf \/ \u73af\u5883\u9ed8\u8ba4 TTL \u521d\u503c\u5907\u6ce8<\/tr>\n\n\n\n\n\n\n\n\n
                    Windows 9x\/Me<\/td>\n32<\/td>\n\u5df2\u505c\u4ea7，\u4ec5\u4f5c\u5386\u53f2\u53c2\u8003<\/td>\n<\/tr>\n
                    Linux \/ UNIX<\/td>\n64<\/td>\n\u4ecd\u4e3a\u4e3b\u6d41\u9ed8\u8ba4\u503c<\/td>\n<\/tr>\n
                    Windows 2000\/XP<\/td>\n128<\/td>\n\u5df2\u505c\u4ea7，\u4ec5\u4f5c\u5386\u53f2\u53c2\u8003<\/td>\n<\/tr>\n
                    Windows 7\/8\/10\/11<\/td>\n128<\/td>\n\u73b0\u4ee3 Windows \u7cfb\u7edf\u9ed8\u8ba4\u503c<\/td>\n<\/tr>\n
                    macOS \/ iOS<\/td>\n64<\/td>\nApple \u7cfb\u7edf\u9ed8\u8ba4\u503c<\/td>\n<\/tr>\n
                    Android<\/td>\n64<\/td>\nAndroid \u7cfb\u7edf\u9ed8\u8ba4\u503c<\/td>\n<\/tr>\n
                    \u5176\u4ed6 Unix \u7cfb\u7edf<\/td>\n255<\/td>\nSolaris（Sun\/Oracle）\u3001HP-UX（HP）\u3001AIX（IBM）\u3001FreeBSD（\u65e7\u7248）\u3001OpenBSD（\u65e7\u7248）\u3001NetBSD \u7b49<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                    \n

                    4. \u6cdb\u57df\u540d\u4e0e\u6cdb\u89e3\u6790<\/h3>\n

                    \u6cdb\u57df\u540d\u662f\u6307\u5728\u4e00\u4e2a\u57df\u540d\u6839\u4e0b，\u4ee5 *.domain.com \u7684\u5f62\u5f0f\u8868\u793a\u8be5\u57df\u540d\u6839\u4e0b\u6240\u6709\u5c1a\u672a\u663e\u5f0f\u521b\u5efa\u7684\u5b50\u57df\u540d\u3002<\/p>\n

                    \u6cdb\u89e3\u6790\u662f\u5c06 *.domain.com \u7684 A \u8bb0\u5f55\u89e3\u6790\u5230\u6307\u5b9a IP \u5730\u5740\u7684\u64cd\u4f5c\u3002\u8bbe\u7f6e\u6cdb\u89e3\u6790\u540e，\u8bbf\u95ee\u4efb\u610f\u524d\u7f00\u7684 domain.com \u5b50\u57df\u540d\u5747\u53ef\u89e3\u6790\u5230\u540c\u4e00\u76ee\u6807\u670d\u52a1\u5668\u3002<\/p>\n

                    \u793a\u4f8b：<\/p>\n

                    *.example.com \u2192 192.0.2.1<\/p>\n

                    \u4e0a\u8ff0\u914d\u7f6e\u540e，aaa.example.com\u3001bbb.example.com \u7b49\u4efb\u610f\u5b50\u57df\u540d\u5747\u89e3\u6790\u81f3 192.0.2.1\u3002<\/p>\n

                    \u6ce8\u610f\u4e8b\u9879：<\/p>\n

                      \n
                    • \u6cdb\u89e3\u6790\u4f18\u5148\u7ea7\u4f4e\u4e8e\u663e\u5f0f\u5b9a\u4e49\u7684\u5b50\u57df\u540d\u8bb0\u5f55\u3002\u4f8b\u5982，\u82e5\u540c\u65f6\u5b58\u5728 www.example.com \u7684 A \u8bb0\u5f55\u548c *.example.com \u7684\u6cdb\u89e3\u6790，\u5219 www.example.com \u4f18\u5148\u5339\u914d\u663e\u5f0f A \u8bb0\u5f55\u3002<\/li>\n
                    • \u6cdb\u89e3\u6790\u4e0d\u9002\u7528\u4e8e MX\u3001NS \u7b49\u8bb0\u5f55\u7c7b\u578b\u3002<\/li>\n<\/ul>\n
                      \n

                      5. \u57df\u540d\u7ed1\u5b9a<\/h3>\n

                      \u57df\u540d\u7ed1\u5b9a\u662f\u6307\u5c06\u57df\u540d\u6307\u5411\u670d\u52a1\u5668 IP \u5730\u5740\u7684\u64cd\u4f5c，\u5373\u901a\u8fc7\u8bbe\u7f6e A \u8bb0\u5f55\u6216 CNAME \u8bb0\u5f55，\u4f7f\u57df\u540d\u89e3\u6790\u5230\u6307\u5b9a\u670d\u52a1\u5668\u7684 IP \u5730\u5740\u3002<\/p>\n

                      \n

                      6. \u57df\u540d\u8f6c\u5411<\/h3>\n

                      \u57df\u540d\u8f6c\u5411（Domain Forwarding \/ Domain Redirect）\u53c8\u79f0\u57df\u540d\u6307\u5411\u6216\u57df\u540d\u8f6c\u53d1，\u5f53\u7528\u6237\u5728\u6d4f\u89c8\u5668\u5730\u5740\u680f\u8f93\u5165\u57df\u540d\u65f6，\u81ea\u52a8\u8df3\u8f6c\u5230\u6307\u5b9a\u7684\u53e6\u4e00\u4e2a\u57df\u540d\u6216 URL\u3002\u5e38\u89c1\u7684\u8f6c\u5411\u65b9\u5f0f\u5305\u62ec：<\/p>\n

                        \n
                      • 301 \u6c38\u4e45\u91cd\u5b9a\u5411：\u641c\u7d22\u5f15\u64ce\u4f1a\u5c06\u6743\u91cd\u4f20\u9012\u81f3\u76ee\u6807 URL，\u9002\u7528\u4e8e\u57df\u540d\u8fc1\u79fb\u573a\u666f\u3002<\/li>\n
                      • 302 \u4e34\u65f6\u91cd\u5b9a\u5411：\u641c\u7d22\u5f15\u64ce\u4e0d\u4f1a\u4f20\u9012\u6743\u91cd，\u9002\u7528\u4e8e\u4e34\u65f6\u8df3\u8f6c\u573a\u666f\u3002<\/li>\n<\/ul>\n

                        \u901a\u5e38\u4f7f\u7528\u7b80\u77ed\u6613\u8bb0\u7684\u57df\u540d\u8f6c\u5411\u81f3\u590d\u6742\u96be\u8bb0\u7684\u57df\u540d，\u4ee5\u63d0\u5347\u7528\u6237\u4f53\u9a8c\u3002<\/p>\n

                        \n

                        7. A \u8bb0\u5f55\u4e0e CNAME \u8bb0\u5f55\u5bf9\u6bd4<\/h3>\n

                        7.1 \u57fa\u672c\u533a\u522b<\/h4>\n\n\u5bf9\u6bd4\u9879A \u8bb0\u5f55CNAME \u8bb0\u5f55<\/tr>\n\n\n\n\n\n\n
                        \u89e3\u6790\u76ee\u6807<\/td>\nIP \u5730\u5740（IPv4）<\/td>\n\u53e6\u4e00\u4e2a\u57df\u540d<\/td>\n<\/tr>\n
                        \u89e3\u6790\u901f\u5ea6<\/td>\n\u8f83\u5feb（\u65e0\u9700\u989d\u5916\u67e5\u8be2）<\/td>\n\u7565\u6162（\u9700\u989d\u5916\u67e5\u8be2\u76ee\u6807\u57df\u540d\u7684 A \u8bb0\u5f55）<\/td>\n<\/tr>\n
                        \u7ba1\u7406\u7075\u6d3b\u6027<\/td>\n\u53d8\u66f4 IP \u9700\u4fee\u6539\u6240\u6709\u76f8\u5173\u8bb0\u5f55<\/td>\n\u53d8\u66f4 IP \u53ea\u9700\u4fee\u6539\u76ee\u6807\u57df\u540d\u7684 A \u8bb0\u5f55<\/td>\n<\/tr>\n
                        \u4e0e\u5176\u4ed6\u8bb0\u5f55\u5171\u5b58<\/td>\n\u53ef\u4ee5<\/td>\n\u540c\u4e00\u4e3b\u673a\u540d\u4e0b\u4e0d\u80fd\u4e0e\u5176\u4ed6\u8bb0\u5f55\u5171\u5b58<\/td>\n<\/tr>\n
                        \u9002\u7528\u573a\u666f<\/td>\n\u76f4\u63a5\u6620\u5c04\u5230\u670d\u52a1\u5668 IP<\/td>\n\u521b\u5efa\u522b\u540d\u3001CDN \u52a0\u901f\u3001\u591a\u57df\u540d\u6307\u5411\u540c\u4e00\u670d\u52a1\u5668<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                        7.2 \u7ba1\u7406\u4fbf\u5229\u6027\u5bf9\u6bd4<\/h4>\n

                        \u573a\u666f：\u4e00\u53f0\u670d\u52a1\u5668\u6258\u7ba1\u591a\u4e2a\u57df\u540d，\u670d\u52a1\u5668 IP \u4e3a 1.1.1.1<\/p>\n

                        \u4f7f\u7528 A \u8bb0\u5f55\u65b9\u6848：<\/p>\n

                        www.yy.com \u2192 1.1.1.1
                        \nwww.cc.com \u2192 1.1.1.1
                        \nwww.xx.com \u2192 1.1.1.1
                        \nwww.kk.com \u2192 1.1.1.1<\/p>\n

                        \u5f53\u670d\u52a1\u5668 IP \u53d8\u66f4\u4e3a 2.2.2.2 \u65f6，\u9700\u9010\u4e00\u4fee\u6539\u6240\u6709 A \u8bb0\u5f55\u3002<\/p>\n

                        \u4f7f\u7528 CNAME \u65b9\u6848：<\/p>\n

                        www.yy.com \u2192 www.xx.com \u2192 1.1.1.1
                        \nwww.cc.com \u2192 www.xx.com \u2192 1.1.1.1
                        \nwww.kk.com \u2192 www.xx.com \u2192 1.1.1.1<\/p>\n

                        \u5176\u4e2d www.xx.com \u8bbe\u7f6e A \u8bb0\u5f55\u6307\u5411 1.1.1.1\u3002\u5f53\u670d\u52a1\u5668 IP \u53d8\u66f4\u4e3a 2.2.2.2 \u65f6，\u4ec5\u9700\u4fee\u6539 www.xx.com \u7684 A \u8bb0\u5f55，\u6240\u6709 CNAME \u522b\u540d\u81ea\u52a8\u751f\u6548，\u65e0\u9700\u9010\u4e00\u4fee\u6539\u3002<\/p>\n

                        7.3 SEO \u6ce8\u610f\u4e8b\u9879<\/h4>\n
                          \n
                        • A \u8bb0\u5f55\u652f\u6301\u6839\u57df\u540d（example.com）\u76f4\u63a5\u89e3\u6790，\u65e0\u9700\u8f93\u5165 www \u524d\u7f00\u5373\u53ef\u8bbf\u95ee\u3002<\/li>\n
                        • CNAME \u8bb0\u5f55\u901a\u5e38\u9700\u8981 www \u7b49\u5b50\u57df\u540d\u524d\u7f00，\u90e8\u5206\u641c\u7d22\u5f15\u64ce\u5de5\u5177\u53ef\u80fd\u5bf9\u6839\u57df\u540d\u7684 CNAME \u652f\u6301\u6709\u9650\u3002<\/li>\n
                        • \u53ef\u901a\u8fc7 301 \u91cd\u5b9a\u5411\u5c06\u6839\u57df\u540d\u6d41\u91cf\u7edf\u4e00\u81f3 www \u5b50\u57df\u540d，\u907f\u514d\u6743\u91cd\u5206\u6563\u3002<\/li>\n
                        • \u90e8\u5206\u4e91\u670d\u52a1\u5546\u5efa\u8bae\u4f18\u5148\u4f7f\u7528 CNAME \u8bb0\u5f55\u7ed1\u5b9a\u57df\u540d，\u4fbf\u4e8e\u540e\u7eed\u7ef4\u62a4\u3002<\/li>\n<\/ul>\n
                          \n

                          8. DNS \u67e5\u8be2\u5de5\u5177 dig<\/h3>\n

                          dig（Domain Information Groper）\u662f\u7c7b Unix \u7cfb\u7edf\u4e0b\u7684\u547d\u4ee4\u884c DNS \u67e5\u8be2\u5de5\u5177，\u652f\u6301\u67e5\u8be2 A \u8bb0\u5f55\u3001AAAA \u8bb0\u5f55\u3001CNAME \u8bb0\u5f55\u3001MX \u8bb0\u5f55\u3001NS \u8bb0\u5f55\u7b49\u591a\u79cd DNS \u8bb0\u5f55\u7c7b\u578b\u3002<\/p>\n

                          8.1 \u57fa\u672c\u67e5\u8be2<\/h4>\n

                          \u6267\u884c dig www.baidu.com \u5c06\u8f93\u51fa\u516d\u6bb5\u4fe1\u606f：<\/p>\n

                          \u7b2c\u4e00\u6bb5：\u67e5\u8be2\u53c2\u6570\u4e0e\u7edf\u8ba1\u4fe1\u606f<\/p>\n

                          ; <<>> DiG 9.10.6 <<>> www.baidu.com
                          \n;; global options: +cmd
                          \n;; Got answer:
                          \n;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17163
                          \n;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 5, ADDITIONAL: 7<\/p>\n

                          \u5b57\u6bb5\u8bf4\u660e：<\/p>\n\n\u5b57\u6bb5\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n\n\n
                          DiG 9.10.6<\/td>\ndig \u5de5\u5177\u7248\u672c\u53f7<\/td>\n<\/tr>\n
                          global options: +cmd<\/td>\n\u5168\u5c40\u67e5\u8be2\u9009\u9879<\/td>\n<\/tr>\n
                          status: NOERROR<\/td>\n\u67e5\u8be2\u72b6\u6001，NOERROR \u8868\u793a\u67e5\u8be2\u6210\u529f<\/td>\n<\/tr>\n
                          opcode: QUERY<\/td>\n\u67e5\u8be2\u64cd\u4f5c\u7c7b\u578b<\/td>\n<\/tr>\n
                          flags: qr rd ra<\/td>\n\u54cd\u5e94\u6807\u5fd7\u4f4d（qr=\u67e5\u8be2\u54cd\u5e94, rd=\u9012\u5f52\u67e5\u8be2, ra=\u9012\u5f52\u53ef\u7528）<\/td>\n<\/tr>\n
                          QUERY: 1<\/td>\n\u67e5\u8be2\u95ee\u9898\u6570<\/td>\n<\/tr>\n
                          ANSWER: 3<\/td>\n\u7b54\u6848\u8d44\u6e90\u8bb0\u5f55\u6570<\/td>\n<\/tr>\n
                          AUTHORITY: 5<\/td>\n\u6388\u6743\u8d44\u6e90\u8bb0\u5f55\u6570<\/td>\n<\/tr>\n
                          ADDITIONAL: 7<\/td>\n\u9644\u52a0\u8d44\u6e90\u8bb0\u5f55\u6570<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                          \u7b2c\u4e8c\u6bb5：\u67e5\u8be2\u95ee\u9898\u6bb5（QUESTION SECTION）<\/p>\n

                          ;; QUESTION SECTION:
                          \n;www.baidu.com. IN A<\/p>\n

                            \n
                          • www.baidu.com.：\u67e5\u8be2\u7684\u57df\u540d（\u672b\u5c3e\u7684\u70b9\u53f7\u8868\u793a\u5b8c\u5168\u9650\u5b9a\u57df\u540d FQDN）<\/li>\n
                          • IN：\u7c7b\u522b\u5173\u952e\u5b57（Internet）<\/li>\n
                          • A：\u8bb0\u5f55\u7c7b\u578b<\/li>\n<\/ul>\n

                            \u7b2c\u4e09\u6bb5：\u7b54\u6848\u6bb5（ANSWER SECTION）<\/p>\n

                            ;; ANSWER SECTION:
                            \nwww.baidu.com. 600 IN CNAME www.a.shifen.com.
                            \nwww.a.shifen.com. 600 IN A 14.215.177.38
                            \nwww.a.shifen.com. 600 IN A 14.215.177.39<\/p>\n

                            \u5b57\u6bb5\u8bf4\u660e（\u6bcf\u884c\u683c\u5f0f：\u57df\u540d TTL IN \u8bb0\u5f55\u7c7b\u578b \u8bb0\u5f55\u503c）：<\/p>\n\n\u5b57\u6bb5\u542b\u4e49<\/tr>\n\n\n\n\n\n\n
                            www.baidu.com.<\/td>\n\u57df\u540d<\/td>\n<\/tr>\n
                            600<\/td>\nTTL \u503c（\u79d2），\u8868\u793a\u7f13\u5b58\u6709\u6548\u671f<\/td>\n<\/tr>\n
                            IN<\/td>\n\u7c7b\u522b（Internet）<\/td>\n<\/tr>\n
                            CNAME<\/td>\n\u8bb0\u5f55\u7c7b\u578b<\/td>\n<\/tr>\n
                            www.a.shifen.com.<\/td>\n\u522b\u540d\u76ee\u6807\u57df\u540d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                            \u4e0a\u8ff0\u7ed3\u679c\u663e\u793a：www.baidu.com \u8bbe\u7f6e\u4e86 CNAME \u522b\u540d\u6307\u5411 www.a.shifen.com，\u8be5\u522b\u540d\u5bf9\u5e94\u4e24\u6761 A \u8bb0\u5f55（14.215.177.38 \u548c 14.215.177.39）\u3002<\/p>\n

                            \u7b2c\u56db\u6bb5：\u6388\u6743\u6bb5（AUTHORITY SECTION）<\/p>\n

                            ;; AUTHORITY SECTION:
                            \na.shifen.com. 714 IN NS ns1.a.shifen.com.
                            \na.shifen.com. 714 IN NS ns5.a.shifen.com.
                            \na.shifen.com. 714 IN NS ns2.a.shifen.com.
                            \na.shifen.com. 714 IN NS ns4.a.shifen.com.
                            \na.shifen.com. 714 IN NS ns3.a.shifen.com.<\/p>\n

                            \u8fd4\u56de a.shifen.com \u7684 5 \u6761 NS \u8bb0\u5f55，\u5373\u8d1f\u8d23\u7ba1\u7406\u8be5\u57df\u540d\u7684 5 \u4e2a\u6743\u5a01 DNS \u670d\u52a1\u5668\u3002<\/p>\n

                            \u7b2c\u4e94\u6bb5：\u9644\u52a0\u6bb5（ADDITIONAL SECTION）<\/p>\n

                            ;; ADDITIONAL SECTION:
                            \nns1.a.shifen.com. 165 IN A 110.242.68.42
                            \nns2.a.shifen.com. 162 IN A 220.181.33.32
                            \nns3.a.shifen.com. 396 IN A 112.80.255.253
                            \nns4.a.shifen.com. 101 IN A 14.215.177.229
                            \nns5.a.shifen.com. 589 IN A 180.76.76.95
                            \nns5.a.shifen.com. 119 IN AAAA 240e:940:603:a:0:ff:b08d:239d
                            \nns5.a.shifen.com. 119 IN AAAA 240e:bf:b801:1006:0:ff:b04f:346b<\/p>\n

                            \u8fd4\u56de NS \u8bb0\u5f55\u4e2d\u5404\u670d\u52a1\u5668\u4e3b\u673a\u540d\u5bf9\u5e94\u7684 A \u8bb0\u5f55\u548c AAAA \u8bb0\u5f55（IP \u5730\u5740）\u3002<\/p>\n

                            \u7b2c\u516d\u6bb5：\u67e5\u8be2\u7edf\u8ba1\u4fe1\u606f<\/p>\n

                            ;; Query time: 5 msec
                            \n;; SERVER: 202.103.24.68#53(202.103.24.68)
                            \n;; WHEN: Thu Jun 23 10:48:49 CST 2022
                            \n;; MSG SIZE rcvd: 316<\/p>\n\n\u5b57\u6bb5\u542b\u4e49<\/tr>\n\n\n\n\n\n
                            Query time: 5 msec<\/td>\n\u67e5\u8be2\u8017\u65f6 5 \u6beb\u79d2<\/td>\n<\/tr>\n
                            SERVER: 202.103.24.68#53<\/td>\n\u67e5\u8be2\u7684 DNS \u670d\u52a1\u5668\u5730\u5740\u53ca\u7aef\u53e3（53 \u4e3a DNS \u9ed8\u8ba4\u7aef\u53e3）<\/td>\n<\/tr>\n
                            WHEN<\/td>\n\u67e5\u8be2\u65f6\u95f4<\/td>\n<\/tr>\n
                            MSG SIZE rcvd: 316<\/td>\n\u54cd\u5e94\u62a5\u6587\u5927\u5c0f（\u5b57\u8282）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                            \"dig\u67e5\u8be2\u7ed3\u679c\"<\/p>\n

                            8.2 \u76f4\u63a5\u663e\u793a\u5bfb\u5740\u7ed3\u679c<\/h4>\n

                            \u4f7f\u7528 +short \u53c2\u6570\u53ef\u7b80\u5316\u8f93\u51fa，\u76f4\u63a5\u8fd4\u56de\u57df\u540d\u5bf9\u5e94\u7684 IP \u5730\u5740\u6216\u522b\u540d：<\/p>\n

                            # \u76f4\u63a5\u663e\u793awww.baidu.com\u5bf9\u5e94\u7684IP\u5730\u5740\u548cCNAME<\/span>
                            \ndig<\/span> +short www.baidu.com
                            \n# \u8f93\u51fa:<\/span>
                            \n# www.a.shifen.com.<\/span>
                            \n# 14.215.177.39<\/span>
                            \n# 14.215.177.38<\/span><\/p>\n

                            8.3 \u5411\u7279\u5b9a DNS \u670d\u52a1\u5668\u67e5\u8be2<\/h4>\n

                            \u4f7f\u7528 @ \u53c2\u6570\u6307\u5b9a\u67e5\u8be2\u7684 DNS \u670d\u52a1\u5668\u5730\u5740：<\/p>\n

                            # \u5411Google\u516c\u5171DNS\u670d\u52a1\u5668\u67e5\u8be2<\/span>
                            \ndig<\/span> @8.8.8.8 www.baidu.com<\/p>\n

                            \u4e0d\u540c DNS \u670d\u52a1\u5668\u53ef\u80fd\u8fd4\u56de\u4e0d\u540c\u7684\u89e3\u6790\u7ed3\u679c（\u56e0\u5404\u670d\u52a1\u5668\u7f13\u5b58\u72b6\u6001\u548c\u5730\u7406\u4f4d\u7f6e\u5dee\u5f02），\u8fd9\u5c5e\u4e8e\u6b63\u5e38\u73b0\u8c61，\u4e0d\u4ee3\u8868\u67d0\u53f0\u670d\u52a1\u5668\u5b58\u5728\u9519\u8bef\u3002<\/p>\n

                            \u4ec5\u663e\u793a ANSWER SECTION \u5185\u5bb9\u53ef\u4f7f\u7528 +noall +answer \u53c2\u6570：<\/p>\n

                            # \u4ec5\u663e\u793a\u7b54\u6848\u6bb5\u5185\u5bb9<\/span>
                            \ndig<\/span> @8.8.8.8 www.baidu.com +noall +answer<\/p>\n

                            8.4 \u67e5\u8be2 A \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2www.baidu.com\u7684A\u8bb0\u5f55<\/span>
                            \ndig<\/span> a www.baidu.com<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; QUESTION SECTION:
                            \n;www.baidu.com. IN A<\/p>\n

                            ;; ANSWER SECTION:
                            \nwww.baidu.com. 600 IN CNAME www.a.shifen.com.
                            \nwww.a.shifen.com. 600 IN A 14.215.177.39
                            \nwww.a.shifen.com. 600 IN A 14.215.177.38<\/p>\n

                            8.5 \u67e5\u8be2 AAAA \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2ns5.a.shifen.com\u7684AAAA\u8bb0\u5f55(IPv6)<\/span>
                            \ndig<\/span> aaaa ns5.a.shifen.com.<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; QUESTION SECTION:
                            \n;ns5.a.shifen.com.INAAAA<\/p>\n

                            ;; ANSWER SECTION:
                            \nns5.a.shifen.com.600INAAAA240e:940:603:a:0:ff:b08d:239d
                            \nns5.a.shifen.com.600INAAAA240e:bf:b801:1006:0:ff:b04f:346b<\/p>\n

                            8.6 \u67e5\u8be2 CNAME \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2www.baidu.com\u7684CNAME\u8bb0\u5f55<\/span>
                            \ndig<\/span> cname www.baidu.com<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; ANSWER SECTION:
                            \nwww.baidu.com. 600 IN CNAME www.a.shifen.com.<\/p>\n

                            8.7 \u67e5\u8be2 MX \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2www.baidu.com\u7684MX\u8bb0\u5f55<\/span>
                            \ndig<\/span> mx www.baidu.com<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; ANSWER SECTION:
                            \nwww.baidu.com.350INCNAMEwww.a.shifen.com.<\/p>\n

                            ;; AUTHORITY SECTION:
                            \na.shifen.com.600INSOAns1.a.shifen.com. baidu_dns_master.baidu.com. 2206230007 5 5 2592000 3600<\/p>\n

                            \u4e0a\u8ff0\u7ed3\u679c\u663e\u793a www.baidu.com \u5b58\u5728 CNAME \u522b\u540d\u6307\u5411 www.a.shifen.com，\u800c a.shifen.com \u7684 SOA \u8bb0\u5f55\u8868\u660e\u5176\u6743\u5a01\u670d\u52a1\u5668\u4fe1\u606f\u3002\u9700\u6ce8\u610f：\u82e5 MX \u8bb0\u5f55\u67e5\u8be2\u8fd4\u56de\u7684\u662f CNAME \u800c\u975e MX \u8bb0\u5f55，\u8bf4\u660e\u8be5\u57df\u540d\u672a\u76f4\u63a5\u914d\u7f6e MX \u8bb0\u5f55（MX \u53ef\u80fd\u914d\u7f6e\u5728 CNAME \u6307\u5411\u7684\u76ee\u6807\u57df\u540d\u4e0a）\u3002<\/p>\n

                            8.8 \u67e5\u8be2 NS \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2baidu.com\u7684NS\u8bb0\u5f55<\/span>
                            \ndig<\/span> ns baidu.com<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; ANSWER SECTION:
                            \nbaidu.com.86400INNSns7.baidu.com.
                            \nbaidu.com.86400INNSns4.baidu.com.
                            \nbaidu.com.86400INNSns2.baidu.com.
                            \nbaidu.com.86400INNSns3.baidu.com.
                            \nbaidu.com.86400INNSdns.baidu.com.<\/p>\n

                            baidu.com \u5171\u6709 5 \u6761 NS \u8bb0\u5f55，\u5206\u522b\u6307\u5411 ns7.baidu.com\u3001ns4.baidu.com\u3001ns2.baidu.com\u3001ns3.baidu.com\u3001dns.baidu.com\u3002<\/p>\n

                            \u6ce8\u610f： dig ns www.baidu.com \u65e0\u6cd5\u67e5\u8be2\u5230 NS \u8bb0\u5f55，\u56e0\u4e3a NS \u8bb0\u5f55\u4ec5\u5b58\u5728\u4e8e\u9876\u7ea7\u57df\u540d（\u4e00\u7ea7\u57df\u540d）\u5c42\u7ea7\u3002<\/p>\n

                            8.9 \u67e5\u8be2 PTR \u8bb0\u5f55<\/h4>\n

                            \u4f7f\u7528 -x \u53c2\u6570\u8fdb\u884c IP \u5730\u5740\u53cd\u5411\u89e3\u6790：<\/p>\n

                            # \u67e5\u8be2192.30.252.153\u7684\u53cd\u5411\u89e3\u6790\u57df\u540d<\/span>
                            \ndig<\/span> -x<\/span> 192.30<\/span>.252.153<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; ANSWER SECTION:
                            \n153.252.30.192.in-addr.arpa. 3315 INPTRlb-192-30-252-153-iad.github.com.<\/p>\n

                            \u67e5\u8be2\u7ed3\u679c\u8868\u660e IP 192.30.252.153 \u53cd\u5411\u89e3\u6790\u5f97\u5230\u7684\u57df\u540d\u4e3a lb-192-30-252-153-iad.github.com（GitHub \u7684\u4e8c\u7ea7\u57df\u540d）\u3002<\/p>\n

                            8.10 \u67e5\u8be2 SOA \u8bb0\u5f55<\/h4>\n

                            # \u67e5\u8be2baidu.com\u7684SOA\u8bb0\u5f55<\/span>
                            \ndig<\/span> soa baidu.com<\/p>\n

                            \u6267\u884c\u7ed3\u679c（\u90e8\u5206）：<\/p>\n

                            ;; ANSWER SECTION:
                            \nbaidu.com.7200INSOAdns.baidu.com. sa.baidu.com. 2012145453 300 300 2592000 7200<\/p>\n

                            8.11 \u67e5\u770b DNS \u4e3b\u4ece\u540c\u6b65\u53c2\u6570<\/h4>\n

                            \u901a\u8fc7 SOA \u8bb0\u5f55\u53ef\u4e86\u89e3 DNS \u4e3b\u4ece\u670d\u52a1\u5668\u7684\u540c\u6b65\u914d\u7f6e：<\/p>\n

                            # \u67e5\u8be2www.baidu.com\u7684SOA\u8bb0\u5f55\u4ee5\u67e5\u770b\u4e3b\u4ece\u540c\u6b65\u53c2\u6570<\/span>
                            \ndig<\/span> -t<\/span> soa www.baidu.com<\/p>\n

                            SOA \u8bb0\u5f55\u683c\u5f0f\u4e3a：<\/p>\n

                            \u4e3b\u670d\u52a1\u5668\u540d \u7ba1\u7406\u5458\u90ae\u7bb1 \u5e8f\u5217\u53f7 \u5237\u65b0\u95f4\u9694 \u91cd\u8bd5\u95f4\u9694 \u8fc7\u671f\u65f6\u95f4 \u6700\u5c0fTTL<\/p>\n

                            \u4ee5 baidu.com \u7684 SOA \u8bb0\u5f55\u4e3a\u4f8b：<\/p>\n

                            dns.baidu.com. sa.baidu.com. 2012145453 300 300 2592000 7200<\/p>\n

                            \u5404\u53c2\u6570\u542b\u4e49：<\/p>\n\n\u53c2\u6570\u4f4d\u7f6e\u503c\u542b\u4e49<\/tr>\n\n\n\n\n\n\n\n\n
                            \u7b2c 1 \u4f4d<\/td>\ndns.baidu.com.<\/td>\n\u4e3b\u670d\u52a1\u5668\u4e3b\u673a\u540d<\/td>\n<\/tr>\n
                            \u7b2c 2 \u4f4d<\/td>\nsa.baidu.com.<\/td>\n\u7ba1\u7406\u5458\u90ae\u7bb1（sa.baidu.com. \u5b9e\u9645\u5bf9\u5e94 sa+baidu.com，\u5373 sa@baidu.com）<\/td>\n<\/tr>\n
                            \u7b2c 3 \u4f4d<\/td>\n2012145453<\/td>\n\u5e8f\u5217\u53f7（\u6570\u636e\u5e93\u7248\u672c\u53f7）<\/td>\n<\/tr>\n
                            \u7b2c 4 \u4f4d<\/td>\n300<\/td>\n\u5237\u65b0\u95f4\u9694（\u79d2），Slave \u6bcf\u9694 300 \u79d2\u5411 Master \u8bf7\u6c42\u540c\u6b65<\/td>\n<\/tr>\n
                            \u7b2c 5 \u4f4d<\/td>\n300<\/td>\n\u91cd\u8bd5\u95f4\u9694（\u79d2），\u540c\u6b65\u5931\u8d25\u540e\u6bcf\u9694 300 \u79d2\u91cd\u8bd5<\/td>\n<\/tr>\n
                            \u7b2c 6 \u4f4d<\/td>\n2592000<\/td>\n\u8fc7\u671f\u65f6\u95f4（\u79d2），Slave \u6301\u7eed\u65e0\u6cd5\u8054\u7cfb Master \u8fbe 2592000 \u79d2（30 \u5929）\u540e\u505c\u6b62\u63d0\u4f9b\u8be5\u57df\u540d\u7684\u89e3\u6790\u670d\u52a1<\/td>\n<\/tr>\n
                            \u7b2c 7 \u4f4d<\/td>\n7200<\/td>\n\u6700\u5c0f TTL（\u79d2），\u8d1f\u7f13\u5b58（NXDOMAIN）\u7684\u9ed8\u8ba4\u7f13\u5b58\u65f6\u95f4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                            \"SOA\u8bb0\u5f55\u8be6\u89e3\"<\/p>\n

                            \"SOA\u53c2\u6570\u8bf4\u660e\"<\/p>\n

                            \n

                            9. DNS \u7f13\u5b58\u4e0e\u89e3\u6790\u65f6\u6548<\/h3>\n

                            9.1 \u57df\u540d\u7f13\u5b58\u673a\u5236<\/h4>\n

                            DNS \u7f13\u5b58\u662f\u63d0\u5347\u57df\u540d\u89e3\u6790\u6548\u7387\u7684\u5173\u952e\u673a\u5236\u3002\u5f53 DNS \u670d\u52a1\u5668\u4e0b\u53d1\u89e3\u6790\u7ed3\u679c\u65f6，\u4f1a\u9644\u5e26 TTL \u503c\u6307\u5b9a\u7f13\u5b58\u6709\u6548\u671f\u3002\u7f13\u5b58\u4e0d\u4ec5\u5b58\u5728\u4e8e DNS \u670d\u52a1\u5668\u7aef，\u4e5f\u5b58\u5728\u4e8e\u7528\u6237\u7ec8\u7aef（\u64cd\u4f5c\u7cfb\u7edf\u7ea7\u522b）\u3002<\/p>\n

                            \u89e3\u6790\u57df\u540d\u65f6\u7684\u67e5\u8be2\u987a\u5e8f\u4e3a：<\/p>\n

                          • \u6d4f\u89c8\u5668\u7f13\u5b58<\/li>\n
                          • \u64cd\u4f5c\u7cfb\u7edf\u672c\u5730\u7f13\u5b58（\u5982 Windows \u7684 DNS \u7f13\u5b58\u3001Linux \u7684 nscd\/systemd-resolved）<\/li>\n
                          • \u672c\u5730 Hosts \u6587\u4ef6（\u4f18\u5148\u7ea7\u9ad8\u4e8e DNS \u670d\u52a1\u5668\u67e5\u8be2）<\/li>\n
                          • \u672c\u5730 DNS \u89e3\u6790\u5668\u7f13\u5b58<\/li>\n
                          • ISP DNS \u670d\u52a1\u5668\u7f13\u5b58<\/li>\n
                          • \u9012\u5f52 DNS \u670d\u52a1\u5668\u7f13\u5b58<\/li>\n
                          • \u6743\u5a01 DNS \u670d\u52a1\u5668<\/li>\n

                            9.2 \u7f13\u5b58\u6e05\u9664\u65b9\u6cd5<\/h4>\n

                            Windows \u7cfb\u7edf：<\/p>\n

                            \u67e5\u770b DNS \u7f13\u5b58：<\/p>\n

                            # \u67e5\u770b\u5f53\u524dDNS\u7f13\u5b58\u5185\u5bb9<\/span>
                            \nipconfig \/displaydns<\/p>\n

                            \u6e05\u9664 DNS \u7f13\u5b58：<\/p>\n

                            # \u6e05\u9664DNS\u7f13\u5b58\u5e76\u91cd\u65b0\u83b7\u53d6\u89e3\u6790<\/span>
                            \nipconfig \/flushdns<\/p>\n

                            \"Windows\u6e05\u9664DNS\u7f13\u5b58\"<\/p>\n

                            Linux \u7cfb\u7edf：<\/p>\n

                            \u672a\u5b89\u88c5 DNS \u7f13\u5b58\u670d\u52a1（\u5982 nscd\u3001systemd-resolved）\u7684 Linux \u7cfb\u7edf\u901a\u5e38\u65e0\u672c\u5730 DNS \u7f13\u5b58\u3002\u7f13\u5b58\u53ef\u80fd\u6765\u6e90\u4e8e\u4e2d\u95f4\u8282\u70b9（\u5982\u8def\u7531\u5668\/ISP DNS \u670d\u52a1\u5668），\u53ef\u901a\u8fc7 nslookup \u67e5\u770b\u5f53\u524d\u4f7f\u7528\u7684 DNS \u670d\u52a1\u5668\u5730\u5740：<\/p>\n

                            # \u67e5\u770b\u57df\u540d\u89e3\u6790\u7ed3\u679c\u53ca\u4f7f\u7528\u7684DNS\u670d\u52a1\u5668<\/span>
                            \nnslookup<\/span> www.example.com<\/p>\n

                            \u82e5\u4f7f\u7528 BIND \u4f5c\u4e3a DNS \u670d\u52a1\u5668，\u53ef\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u6e05\u9664\u7f13\u5b58：<\/p>\n

                            # \u6e05\u9664BIND DNS\u670d\u52a1\u5668\u7684\u7f13\u5b58<\/span>
                            \nrndc -s<\/span> 127.0<\/span>.0.1 flush<\/p>\n

                            9.3 \u672c\u5730 Hosts \u6587\u4ef6<\/h4>\n

                            \u672c\u5730 Hosts \u6587\u4ef6\u63d0\u4f9b\u57df\u540d\u5230 IP \u5730\u5740\u7684\u9759\u6001\u6620\u5c04，\u4f18\u5148\u7ea7\u9ad8\u4e8e DNS \u670d\u52a1\u5668\u67e5\u8be2\u3002<\/p>\n

                            Windows \u8def\u5f84：<\/p>\n

                            C:\\\\Windows\\\\System32\\\\drivers\\\\etc\\\\hosts<\/p>\n

                            Linux \u8def\u5f84：<\/p>\n

                            \/etc\/hosts<\/p>\n

                            Hosts \u6587\u4ef6\u683c\u5f0f：<\/p>\n

                            # IP\u5730\u5740 \u57df\u540d
                            \n1.1.1.1 www.dd.com
                            \n1.1.1.1 baidu.com<\/p>\n

                            \u914d\u7f6e\u540e\u53ef\u901a\u8fc7 ping \u547d\u4ee4\u9a8c\u8bc1：<\/p>\n

                            # \u6d4b\u8bd5\u57df\u540d\u89e3\u6790\u662f\u5426\u751f\u6548<\/span>
                            \nping<\/span> www.dd.com<\/p>\n

                            \"Hosts\u6587\u4ef6\u914d\u7f6e\u793a\u4f8b\"<\/p>\n

                            \"Hosts\u6620\u5c04\u9a8c\u8bc1\"<\/p>\n

                            \"Ping\u6d4b\u8bd5\u7ed3\u679c\"<\/p>\n

                            9.4 \u5185\u7f51\u4e0e\u5916\u7f51\u7f13\u5b58\u5dee\u5f02<\/h4>\n

                            \u5185\u7f51\u73af\u5883： \u81ea\u5efa DNS \u670d\u52a1\u5668\u53ef\u5b8c\u5168\u63a7\u5236\u7f13\u5b58 TTL\u3002\u82e5\u9700\u5feb\u901f\u5207\u6362\u57df\u540d\u6307\u5411，\u53ef\u9884\u5148\u5c06 TTL \u8bbe\u4e3a\u8f83\u5c0f\u503c（\u5982 30 \u79d2），\u7b49\u5f85\u6240\u6709\u5ba2\u6237\u7aef\u7f13\u5b58\u8fc7\u671f\u540e\u518d\u4fee\u6539\u8bb0\u5f55\u3002<\/p>\n

                            \"\u5185\u7f51DNS\u89e3\u6790\"<\/p>\n

                            \u5916\u7f51\u73af\u5883： \u7528\u6237\u57df\u540d\u89e3\u6790\u7ecf\u8fc7\u8fd0\u8425\u5546 DNS \u670d\u52a1\u5668，\u8fd0\u8425\u5546\u53ef\u80fd\u5f3a\u5236\u8bbe\u7f6e\u6700\u5c0f\u7f13\u5b58\u65f6\u95f4（\u5982 1 \u5c0f\u65f6），\u5bfc\u81f4\u81ea\u884c\u8bbe\u7f6e\u7684\u77ed TTL \u4e0d\u751f\u6548\u3002\u6b64\u65f6\u65e0\u6cd5\u4fdd\u8bc1\u6240\u6709\u7528\u6237\u7ec8\u7aef\u5b9e\u73b0\u79d2\u7ea7\u5207\u6362，\u4f46\u5927\u90e8\u5206\u5730\u533a\u7684\u89e3\u6790\u66f4\u65b0\u53ef\u5728\u8f83\u77ed\u65f6\u95f4\u5185\u751f\u6548\u3002<\/p>\n

                            \"\u5916\u7f51DNS\u7f13\u5b58\"<\/p>\n

                            9.5 \u6743\u5a01\u670d\u52a1\u5668\u4e0e\u4e2d\u95f4\u8282\u70b9<\/h4>\n

                            \u5728\u67d0\u4e9b\u7f51\u7edc\u67b6\u6784\u4e2d（\u5982\u5b58\u5728 DMZ \u9694\u79bb\u533a\u57df\u7684\u5185\u7f51），\u57df\u540d\u89e3\u6790\u53ef\u80fd\u7ecf\u8fc7\u4e2d\u95f4\u8282\u70b9（\u5982\u7f51\u5173\u8def\u7531\u5668）\u8fdb\u884c\u9012\u5f52\u67e5\u8be2\u8f6c\u53d1\u3002\u53ef\u901a\u8fc7 dig \u547d\u4ee4\u89c2\u5bdf\u54cd\u5e94\u4e2d\u7684 SERVER \u5b57\u6bb5\u548c AA（Authoritative Answer）\u6807\u5fd7\u4f4d\u5224\u65ad\u662f\u5426\u4e3a\u6743\u5a01\u5e94\u7b54：<\/p>\n

                            # \u89c2\u5bdfDNS\u67e5\u8be2\u7ecf\u8fc7\u7684\u670d\u52a1\u5668\u53ca\u662f\u5426\u4e3a\u6743\u5a01\u5e94\u7b54<\/span>
                            \ndig<\/span> www.baidu.com
                            \n# \u82e5\u663e\u793a "SERVER: 192.168.3.1#53(192.168.3.1)" \u4e14\u6807\u6ce8 "\u975e\u6743\u5a01\u5e94\u7b54"，<\/span>
                            \n# \u8bf4\u660e\u8bf7\u6c42\u7ecf\u7531\u4e2d\u95f4\u8282\u70b9（\u5982\u8def\u7531\u5668）\u9012\u5f52\u67e5\u8be2\u540e\u8fd4\u56de<\/span><\/p>\n

                            \"DNS\u4e2d\u95f4\u8282\u70b9\u89e3\u6790\"<\/p>\n

                            \n
                            \n

                            10. DNS \u5b89\u5168\u4e0e\u52a0\u5bc6\u4f20\u8f93<\/h3>\n

                            10.1 DNSSEC（DNS Security Extensions）<\/h4>\n

                            DNSSEC \u662f\u4e00\u7ec4 DNS \u6269\u5c55\u89c4\u8303（RFC 4033~RFC 4035），\u4e3a DNS \u67e5\u8be2\u63d0\u4f9b\u8eab\u4efd\u9a8c\u8bc1\u548c\u6570\u636e\u5b8c\u6574\u6027\u4fdd\u62a4\u3002\u4f20\u7edf DNS \u534f\u8bae\u5728\u8bbe\u8ba1\u65f6\u672a\u8003\u8651\u5b89\u5168\u6027，\u67e5\u8be2\u54cd\u5e94\u672a\u7ecf\u6570\u5b57\u7b7e\u540d，\u5bb9\u6613\u53d7\u5230\u7f13\u5b58\u6295\u6bd2（Cache Poisoning）\u3001DNS \u52ab\u6301（DNS Hijacking）\u548c\u4e2d\u95f4\u4eba\u653b\u51fb（MITM）\u7b49\u5a01\u80c1\u3002<\/p>\n

                            DNSSEC \u901a\u8fc7\u4ee5\u4e0b\u673a\u5236\u589e\u5f3a\u5b89\u5168\u6027：<\/p>\n

                              \n
                            • \u6570\u636e\u7b7e\u540d：\u57df\u540d\u6240\u6709\u8005\u4f7f\u7528\u79c1\u94a5\u5bf9 DNS \u8bb0\u5f55\u8fdb\u884c\u6570\u5b57\u7b7e\u540d，\u89e3\u6790\u5668\u4f7f\u7528\u5bf9\u5e94\u7684\u516c\u94a5\u9a8c\u8bc1\u7b7e\u540d\u771f\u5b9e\u6027\u3002<\/li>\n
                            • \u94fe\u5f0f\u4fe1\u4efb：\u4ece\u6839\u57df（.）\u5f00\u59cb，\u901a\u8fc7 DS \u8bb0\u5f55（Delegation Signer）\u5728\u7236\u57df\u4e0e\u5b50\u57df\u4e4b\u95f4\u5efa\u7acb\u4fe1\u4efb\u94fe，\u9010\u7ea7\u5411\u4e0b\u9a8c\u8bc1\u81f3\u76ee\u6807\u57df\u540d\u3002<\/li>\n
                            • \u9632\u7f13\u5b58\u6295\u6bd2：\u7531\u4e8e\u54cd\u5e94\u6570\u636e\u5e26\u6709\u7b7e\u540d，\u653b\u51fb\u8005\u65e0\u6cd5\u4f2a\u9020\u865a\u5047\u7684 DNS \u54cd\u5e94\u6ce8\u5165\u7f13\u5b58\u3002<\/li>\n<\/ul>\n

                              \u90e8\u7f72\u73b0\u72b6：\u6839\u57df\u548c\u5927\u591a\u6570\u9876\u7ea7\u57df（.com\u3001.net\u3001.org \u7b49）\u5df2\u542f\u7528 DNSSEC \u7b7e\u540d\u3002\u90e8\u5206\u57df\u540d\u6ce8\u518c\u5546\u548c DNS \u6258\u7ba1\u670d\u52a1\u5546\u63d0\u4f9b\u4e00\u952e\u542f\u7528 DNSSEC \u7684\u529f\u80fd\u3002\u542f\u7528\u540e\u9700\u786e\u4fdd\u6ce8\u518c\u5546\u5904\u914d\u7f6e\u7684 DS \u8bb0\u5f55\u4e0e\u6743\u5a01 DNS \u670d\u52a1\u5668\u4e0a\u7684 DNSKEY \u8bb0\u5f55\u5339\u914d\u3002<\/p>\n

                              10.2 DNS over HTTPS（DoH，RFC 8484）<\/h4>\n

                              DoH \u662f\u5c06 DNS \u67e5\u8be2\u5c01\u88c5\u5728 HTTPS \u8bf7\u6c42\u4e2d\u8fdb\u884c\u4f20\u8f93\u7684\u534f\u8bae\u3002\u4f20\u7edf DNS \u67e5\u8be2\u4ee5\u660e\u6587 UDP \u6570\u636e\u5305\u4f20\u8f93，\u5bb9\u6613\u88ab\u7f51\u7edc\u4e2d\u95f4\u8282\u70b9\u7a83\u542c\u6216\u7be1\u6539\u3002DoH \u5229\u7528 TLS \u52a0\u5bc6\u901a\u9053\u4fdd\u62a4 DNS \u67e5\u8be2\u9690\u79c1，\u540c\u65f6\u5229\u7528 HTTPS \u7684\u7aef\u53e3 443 \u89c4\u907f\u9632\u706b\u5899\u5bf9 DNS \u7aef\u53e3 53 \u7684\u5e72\u6270\u3002<\/p>\n

                              \u7279\u70b9：<\/p>\n

                                \n
                              • \u67e5\u8be2\u5185\u5bb9\u5bf9\u7f51\u7edc\u4e2d\u95f4\u8282\u70b9\u4e0d\u53ef\u89c1，\u9632\u6b62 DNS \u7a83\u542c\u548c\u52ab\u6301\u3002<\/li>\n
                              • \u4f7f\u7528\u7aef\u53e3 443（HTTPS \u9ed8\u8ba4\u7aef\u53e3），\u53ef\u7ed5\u8fc7\u90e8\u5206\u7f51\u7edc\u5bf9 DNS \u7aef\u53e3\u7684\u5c01\u9501\u3002<\/li>\n
                              • \u7531 Mozilla\u3001Google \u7b49\u5382\u5546\u63a8\u52a8，Firefox\u3001Chrome \u7b49\u6d4f\u89c8\u5668\u5df2\u539f\u751f\u652f\u6301 DoH \u914d\u7f6e\u3002<\/li>\n
                              • \u53ef\u80fd\u5f15\u53d1\u9690\u79c1\u6743\u8861：\u4f7f\u7528\u8fd0\u8425\u5546 DNS \u65f6\u8fd0\u8425\u5546\u53ef\u8bb0\u5f55\u67e5\u8be2\u65e5\u5fd7，\u6539\u7528\u516c\u5171 DoH \u670d\u52a1（\u5982 Cloudflare 1.1.1.1\u3001Google 8.8.8.8）\u5219\u5c06\u65e5\u5fd7\u63a7\u5236\u6743\u8f6c\u79fb\u81f3\u7b2c\u4e09\u65b9\u3002<\/li>\n<\/ul>\n

                                \u914d\u7f6e\u65b9\u5f0f：<\/p>\n

                                  \n
                                • \u6d4f\u89c8\u5668\u7ea7\u522b：\u5728\u6d4f\u89c8\u5668\u8bbe\u7f6e\u4e2d\u542f\u7528 \u201c\u52a0\u5bc6 DNS\u201d \u6216 \u201c\u5b89\u5168 DNS\u201d \u9009\u9879\u3002<\/li>\n
                                • \u64cd\u4f5c\u7cfb\u7edf\u7ea7\u522b：Windows 10\/11 \u652f\u6301\u901a\u8fc7\u8bbe\u7f6e > \u7f51\u7edc\u548c Internet > \u9ad8\u7ea7\u7f51\u7edc\u8bbe\u7f6e > DNS \u5ba2\u6237\u7aef\u8bbe\u7f6e\u914d\u7f6e DoH\u3002<\/li>\n
                                • \u7cfb\u7edf\u7ea7\u522b DNS \u670d\u52a1：\u53ef\u4f7f\u7528 systemd-resolved（Linux）\u914d\u5408 DoH \u540e\u7aef，\u6216\u4f7f\u7528 dnsmasq\u3001unbound \u7b49 DNS \u670d\u52a1\u5668\u8f6f\u4ef6\u652f\u6301 DoH \u8f6c\u53d1\u3002<\/li>\n<\/ul>\n

                                  10.3 DNS over TLS（DoT，RFC 7858）<\/h4>\n

                                  DoT \u662f\u4f7f\u7528 TLS \u52a0\u5bc6\u901a\u9053\u4f20\u8f93 DNS \u67e5\u8be2\u7684\u534f\u8bae，\u8fd0\u884c\u4e8e TCP \u7aef\u53e3 853\u3002\u4e0e DoH \u7c7b\u4f3c，DoT \u4e5f\u4e3a DNS \u67e5\u8be2\u63d0\u4f9b\u4f20\u8f93\u5c42\u52a0\u5bc6\u4fdd\u62a4，\u9632\u6b62\u7a83\u542c\u548c\u7be1\u6539\u3002<\/p>\n

                                  DoH \u4e0e DoT \u5bf9\u6bd4：<\/p>\n\n\u5bf9\u6bd4\u9879DoH（RFC 8484）DoT（RFC 7858）<\/tr>\n\n\n\n\n\n\n\n
                                  \u4f20\u8f93\u534f\u8bae<\/td>\nHTTPS（HTTP\/2 over TLS）<\/td>\nDNS over TLS（TCP）<\/td>\n<\/tr>\n
                                  \u9ed8\u8ba4\u7aef\u53e3<\/td>\n443<\/td>\n853<\/td>\n<\/tr>\n
                                  \u534f\u8bae\u517c\u5bb9\u6027<\/td>\n\u4e0e Web \u57fa\u7840\u8bbe\u65bd\u517c\u5bb9\u6027\u597d，\u53ef\u590d\u7528 CDN<\/td>\n\u9700\u4e13\u7528\u7aef\u53e3，\u90e8\u5206\u7f51\u7edc\u53ef\u80fd\u5c01\u9501<\/td>\n<\/tr>\n
                                  \u6d4f\u89c8\u5668\u652f\u6301<\/td>\nFirefox\u3001Chrome \u7b49\u539f\u751f\u652f\u6301<\/td>\n\u6d4f\u89c8\u5668\u5c42\u4e0d\u76f4\u63a5\u652f\u6301，\u9700\u7cfb\u7edf\u7ea7\u914d\u7f6e<\/td>\n<\/tr>\n
                                  \u90e8\u7f72\u590d\u6742\u5ea6<\/td>\n\u9700 HTTPS \u8bc1\u4e66\u914d\u7f6e<\/td>\n\u4ec5\u9700 TLS \u8bc1\u4e66，\u90e8\u7f72\u76f8\u5bf9\u7b80\u5355<\/td>\n<\/tr>\n
                                  \u9690\u79c1\u6743\u8861<\/td>\n\u67e5\u8be2\u4f2a\u88c5\u4e3a HTTPS \u6d41\u91cf，\u96be\u4ee5\u88ab\u6df1\u5ea6\u68c0\u6d4b<\/td>\n\u7aef\u53e3 853 \u53ef\u80fd\u88ab\u7f51\u7edc\u7b56\u7565\u8bc6\u522b\u548c\u5c01\u9501<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                  \u9009\u62e9\u5efa\u8bae：<\/p>\n

                                    \n
                                  • \u5728\u9700\u8981\u6d4f\u89c8\u5668\u5c42\u9762\u76f4\u63a5\u914d\u7f6e\u7684\u573a\u666f\u4e2d，DoH \u66f4\u4e3a\u65b9\u4fbf\u3002<\/li>\n
                                  • \u5728\u670d\u52a1\u5668\u7aef\u90e8\u7f72\u7edf\u4e00 DNS \u52a0\u5bc6\u7684\u573a\u666f\u4e2d，DoT \u90e8\u7f72\u66f4\u4e3a\u8f7b\u91cf\u3002<\/li>\n
                                  • \u4e24\u8005\u53ef\u5e76\u884c\u90e8\u7f72，\u5ba2\u6237\u7aef\u4f18\u5148\u4f7f\u7528 DoH，\u964d\u7ea7\u4f7f\u7528 DoT，\u6700\u7ec8\u964d\u7ea7\u4e3a\u4f20\u7edf\u660e\u6587 DNS\u3002<\/li>\n<\/ul>\n

                                    10.4 EDNS0（Extension Mechanisms for DNS）<\/h4>\n

                                    EDNS0（RFC 6891）\u662f DNS \u6269\u5c55\u673a\u5236，\u5141\u8bb8 DNS \u534f\u8bae\u5728\u4e0d\u6539\u53d8\u57fa\u7840\u534f\u8bae\u7684\u524d\u63d0\u4e0b\u8fdb\u884c\u6269\u5c55\u3002EDNS0 \u901a\u8fc7\u5f15\u5165 OPT \u4f2a\u8d44\u6e90\u8bb0\u5f55\u5b9e\u73b0\u4ee5\u4e0b\u80fd\u529b：<\/p>\n

                                      \n
                                    • \u6269\u5c55\u6d88\u606f\u5927\u5c0f：\u9ed8\u8ba4 DNS \u6d88\u606f\u6700\u5927 512 \u5b57\u8282（UDP），EDNS0 \u5141\u8bb8\u5ba2\u6237\u7aef\u58f0\u660e\u652f\u6301\u66f4\u5927\u7684 UDP \u6d88\u606f\u5c3a\u5bf8（\u901a\u5e38\u53ef\u8fbe 4096 \u5b57\u8282），\u51cf\u5c11\u56e0\u6d88\u606f\u622a\u65ad\u5bfc\u81f4\u7684 TCP \u56de\u9000\u3002<\/li>\n
                                    • DNSSEC \u6807\u5fd7\u4f4d（DO \u6807\u5fd7）：\u5ba2\u6237\u7aef\u901a\u8fc7 EDNS0 \u7684 DO \u6807\u5fd7\u4f4d\u58f0\u660e\u652f\u6301 DNSSEC \u9a8c\u8bc1，\u670d\u52a1\u5668\u5728\u54cd\u5e94\u4e2d\u9644\u5e26 RRSIG \u8bb0\u5f55\u3002<\/li>\n
                                    • \u5ba2\u6237\u7aef\u7aef\u53e3\u5b50\u96c6（CPF）\u548c Cookie \u9009\u9879：\u7528\u4e8e\u7f13\u89e3 DNS \u653e\u5927\u653b\u51fb\u548c\u8eab\u4efd\u9a8c\u8bc1\u3002<\/li>\n<\/ul>\n

                                      \u73b0\u4ee3 DNS \u89e3\u6790\u5668（\u5982 systemd-resolved\u3001unbound\u3001bind9）\u9ed8\u8ba4\u542f\u7528 EDNS0 \u652f\u6301\u3002<\/p>\n

                                      \n
                                      \n

                                      11. CNAME \u8bb0\u5f55\u673a\u5236<\/h3>\n

                                      11.1 AAAA \u8bb0\u5f55\u540d\u79f0\u7531\u6765<\/h4>\n

                                      AAAA \u8bb0\u5f55\u4e4b\u6240\u4ee5\u88ab\u79f0\u4e3a"\u56db\u4e2a A"，\u662f\u56e0\u4e3a IPv6 \u5730\u5740\u957f\u5ea6\u662f IPv4 \u5730\u5740\u7684 4 \u500d\u3002DNS \u534f\u8bae\u6700\u65e9\u5b9a\u4e49 A \u8bb0\u5f55\u65f6，\u7528\u4e8e\u5c06\u57df\u540d\u6620\u5c04\u5230 32 \u4f4d\u7684 IPv4 \u5730\u5740\u3002\u540e\u6765\u9700\u8981\u652f\u6301 128 \u4f4d\u7684 IPv6 \u5730\u5740，\u9700\u8981\u4e00\u4e2a\u65b0\u7684\u8bb0\u5f55\u7c7b\u578b\u3002\u8bbe\u8ba1\u8005\u9009\u62e9\u4e86 AAAA（quad-A），\u53d6"\u56db\u4e2a A"\u4e4b\u610f\u2014\u20144 x 32 \u4f4d = 128 \u4f4d，\u6b63\u597d\u5bf9\u5e94 IPv6 \u5730\u5740\u7684\u957f\u5ea6\u3002\u8fd9\u662f\u4e00\u79cd\u52a9\u8bb0\u7b26\u8bbe\u8ba1，\u65b9\u4fbf\u8bb0\u5fc6\u548c\u7406\u89e3\u4e24\u8005\u4e4b\u95f4\u7684\u5173\u7cfb\u3002<\/p>\n

                                      \u8be5\u8bb0\u5f55\u7c7b\u578b\u6700\u521d\u5728 RFC 1886（1996 \u5e74）\u4e2d\u5b9a\u4e49，\u540e\u7531 RFC 3596（2003 \u5e74）\u66f4\u65b0\u66ff\u4ee3\u3002IANA \u5206\u914d\u7684\u7c7b\u578b\u503c\u4e3a 28\u3002<\/p>\n

                                      11.2 CNAME \u522b\u540d\u8bed\u4e49\u89e3\u6790<\/h4>\n

                                      CNAME \u662f Canonical Name \u7684\u7f29\u5199，canonical \u610f\u4e3a"\u89c4\u8303\u7684\u3001\u6b63\u5f0f\u7684\u3001\u771f\u5b9e\u7684"\u3002\u8be5\u8bb0\u5f55\u7c7b\u578b\u5b9a\u4e49\u4e8e RFC 1034\u3002RFC 2181 \u4e13\u95e8\u6307\u51fa"CNAME"\u4e00\u8bcd\u5e38\u88ab\u8bef\u7528\u3002\u4e25\u683c\u800c\u8a00，CNAME \u8bb0\u5f55\u53f3\u4fa7\u7684\u503c\u624d\u662f\u771f\u6b63\u7684"\u89c4\u8303\u540d\u79f0"，\u5de6\u4fa7\u7684\u6807\u7b7e\u53ea\u662f\u8be5\u89c4\u8303\u540d\u79f0\u7684\u4e00\u4e2a\u522b\u540d\u3002<\/p>\n

                                      \u89e3\u6790\u5668\u67e5\u8be2\u5de6\u4fa7\u57df\u540d\u65f6，\u6536\u5230\u7684\u662f"\u8bf7\u53bb\u67e5\u53e6\u4e00\u4e2a\u57df\u540d"\u7684\u6307\u793a，\u968f\u540e\u4ee5\u53f3\u4fa7\u57df\u540d\u4e3a\u76ee\u6807\u91cd\u65b0\u53d1\u8d77\u67e5\u8be2，\u76f4\u81f3\u83b7\u5f97 A \u6216 AAAA \u8bb0\u5f55\u3002<\/p>\n

                                      \u4ee5\u8bb0\u5f55\u4e3a\u4f8b：<\/p>\n

                                        \n
                                      • blog.example.com \u2014\u2014 \u522b\u540d<\/li>\n
                                      • example.com \u2014\u2014 \u89c4\u8303\u540d\u79f0（\u771f\u5b9e\u540d\u79f0）<\/li>\n<\/ul>\n

                                        \u56e0\u6b64，CNAME \u8bb0\u5f55\u540d\u79f0\u672c\u8eab\u53d6\u81ea\u53f3\u4fa7\u7684"\u89c4\u8303\u540d\u79f0"，\u800c\u6574\u6761\u8bb0\u5f55\u7684\u529f\u80fd\u662f\u4e3a\u5de6\u4fa7\u57df\u540d\u63d0\u4f9b\u4e00\u4e2a\u522b\u540d\u673a\u5236，\u6545\u5728\u65e5\u5e38\u8868\u8ff0\u4e2d\u5e38\u76f4\u63a5\u79f0\u5176\u4e3a"\u522b\u540d\u8bb0\u5f55"\u3002<\/p>\n

                                        11.3 CNAME \u72ec\u5360\u8282\u70b9\u89c4\u5219\u4e0e\u8bb0\u5f55\u51b2\u7a81<\/h4>\n

                                        CNAME \u4e0d\u80fd\u4e0e MX\u3001NS\u3001A\u3001AAAA\u3001TXT \u7b49\u8bb0\u5f55\u5171\u5b58，\u662f\u56e0\u4e3a DNS \u534f\u8bae\u89c4\u5b9a：\u4e00\u65e6\u67d0\u4e2a\u4e3b\u673a\u540d\u4e0b\u5b58\u5728 CNAME \u8bb0\u5f55，\u8be5\u8282\u70b9\u4e0a\u7684\u5176\u4ed6\u8d44\u6e90\u8bb0\u5f55\u96c6\u5c06\u88ab\u89c6\u4e3a\u65e0\u6548，\u89e3\u6790\u5668\u5fc5\u987b\u6539\u7528 CNAME \u6307\u5411\u7684\u76ee\u6807\u57df\u540d\u7ee7\u7eed\u67e5\u8be2\u3002<\/p>\n

                                        11.3.1 \u534f\u8bae\u5c42\u9762：CNAME \u72ec\u5360\u8282\u70b9<\/h5>\n

                                        RFC 1034 \u7b2c 3.6.2 \u8282\u660e\u786e\u89c4\u5b9a：<\/p>\n

                                        \u82e5\u67d0\u8282\u70b9\u5b58\u5728 CNAME \u8bb0\u5f55，\u5219\u8be5\u8282\u70b9\u4e0d\u5f97\u5b58\u5728\u5176\u4ed6\u4efb\u4f55\u6570\u636e\u3002<\/p>\n

                                        RFC 2181 \u7b2c 10.1 \u8282\u8fdb\u4e00\u6b65\u5f3a\u8c03：CNAME \u8bb0\u5f55\u6240\u5728\u8282\u70b9\u4e0a，\u9664 DNSSEC \u76f8\u5173\u8bb0\u5f55（\u5982 RRSIG\u3001NSEC）\u5916，\u4e0d\u5f97\u51fa\u73b0\u5176\u4ed6\u4efb\u4f55\u7c7b\u578b\u7684\u8bb0\u5f55\u3002<\/p>\n

                                        \u8fd9\u610f\u5473\u7740\u5728 DNS \u6570\u636e\u7ed3\u6784\u4e2d，\u4e00\u4e2a\u4e3b\u673a\u540d（\u8282\u70b9）\u8981\u4e48\u76f4\u63a5\u6301\u6709\u8d44\u6e90\u8bb0\u5f55，\u8981\u4e48\u4f5c\u4e3a\u522b\u540d\u6307\u5411\u53e6\u4e00\u4e2a\u4e3b\u673a\u540d，\u4e8c\u8005\u4e0d\u53ef\u517c\u5f97\u3002<\/p>\n

                                        11.3.2 \u89e3\u6790\u6d41\u7a0b\u5c42\u9762：CNAME \u5177\u6709\u6700\u9ad8\u4f18\u5148\u7ea7<\/h5>\n

                                        \u5f53\u89e3\u6790\u5668\u67e5\u8be2\u67d0\u4e3b\u673a\u540d\u65f6，\u82e5\u8be5\u4e3b\u673a\u540d\u4e0b\u5b58\u5728 CNAME \u8bb0\u5f55，\u89e3\u6790\u5668\u4f1a\u4f18\u5148\u8fd4\u56de CNAME \u8bb0\u5f55，\u5e76\u81ea\u52a8\u8f6c\u5411\u67e5\u8be2 CNAME \u6307\u5411\u7684\u76ee\u6807\u57df\u540d，\u800c\u4e0d\u518d\u67e5\u8be2\u539f\u4e3b\u673a\u540d\u4e0b\u7684\u5176\u4ed6\u8bb0\u5f55\u3002<\/p>\n

                                        \u4ee5 www.example.com \u4e3a\u4f8b，\u82e5\u540c\u65f6\u5b58\u5728：<\/p>\n

                                        \u5f53\u90ae\u4ef6\u670d\u52a1\u5668\u67e5\u8be2 www.example.com \u7684 MX \u8bb0\u5f55\u65f6，\u6743\u5a01\u670d\u52a1\u5668\u4f1a\u8fd4\u56de CNAME \u8bb0\u5f55\u800c\u975e MX \u8bb0\u5f55\u3002\u89e3\u6790\u5668\u968f\u540e\u8f6c\u5411 cdn.example.net \u67e5\u8be2 MX，\u800c cdn.example.net \u901a\u5e38\u5e76\u65e0\u90ae\u4ef6\u76f8\u5173\u914d\u7f6e，\u5bfc\u81f4\u90ae\u4ef6\u6295\u9012\u5931\u8d25\u3002<\/p>\n

                                        11.3.3 \u5bf9\u5404\u7c7b\u8bb0\u5f55\u7684\u5177\u4f53\u5f71\u54cd<\/h5>\n\n\u51b2\u7a81\u8bb0\u5f55\u7c7b\u578b\u51b2\u7a81\u540e\u679c<\/tr>\n\n\n\n\n\n\n
                                        A \/ AAAA<\/td>\n\u89e3\u6790\u5668\u65e0\u6cd5\u76f4\u63a5\u83b7\u5f97 IP \u5730\u5740，\u5fc5\u987b\u901a\u8fc7 CNAME \u95f4\u63a5\u89e3\u6790<\/td>\n<\/tr>\n
                                        MX<\/td>\n\u90ae\u4ef6\u670d\u52a1\u5668\u65e0\u6cd5\u83b7\u53d6\u90ae\u4ef6\u4ea4\u6362\u8bb0\u5f55，\u5bfc\u81f4\u6536\u4fe1\u5931\u8d25\u6216\u4e22\u4fe1<\/td>\n<\/tr>\n
                                        TXT<\/td>\nSPF\u3001DKIM\u3001\u57df\u540d\u6240\u6709\u6743\u9a8c\u8bc1\u7b49 TXT \u6821\u9a8c\u5931\u6548<\/td>\n<\/tr>\n
                                        NS（\u5b50\u57df\u540d\u7ea7\u522b）<\/td>\n\u5b50\u57df\u540d\u7684\u6743\u5a01\u670d\u52a1\u5668\u59d4\u6d3e\u5931\u6548<\/td>\n<\/tr>\n
                                        SRV \/ CAA \/ SVCB<\/td>\n\u5bf9\u5e94\u670d\u52a1\u53d1\u73b0\u4e0e\u8bc1\u4e66\u9881\u53d1\u7b56\u7565\u65e0\u6cd5\u751f\u6548<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                        RFC 2181 \u7b2c 10.3 \u8282\u8fd8\u7279\u522b\u6307\u51fa：MX \u8bb0\u5f55\u548c NS \u8bb0\u5f55\u7684\u503c\u672c\u8eab\u4e5f\u4e0d\u5e94\u6307\u5411 CNAME \u8bb0\u5f55，\u56e0\u4e3a DNS \u7684\u9644\u52a0\u6bb5\u5904\u7406（additional section processing）\u4e0d\u4f1a\u4e3a\u522b\u540d\u5c55\u5f00\u5730\u5740\u8bb0\u5f55，\u4f1a\u5bfc\u81f4\u6bcf\u6b21\u67e5\u8be2\u90fd\u4ea7\u751f\u989d\u5916\u8bf7\u6c42，\u67d0\u4e9b\u4e25\u683c\u5b9e\u73b0\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u751a\u81f3\u4f1a\u76f4\u63a5\u62d2\u7edd\u6295\u9012\u3002<\/p>\n

                                        11.3.4 \u6839\u57df\u540d\u7684\u7279\u6b8a\u9650\u5236<\/h5>\n

                                        \u6839\u57df\u540d（\u533a\u57df\u9876\u70b9，\u5373 @）\u5fc5\u987b\u5305\u542b SOA \u548c NS \u8bb0\u5f55，\u56e0\u6b64\u6309\u534f\u8bae\u7981\u6b62\u8bbe\u7f6e CNAME \u8bb0\u5f55\u3002\u90e8\u5206\u4e91\u89e3\u6790\u670d\u52a1\u5546\u867d\u7136\u5141\u8bb8\u5728 @ \u8bb0\u5f55\u4e0a\u5f3a\u5236\u5171\u5b58 CNAME \u4e0e MX \/ TXT，\u4f46\u4f1a\u660e\u786e\u63d0\u793a\u5b58\u5728\u90ae\u7bb1\u6536\u4fe1\u5f02\u5e38\u6216 TXT \u6821\u9a8c\u5931\u8d25\u7684\u98ce\u9669，\u4e14\u901a\u5e38\u4e0d\u5728\u670d\u52a1\u7b49\u7ea7\u534f\u8bae\u4fdd\u969c\u8303\u56f4\u5185\u3002<\/p>\n

                                        11.3.5 \u66ff\u4ee3\u65b9\u6848<\/h5>\n

                                        \u82e5\u9700\u5728\u540c\u4e00\u4e3b\u673a\u540d\u4e0b\u5b9e\u73b0\u7c7b\u4f3c CNAME \u7684\u6307\u5411\u6548\u679c，\u53ef\u91c7\u7528\u4ee5\u4e0b\u65b9\u6848：<\/p>\n

                                          \n
                                        • ALIAS \/ ANAME \u8bb0\u5f55（\u53c8\u79f0 CNAME Flattening）：\u7531\u6743\u5a01\u670d\u52a1\u5668\u5728\u670d\u52a1\u7aef\u5c06 CNAME \u76ee\u6807\u89e3\u6790\u4e3a A \/ AAAA \u8bb0\u5f55\u540e\u76f4\u63a5\u8fd4\u56de，\u5ba2\u6237\u7aef\u611f\u77e5\u4e0d\u5230 CNAME \u7684\u5b58\u5728，\u56e0\u6b64\u4e0d\u4e0e\u5176\u4ed6\u8bb0\u5f55\u51b2\u7a81\u3002<\/li>\n
                                        • \u4f7f\u7528\u5b50\u57df\u540d：\u5c06 CNAME \u914d\u7f6e\u5728 www \u7b49\u5b50\u57df\u540d\u4e0a，\u6839\u57df\u540d\u4fdd\u7559 MX\u3001TXT \u7b49\u8bb0\u5f55\u3002<\/li>\n
                                        • \u76f4\u63a5\u4f7f\u7528 A \/ AAAA \u8bb0\u5f55：\u9002\u7528\u4e8e IP \u5730\u5740\u56fa\u5b9a\u7684\u573a\u666f\u3002<\/li>\n<\/ul>\n

                                          11.4 ALIAS \/ ANAME \u673a\u5236<\/h4>\n

                                          ALIAS \/ ANAME \u80fd\u7ed5\u8fc7\u51b2\u7a81，\u662f\u56e0\u4e3a\u5b83\u628a CNAME \u7684\u89e3\u6790\u52a8\u4f5c\u4ece\u5ba2\u6237\u7aef\u8f6c\u79fb\u5230\u4e86\u6743\u5a01 DNS \u670d\u52a1\u5668\u5185\u90e8：\u5bf9\u5916\u8fd4\u56de\u7684\u662f A \/ AAAA \u8bb0\u5f55，\u800c\u975e CNAME \u8bb0\u5f55，\u56e0\u6b64\u4e0d\u89e6\u53d1 RFC 1034 \u7684\u72ec\u5360\u89c4\u5219\u3002<\/p>\n

                                          11.4.1 CNAME \u7684\u51b2\u7a81\u6839\u6e90<\/h5>\n

                                          \u5f53\u5ba2\u6237\u7aef\u67e5\u8be2\u67d0\u4e3b\u673a\u540d\u65f6，\u82e5\u5b58\u5728 CNAME \u8bb0\u5f55，\u6743\u5a01\u670d\u52a1\u5668\u4f1a\u8fd4\u56de CNAME \u8bb0\u5f55\u672c\u8eab，\u5ba2\u6237\u7aef\u5fc5\u987b\u518d\u53d1\u8d77\u4e00\u6b21\u67e5\u8be2\u53bb\u89e3\u6790\u76ee\u6807\u57df\u540d\u3002\u7531\u4e8e CNAME \u5728\u534f\u8bae\u5c42\u9762\u5177\u6709\u72ec\u5360\u6027，\u8be5\u8282\u70b9\u4e0a\u7684 MX\u3001TXT \u7b49\u8bb0\u5f55\u4f1a\u88ab\u89e3\u6790\u5668\u5ffd\u7565\u3002<\/p>\n

                                          11.4.2 ALIAS \/ ANAME \u7684\u7ed5\u8fc7\u65b9\u5f0f<\/h5>\n

                                          \u6743\u5a01\u670d\u52a1\u5668\u5728\u6536\u5230\u67e5\u8be2\u8bf7\u6c42\u540e，\u5185\u90e8\u6267\u884c\u4ee5\u4e0b\u6b65\u9aa4：<\/p>\n

                                        • \u67e5\u627e\u8be5\u4e3b\u673a\u540d\u4e0b\u914d\u7f6e\u7684 ALIAS \/ ANAME \u76ee\u6807\u57df\u540d<\/li>\n
                                        • \u5728\u670d\u52a1\u5668\u7aef\u9012\u5f52\u89e3\u6790\u8be5\u76ee\u6807\u57df\u540d，\u83b7\u53d6\u5176 A \/ AAAA \u8bb0\u5f55<\/li>\n
                                        • \u5c06\u89e3\u6790\u5f97\u5230\u7684 IP \u5730\u5740\u76f4\u63a5\u4f5c\u4e3a A \/ AAAA \u8bb0\u5f55\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef<\/li>\n
                                        • \u6309\u76ee\u6807\u8bb0\u5f55\u7684 TTL \u7f13\u5b58\u7ed3\u679c，\u907f\u514d\u6bcf\u6b21\u67e5\u8be2\u90fd\u91cd\u65b0\u89e3\u6790<\/li>\n

                                          \u5ba2\u6237\u7aef\u6536\u5230\u7684\u54cd\u5e94\u4e2d\u53ea\u6709 A \/ AAAA \u8bb0\u5f55，\u5b8c\u5168\u611f\u77e5\u4e0d\u5230 CNAME \u7684\u5b58\u5728\u3002\u7531\u4e8e\u8fd4\u56de\u7684\u662f\u5730\u5740\u8bb0\u5f55\u800c\u975e CNAME \u8bb0\u5f55，MX\u3001TXT\u3001NS \u7b49\u5176\u4ed6\u8bb0\u5f55\u7c7b\u578b\u4e0d\u53d7\u5f71\u54cd，\u53ef\u4ee5\u6b63\u5e38\u5171\u5b58\u3002<\/p>\n

                                          11.4.3 \u5173\u952e\u5dee\u5f02\u5bf9\u6bd4<\/h5>\n\n\u7ef4\u5ea6CNAMEALIAS \/ ANAME<\/tr>\n\n\n\n\n\n\n\n
                                          \u89e3\u6790\u6267\u884c\u65b9<\/td>\n\u5ba2\u6237\u7aef（\u9012\u5f52\u89e3\u6790\u5668）<\/td>\n\u6743\u5a01 DNS \u670d\u52a1\u5668<\/td>\n<\/tr>\n
                                          \u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u7684\u5185\u5bb9<\/td>\nCNAME \u8bb0\u5f55 + \u76ee\u6807\u57df\u540d<\/td>\nA \/ AAAA \u8bb0\u5f55 + IP \u5730\u5740<\/td>\n<\/tr>\n
                                          \u80fd\u5426\u4e0e MX \/ TXT \u5171\u5b58<\/td>\n\u5426<\/td>\n\u80fd<\/td>\n<\/tr>\n
                                          \u80fd\u5426\u7528\u4e8e\u6839\u57df\u540d（@）<\/td>\n\u5426<\/td>\n\u80fd<\/td>\n<\/tr>\n
                                          \u534f\u8bae\u6807\u51c6\u5316<\/td>\nRFC 1034 \u6807\u51c6\u8bb0\u5f55\u7c7b\u578b<\/td>\n\u975e\u6807\u51c6，\u5404\u670d\u52a1\u5546\u79c1\u6709\u5b9e\u73b0<\/td>\n<\/tr>\n
                                          \u989d\u5916\u67e5\u8be2\u6b21\u6570<\/td>\n\u5ba2\u6237\u7aef\u591a\u4e00\u6b21\u67e5\u8be2<\/td>\n\u670d\u52a1\u5668\u7aef\u5185\u90e8\u5b8c\u6210，\u5ba2\u6237\u7aef\u65e0\u611f\u77e5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                                          11.4.4 \u672f\u8bed\u8bf4\u660e<\/h5>\n

                                          ALIAS\u3001ANAME\u3001CNAME Flattening \u672c\u8d28\u4e0a\u662f\u540c\u4e00\u673a\u5236\u7684\u4e0d\u540c\u547d\u540d：<\/p>\n

                                            \n
                                          • ALIAS：DNS Made Easy\u3001DNSimple\u3001NS1 \u7b49\u4f7f\u7528，\u5f3a\u8c03"\u522b\u540d"\u8bed\u4e49<\/li>\n
                                          • ANAME：Name.com \u7b49\u4f7f\u7528，\u5168\u79f0 \u201cAddress NAME\u201d，\u5f3a\u8c03\u89e3\u6790\u4e3a\u5730\u5740<\/li>\n
                                          • CNAME Flattening：Cloudflare \u4f7f\u7528，\u5f3a\u8c03\u5c06 CNAME \u94fe"\u538b\u5e73"\u4e3a A \u8bb0\u5f55<\/li>\n<\/ul>\n
                                            11.4.5 \u6ce8\u610f\u4e8b\u9879<\/h5>\n
                                              \n
                                            • \u975e RFC \u6807\u51c6：ALIAS \/ ANAME \u662f\u5404 DNS \u670d\u52a1\u5546\u7684\u79c1\u6709\u529f\u80fd，\u4e0d\u540c\u670d\u52a1\u5546\u7684\u5b9e\u73b0\u7ec6\u8282\u548c\u9650\u5236\u53ef\u80fd\u4e0d\u540c，\u8fc1\u79fb\u670d\u52a1\u5546\u65f6\u9700\u91cd\u65b0\u914d\u7f6e\u3002<\/li>\n
                                            • \u533a\u57df\u4f20\u8f93\u95ee\u9898：\u90e8\u5206\u670d\u52a1\u5546\u7684 ALIAS \u8bb0\u5f55\u4e0d\u5305\u542b\u5728 outgoing zone transfer \u4e2d，\u4f7f\u7528\u8f85\u52a9 DNS \u65f6\u9700\u6ce8\u610f\u517c\u5bb9\u6027\u3002<\/li>\n
                                            • \u7b2c\u4e09\u65b9\u9a8c\u8bc1\u573a\u666f：\u82e5 CNAME \u76ee\u6807\u7528\u4e8e\u7b2c\u4e09\u65b9\u670d\u52a1\u7684\u57df\u540d\u6240\u6709\u6743\u9a8c\u8bc1（\u5982\u67d0\u4e9b SSL \u8bc1\u4e66\u9a8c\u8bc1），\u5f00\u542f\u5c55\u5e73\u53ef\u80fd\u5bfc\u81f4\u9a8c\u8bc1\u5931\u8d25，\u56e0\u4e3a\u54cd\u5e94\u4e2d\u4e0d\u518d\u76f4\u63a5\u8fd4\u56de CNAME \u8bb0\u5f55\u3002<\/li>\n
                                            • TTL \u53d6\u503c：\u5c55\u5e73\u540e\u7684 A \/ AAAA \u8bb0\u5f55 TTL \u901a\u5e38\u53d6 CNAME \u8bb0\u5f55 TTL \u4e0e\u76ee\u6807\u8bb0\u5f55 TTL \u4e2d\u7684\u8f83\u5c0f\u503c\u3002<\/li>\n<\/ul>\n

                                              11.5 CNAME Flattening（\u5c55\u5e73）\u673a\u5236<\/h4>\n

                                              11.5.1 \u5c55\u5e73\u7684\u542b\u4e49<\/h5>\n

                                              "\u5c55\u5e73"\u6307 CNAME Flattening：\u6743\u5a01 DNS \u670d\u52a1\u5668\u5728\u6536\u5230\u67e5\u8be2\u65f6，\u4e0d\u5728\u54cd\u5e94\u4e2d\u8fd4\u56de CNAME \u8bb0\u5f55\u672c\u8eab，\u800c\u662f\u7531\u670d\u52a1\u5668\u5185\u90e8\u9012\u5f52\u89e3\u6790 CNAME \u76ee\u6807，\u76f4\u5230\u83b7\u5f97\u6700\u7ec8\u7684 A \/ AAAA \u8bb0\u5f55，\u518d\u5c06\u8be5 IP \u5730\u5740\u76f4\u63a5\u8fd4\u56de\u7ed9\u5ba2\u6237\u7aef\u3002<\/p>\n

                                              \u5047\u8bbe\u5b58\u5728\u5982\u4e0b\u914d\u7f6e：<\/p>\n

                                              \u82e5\u672a\u5c55\u5e73，\u5ba2\u6237\u7aef\u67e5\u8be2 example.com \u7684 A \u8bb0\u5f55\u65f6，\u54cd\u5e94\u4e2d\u4f1a\u5148\u51fa\u73b0 CNAME，\u5ba2\u6237\u7aef\u6216\u9012\u5f52\u89e3\u6790\u5668\u9700\u7ee7\u7eed\u67e5\u8be2 cdn.provider.net\u3001edge.provider.net，\u624d\u80fd\u83b7\u5f97 203.0.113.10\u3002<\/p>\n

                                              \u5f00\u542f\u5c55\u5e73\u540e，\u6743\u5a01\u670d\u52a1\u5668\u5185\u90e8\u5b8c\u6210\u4e0a\u8ff0\u94fe\u5f0f\u89e3\u6790，\u76f4\u63a5\u8fd4\u56de：<\/p>\n

                                              \u5ba2\u6237\u7aef\u53ea\u770b\u5230 A \u8bb0\u5f55，\u4e0d\u518d\u611f\u77e5 CNAME \u94fe\u3002<\/p>\n

                                              11.5.2 \u5c55\u5e73\u540e TTL \u7684\u53d6\u503c<\/h5>\n

                                              \u5c55\u5e73\u540e\u7684 A \/ AAAA \u8bb0\u5f55 TTL \u901a\u5e38\u53d6 CNAME \u8bb0\u5f55 TTL \u4e0e\u76ee\u6807\u8bb0\u5f55 TTL \u4e2d\u7684\u8f83\u5c0f\u503c，\u539f\u56e0\u5728\u4e8e\u7f13\u5b58\u4e00\u81f4\u6027：<\/p>\n

                                              \u82e5\u91c7\u7528\u8f83\u5927\u503c，\u53ef\u80fd\u51fa\u73b0\u76ee\u6807 IP \u5df2\u5931\u6548\u4f46\u5c55\u5e73\u8bb0\u5f55\u4ecd\u672a\u8fc7\u671f\u7684\u60c5\u51b5；\u53d6\u8f83\u5c0f\u503c\u53ef\u4fdd\u8bc1\u5c55\u5e73\u7ed3\u679c\u4e0d\u4f1a\u6bd4\u539f\u59cb\u8bb0\u5f55\u66f4"\u957f\u5bff"\u3002<\/p>\n

                                              11.6 Cloudflare \u4e0e AWS Route 53 \u7684 ALIAS \/ ANAME \u5b9e\u73b0\u5bf9\u6bd4<\/h4>\n\n\u7ef4\u5ea6Cloudflare CNAME FlatteningAWS Route 53 Alias<\/tr>\n\n\n\n\n\n\n\n\n
                                              \u914d\u7f6e\u65b9\u5f0f<\/td>\n\u76f4\u63a5\u521b\u5efa CNAME \u8bb0\u5f55，\u7531\u670d\u52a1\u7aef\u5c55\u5e73<\/td>\n\u521b\u5efa Alias \u8bb0\u5f55\u65f6\u9009\u62e9\u76ee\u6807 AWS \u8d44\u6e90\u6216\u540c\u533a\u57df\u8bb0\u5f55<\/td>\n<\/tr>\n
                                              \u6839\u57df\u540d\u652f\u6301<\/td>\n\u6240\u6709\u5957\u9910\u9ed8\u8ba4\u5bf9 zone apex \u542f\u7528\u5c55\u5e73<\/td>\n\u652f\u6301 zone apex，\u4f46\u76ee\u6807\u4e0d\u80fd\u662f CNAME \u7c7b\u578b\u8bb0\u5f55<\/td>\n<\/tr>\n
                                              \u76ee\u6807\u8303\u56f4<\/td>\n\u53ef\u6307\u5411\u4efb\u610f\u57df\u540d\u7684 CNAME \u76ee\u6807<\/td>\n\u4ec5\u652f\u6301\u6307\u5b9a AWS \u8d44\u6e90\u3001\u540c\u6258\u7ba1\u533a\u57df\u8bb0\u5f55\u7b49\u6709\u9650\u76ee\u6807<\/td>\n<\/tr>\n
                                              TTL \u63a7\u5236<\/td>\n\u5c55\u5e73\u540e TTL \u7531\u670d\u52a1\u7aef\u6839\u636e\u539f\u59cb\u8bb0\u5f55 TTL \u51b3\u5b9a<\/td>\n\u6307\u5411 AWS \u8d44\u6e90\u65f6\u4e0d\u53ef\u624b\u52a8\u8bbe\u7f6e TTL，\u4f7f\u7528\u8d44\u6e90\u9ed8\u8ba4 TTL<\/td>\n<\/tr>\n
                                              \u5065\u5eb7\u68c0\u67e5<\/td>\n\u4e0d\u76f4\u63a5\u63d0\u4f9b\u57fa\u4e8e Alias \u7684\u5065\u5eb7\u611f\u77e5\u8def\u7531<\/td>\n\u652f\u6301 EvaluateTargetHealth，\u53ef\u7ed3\u5408\u5065\u5eb7\u68c0\u67e5\u8fdb\u884c\u6d41\u91cf\u5207\u6362<\/td>\n<\/tr>\n
                                              \u8ba1\u8d39<\/td>\n\u514d\u8d39\u7248\u53ef\u7528，\u5c55\u5e73\u672c\u8eab\u4e0d\u5355\u72ec\u8ba1\u8d39<\/td>\n\u6307\u5411 AWS \u8d44\u6e90\u7684 Alias \u67e5\u8be2\u4e0d\u989d\u5916\u6536\u8d39，\u666e\u901a\u67e5\u8be2\u6309\u91cf\u8ba1\u8d39<\/td>\n<\/tr>\n
                                              \u8de8\u8d26\u6237\u9650\u5236<\/td>\n\u7981\u6b62\u5c06 CNAME \u6307\u5411\u4e0d\u540c Cloudflare \u8d26\u6237\u4e0b\u7684\u57df\u540d<\/td>\n\u53ef\u6307\u5411\u540c\u4e00\u6258\u7ba1\u533a\u57df\u5185\u7684\u8bb0\u5f55，\u6216\u6307\u5b9a AWS \u8d44\u6e90\u7684\u6258\u7ba1\u533a\u57df ID<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                              \u914d\u7f6e\u5efa\u8bae：<\/p>\n

                                                \n
                                              • \u82e5\u57df\u540d\u4f7f\u7528 Cloudflare \u4e14\u9700\u5c06\u6839\u57df\u540d\u6307\u5411\u7b2c\u4e09\u65b9 CDN\u3001PaaS \u6216\u4efb\u610f\u5916\u90e8\u670d\u52a1，\u76f4\u63a5\u4f7f\u7528 CNAME \u5e76\u4f9d\u8d56\u5c55\u5e73\u5373\u53ef\u3002<\/li>\n
                                              • \u82e5\u57df\u540d\u4f7f\u7528 Route 53 \u4e14\u76ee\u6807\u662f AWS \u8d44\u6e90，\u4f18\u5148\u4f7f\u7528 Alias \u8bb0\u5f55，\u53ef\u83b7\u5f97\u81ea\u52a8 IP \u66f4\u65b0\u3001\u5065\u5eb7\u68c0\u67e5\u96c6\u6210\u548c\u67e5\u8be2\u8d39\u7528\u4f18\u5316\u3002<\/li>\n
                                              • \u82e5\u7b2c\u4e09\u65b9\u670d\u52a1\u4f9d\u8d56\u76f4\u63a5\u8fd4\u56de CNAME \u8bb0\u5f55\u8fdb\u884c\u57df\u540d\u9a8c\u8bc1，\u5e94\u5173\u95ed\u5168\u5c40\u5c55\u5e73\u6216\u5bf9\u8be5\u8bb0\u5f55\u7981\u7528\u5c55\u5e73，\u5426\u5219\u9a8c\u8bc1\u53ef\u80fd\u5931\u8d25\u3002<\/li>\n
                                              • Route 53 Alias \u4e0d\u80fd\u4ee5 CNAME \u8bb0\u5f55\u4f5c\u4e3a zone apex \u76ee\u6807；\u82e5\u540c\u533a\u57df\u5185\u76ee\u6807\u4e3a CNAME，\u9700\u6539\u7528\u6307\u5411\u6700\u7ec8 A \/ AAAA \u8bb0\u5f55\u6216\u5176\u4ed6\u975e CNAME \u7c7b\u578b\u8bb0\u5f55\u3002<\/li>\n<\/ul>\n

                                                11.7 \u7b2c\u4e09\u65b9\u57df\u540d\u9a8c\u8bc1（SSL \u8bc1\u4e66）\u5c55\u5e73\u5931\u8d25\u5904\u7406<\/h4>\n

                                                \u5728\u4f7f\u7528\u7b2c\u4e09\u65b9\u670d\u52a1（\u5982 SSL \u8bc1\u4e66\u7533\u8bf7\u3001\u57df\u540d\u6240\u6709\u6743\u9a8c\u8bc1）\u65f6，\u90e8\u5206\u670d\u52a1\u5546\u8981\u6c42\u67e5\u8be2\u57df\u540d\u7684 CNAME \u8bb0\u5f55\u4ee5\u9a8c\u8bc1\u6240\u6709\u6743\u3002\u82e5\u5df2\u5f00\u542f CNAME Flattening，\u6743\u5a01\u670d\u52a1\u5668\u8fd4\u56de\u7684\u662f A \/ AAAA \u8bb0\u5f55\u800c\u975e CNAME \u8bb0\u5f55，\u5bfc\u81f4\u7b2c\u4e09\u65b9\u9a8c\u8bc1\u5931\u8d25\u3002<\/p>\n

                                                11.7.1 \u95ee\u9898\u8bca\u65ad<\/h5>\n

                                                \u5f53 SSL \u8bc1\u4e66\u7533\u8bf7\u6216\u57df\u540d\u9a8c\u8bc1\u63d0\u793a"\u672a\u627e\u5230 CNAME \u8bb0\u5f55"\u6216"\u9a8c\u8bc1\u5931\u8d25"\u65f6，\u53ef\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u8bca\u65ad：<\/p>\n

                                                \u82e5\u9012\u5f52\u67e5\u8be2\u8fd4\u56de CNAME \u8bb0\u5f55，\u800c\u6743\u5a01\u67e5\u8be2\u8fd4\u56de A \u8bb0\u5f55（\u6216\u53cd\u4e4b），\u5219\u8bf4\u660e\u5c55\u5e73\u5df2\u751f\u6548\u3002<\/p>\n

                                                11.7.2 Cloudflare \u573a\u666f\u5904\u7406<\/h5>\n

                                                \u65b9\u6848\u4e00：\u5173\u95ed\u5168\u5c40\u5c55\u5e73<\/p>\n

                                                \u5728 Cloudflare \u63a7\u5236\u9762\u677f\u4e2d：<\/p>\n

                                              • \u8fdb\u5165 DNS \u8bbe\u7f6e\u9875\u9762<\/li>\n
                                              • \u627e\u5230"CNAME Flattening"\u9009\u9879<\/li>\n
                                              • \u9009\u62e9"Off"\u5173\u95ed\u5168\u5c40\u5c55\u5e73<\/li>\n

                                                \u65b9\u6848\u4e8c：\u5bf9\u7279\u5b9a\u8bb0\u5f55\u7981\u7528\u5c55\u5e73<\/p>\n

                                                Cloudflare \u652f\u6301\u5bf9\u5355\u6761 CNAME \u8bb0\u5f55\u7981\u7528\u5c55\u5e73：<\/p>\n

                                              • \u7f16\u8f91\u76ee\u6807 CNAME \u8bb0\u5f55<\/li>\n
                                              • \u53d6\u6d88\u52fe\u9009"Proxy status"\u4e2d\u7684"Orange cloud (Proxied)"<\/li>\n
                                              • \u786e\u4fdd"Flatten CNAME"\u9009\u9879\u672a\u542f\u7528<\/li>\n

                                                \u65b9\u6848\u4e09：\u4f7f\u7528\u72ec\u7acb\u5b50\u57df\u540d\u8fdb\u884c\u9a8c\u8bc1<\/p>\n

                                                \u5c06\u9a8c\u8bc1\u8bb0\u5f55\u914d\u7f6e\u5728\u72ec\u7acb\u5b50\u57df\u540d\u4e0a（\u5982 verify.example.com），\u8be5\u5b50\u57df\u540d\u4e0d\u542f\u7528\u5c55\u5e73：<\/p>\n

                                                11.7.3 AWS Route 53 \u573a\u666f\u5904\u7406<\/h5>\n

                                                \u65b9\u6848\u4e00：\u4f7f\u7528\u975e Alias \u8bb0\u5f55<\/p>\n

                                                \u5728 Route 53 \u4e2d，\u4e0d\u521b\u5efa Alias \u8bb0\u5f55，\u800c\u662f\u521b\u5efa\u6807\u51c6\u7684 CNAME \u8bb0\u5f55：<\/p>\n

                                              • \u8fdb\u5165 Route 53 \u63a7\u5236\u53f0<\/li>\n
                                              • \u9009\u62e9\u6258\u7ba1\u533a\u57df<\/li>\n
                                              • \u521b\u5efa\u8bb0\u5f55\u65f6\u9009\u62e9\u8bb0\u5f55\u7c7b\u578b\u4e3a CNAME（\u800c\u975e Alias）<\/li>\n
                                              • \u586b\u5199\u76ee\u6807\u57df\u540d<\/li>\n

                                                \u65b9\u6848\u4e8c：\u4f7f\u7528\u72ec\u7acb\u5b50\u57df\u540d<\/p>\n

                                                \u4e0e Cloudflare \u7c7b\u4f3c，\u5c06\u9a8c\u8bc1\u8bb0\u5f55\u914d\u7f6e\u5728\u72ec\u7acb\u5b50\u57df\u540d\u4e0a，\u907f\u514d\u4e0e Alias \u8bb0\u5f55\u51b2\u7a81\u3002<\/p>\n

                                                \u65b9\u6848\u4e09：\u4f7f\u7528 Route 53 Health Check \u96c6\u6210<\/p>\n

                                                \u82e5\u9700\u8981\u5065\u5eb7\u68c0\u67e5\u4e0e\u57df\u540d\u9a8c\u8bc1\u5171\u5b58，\u53ef\u8003\u8651：<\/p>\n

                                              • \u4f7f\u7528 Alias \u8bb0\u5f55\u6307\u5411 AWS \u8d44\u6e90（\u5982 CloudFront\u3001S3 \u9759\u6001\u7f51\u7ad9）<\/li>\n
                                              • \u5c06\u7b2c\u4e09\u65b9\u9a8c\u8bc1\u8bb0\u5f55\u914d\u7f6e\u5728\u72ec\u7acb\u5b50\u57df\u540d\u4e0a，\u4f7f\u7528\u6807\u51c6 CNAME \u8bb0\u5f55<\/li>\n
                                                11.7.4 \u901a\u7528\u6700\u4f73\u5b9e\u8df5<\/h5>\n
                                                  \n
                                                • \u9a8c\u8bc1\u524d\u6682\u505c\u5c55\u5e73：\u5728\u8fdb\u884c\u7b2c\u4e09\u65b9\u57df\u540d\u9a8c\u8bc1\u524d，\u4e34\u65f6\u5173\u95ed\u5c55\u5e73\u529f\u80fd，\u9a8c\u8bc1\u5b8c\u6210\u540e\u518d\u91cd\u65b0\u542f\u7528\u3002<\/li>\n
                                                • \u4f7f\u7528\u72ec\u7acb\u5b50\u57df\u540d：\u5c06\u9a8c\u8bc1\u8bb0\u5f55（\u5982 _dnsauth.example.com）\u914d\u7f6e\u5728\u72ec\u7acb\u5b50\u57df\u540d\u4e0a，\u907f\u514d\u4e0e\u4e3b\u57df\u540d\u7684\u5c55\u5e73\u914d\u7f6e\u51b2\u7a81\u3002<\/li>\n
                                                • \u68c0\u67e5 TTL \u5f71\u54cd：\u5173\u95ed\u5c55\u5e73\u540e，\u6ce8\u610f CNAME \u8bb0\u5f55\u7684 TTL \u8bbe\u7f6e，\u786e\u4fdd\u9a8c\u8bc1\u7ed3\u679c\u80fd\u53ca\u65f6\u751f\u6548\u3002<\/li>\n
                                                • \u8bb0\u5f55\u53d8\u66f4\u6d41\u7a0b：\u5c06\u5c55\u5e73\u5f00\u5173\u7eb3\u5165\u53d8\u66f4\u7ba1\u7406\u6d41\u7a0b，\u907f\u514d\u56e0\u5c55\u5e73\u914d\u7f6e\u9057\u6f0f\u5bfc\u81f4\u751f\u4ea7\u73af\u5883\u95ee\u9898\u3002<\/li>\n<\/ul>\n
                                                  \n

                                                  DNS \u5404\u79cd\u8bb0\u5f55\u7c7b\u578b\u89e3\u6790\u65f6\u6548<\/h2>\n

                                                  1 TTL \u57fa\u7840\u6982\u5ff5<\/h3>\n

                                                  TTL（Time to Live，\u751f\u5b58\u65f6\u95f4）\u662f DNS \u8d44\u6e90\u8bb0\u5f55\u5728\u9012\u5f52 DNS \u670d\u52a1\u5668\u7f13\u5b58\u4e2d\u7684\u6709\u6548\u5b58\u6d3b\u65f6\u957f，\u5355\u4f4d\u4e3a\u79d2（s），\u9075\u5faa [RFC 1035] \u6807\u51c6\u5b9a\u4e49\u3002\u6743\u5a01 DNS \u670d\u52a1\u5668\u5728\u8fd4\u56de\u8d44\u6e90\u8bb0\u5f55\u65f6\u9644\u5e26 TTL \u503c，\u9012\u5f52\u89e3\u6790\u5668\u5728 TTL \u6709\u6548\u671f\u5185\u76f4\u63a5\u54cd\u5e94\u67e5\u8be2，\u8fc7\u671f\u540e\u9700\u91cd\u65b0\u5411\u6743\u5a01\u670d\u52a1\u5668\u83b7\u53d6\u6700\u65b0\u8bb0\u5f55\u3002<\/p>\n

                                                  TTL \u7684\u5206\u5c42\u7f13\u5b58\u673a\u5236\u5982\u4e0b：<\/p>\n

                                                    \n
                                                  • \u672c\u5730 DNS \u7f13\u5b58：\u5ba2\u6237\u7aef\u64cd\u4f5c\u7cfb\u7edf\u7ea7\u7f13\u5b58\u3002Windows \u9ed8\u8ba4 TTL \u4e3a 120 s；Linux systemd-resolved \u670d\u52a1\u901a\u8fc7 CacheMaxAgeSec \u53c2\u6570\u914d\u7f6e（\u9ed8\u8ba4\u4e0a\u9650 3600 s）\u3002<\/li>\n
                                                  • \u9012\u5f52 DNS \u7f13\u5b58：ISP\/\u8fd0\u8425\u5546\u8282\u70b9\u7f13\u5b58，\u5178\u578b\u4fdd\u7559\u65f6\u957f = TTL \u8bbe\u5b9a\u503c\u3002<\/li>\n
                                                  • \u6743\u5a01 DNS：\u57df\u540d\u6ce8\u518c\u5546 NS \u670d\u52a1\u5668\u8bb0\u5f55，\u5373\u65f6\u751f\u6548\u3002<\/li>\n<\/ul>\n

                                                    IANA \u5efa\u8bae\u516c\u5171 DNS \u670d\u52a1\u7684\u6700\u5c0f TTL \u503c\u4e0d\u4f4e\u4e8e 30 s；[RFC 2308] \u89c4\u5b9a\u5426\u5b9a\u7f13\u5b58\u6700\u5c0f TTL \u4e3a 300 s\u3002<\/p>\n

                                                    \n

                                                    2 DNS \u8bb0\u5f55\u7c7b\u578b\u603b\u89c8<\/h3>\n

                                                    IANA \u7ef4\u62a4\u7684 DNS \u8d44\u6e90\u8bb0\u5f55\u7c7b\u578b\u6ce8\u518c\u8868\u4e2d，\u76ee\u524d\u5df2\u6709 200+ \u79cd\u8bb0\u5f55\u7c7b\u578b\u3002\u4ee5\u4e0b\u6309\u529f\u80fd\u7c7b\u522b\u5206\u7ec4，\u8be6\u8ff0\u5404\u7c7b\u8bb0\u5f55\u7684\u7528\u9014\u3001\u683c\u5f0f\u3001TTL \u7279\u6027\u53ca\u63a8\u8350\u914d\u7f6e\u3002<\/p>\n\n\u7c7b\u522b\u5305\u542b\u8bb0\u5f55\u7c7b\u578b<\/tr>\n\n\n\n\n\n\n\n\n\n\n
                                                    \u57fa\u7840\u5730\u5740\u8bb0\u5f55<\/td>\nA\u3001AAAA<\/td>\n<\/tr>\n
                                                    \u522b\u540d\u8bb0\u5f55<\/td>\nCNAME\u3001DNAME\u3001ANAME\/ALIAS<\/td>\n<\/tr>\n
                                                    \u90ae\u4ef6\u8bb0\u5f55<\/td>\nMX\u3001SPF\/DKIM\/DMARC（\u57fa\u4e8e TXT）<\/td>\n<\/tr>\n
                                                    \u57df\u540d\u670d\u52a1\u5668\u8bb0\u5f55<\/td>\nNS\u3001SOA<\/td>\n<\/tr>\n
                                                    \u53cd\u5411\u89e3\u6790\u8bb0\u5f55<\/td>\nPTR<\/td>\n<\/tr>\n
                                                    \u670d\u52a1\u53d1\u73b0\u8bb0\u5f55<\/td>\nSRV\u3001AFSDB\u3001SVCB\u3001HTTPS<\/td>\n<\/tr>\n
                                                    \u5b89\u5168\u4e0e\u8ba4\u8bc1\u8bb0\u5f55<\/td>\nCAA\u3001DNSKEY\u3001DS\u3001RRSIG\u3001NSEC\u3001NSEC3\u3001TLSA\u3001SSHFP\u3001CERT\u3001OPENPGPKEY<\/td>\n<\/tr>\n
                                                    \u547d\u540d\u4e0e\u8def\u7531\u8bb0\u5f55<\/td>\nNAPTR\u3001DNAME<\/td>\n<\/tr>\n
                                                    \u5176\u4ed6\u8bb0\u5f55<\/td>\nHINFO\u3001OPT\u3001ANY\u3001AXFR\u3001IXFR\u3001DHCID\u3001CSYNC\u3001ZONEMD<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                                                    \n

                                                    3 \u57fa\u7840\u5730\u5740\u8bb0\u5f55<\/h3>\n

                                                    3.1 A \u8bb0\u5f55（Type 1）<\/h4>\n
                                                      \n
                                                    • \u5b9a\u4e49：[RFC 1035] \u2014 \u5c06\u57df\u540d\u6620\u5c04\u5230 32 \u4f4d IPv4 \u5730\u5740\u3002<\/li>\n
                                                    • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                      example.com. 3600 IN A 192.0.2.1<\/p>\n

                                                        \n
                                                      • TTL \u7279\u6027：\u65e0\u534f\u8bae\u7ea7\u9ed8\u8ba4\u503c，\u7531\u57df\u540d\u6ce8\u518c\u5546\/\u6258\u7ba1\u5e73\u53f0\u8bbe\u5b9a\u3002\u5168\u7403 TOP10 \u57df\u540d\u6ce8\u518c\u5546\u5e73\u5747\u9ed8\u8ba4 TTL \u4e3a 7200 s（2 \u5c0f\u65f6）\u3002<\/li>\n
                                                      • \u63a8\u8350\u914d\u7f6e：\n
                                                          \n
                                                        • \u751f\u4ea7\u73af\u5883\u7a33\u5b9a\u670d\u52a1：86400 s（24 \u5c0f\u65f6）<\/li>\n
                                                        • \u7070\u5ea6\u53d1\u5e03\u9636\u6bb5：300 s（5 \u5206\u949f）<\/li>\n
                                                        • \u5e94\u6025\u6545\u969c\u5207\u6362：60 s（1 \u5206\u949f）<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                                                          3.2 AAAA \u8bb0\u5f55（Type 28）<\/h4>\n
                                                            \n
                                                          • \u5b9a\u4e49：[RFC 3596] \u2014 \u5c06\u57df\u540d\u6620\u5c04\u5230 128 \u4f4d IPv6 \u5730\u5740\u3002<\/li>\n
                                                          • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                            example.com. 3600 IN AAAA 2001:db8::1<\/p>\n

                                                              \n
                                                            • TTL \u7279\u6027：\u4e0e A \u8bb0\u5f55\u76f8\u540c，\u65e0\u534f\u8bae\u7ea7\u9ed8\u8ba4\u503c\u3002<\/li>\n
                                                            • \u63a8\u8350\u914d\u7f6e：\u4e0e A \u8bb0\u5f55\u4e00\u81f4\u3002IPv6 \u90e8\u7f72\u521d\u671f\u5efa\u8bae\u8f83\u4f4e TTL（3600 s），\u7a33\u5b9a\u540e\u63d0\u5347\u81f3 86400 s\u3002<\/li>\n<\/ul>\n
                                                              \n

                                                              4 \u522b\u540d\u8bb0\u5f55<\/h3>\n

                                                              4.1 CNAME \u8bb0\u5f55（Type 5）<\/h4>\n
                                                                \n
                                                              • \u5b9a\u4e49：[RFC 1035] \u2014 \u5c06\u4e00\u4e2a\u57df\u540d\u522b\u540d\u6307\u5411\u53e6\u4e00\u4e2a\u57df\u540d（\u89c4\u8303\u540d）\u3002<\/li>\n
                                                              • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                www.example.com. 3600 IN CNAME example.com.<\/p>\n

                                                                  \n
                                                                • TTL \u7279\u6027：CNAME \u8bb0\u5f55\u7684 TTL \u5373\u4e3a\u5176\u522b\u540d\u76ee\u6807\u7684\u7f13\u5b58\u65f6\u957f\u3002\u6ce8\u610f：CNAME \u8bb0\u5f55\u4f1a\u8986\u76d6\u540c\u540d\u79f0\u7684\u5176\u4ed6\u8bb0\u5f55\u7c7b\u578b（\u5982 MX\u3001TXT），\u9700\u8c28\u614e\u4f7f\u7528\u3002<\/li>\n
                                                                • \u63a8\u8350\u914d\u7f6e：\n
                                                                    \n
                                                                  • CDN\/\u4e91\u670d\u52a1\u63a5\u5165：300\u20133600 s<\/li>\n
                                                                  • \u7a33\u5b9a\u522b\u540d：86400 s<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                                                                    4.2 DNAME \u8bb0\u5f55（Type 39）<\/h4>\n
                                                                      \n
                                                                    • \u5b9a\u4e49：[RFC 2672] \u2014 \u91cd\u5b9a\u5411\u4e00\u4e2a\u57df\u540d\u53ca\u5176\u6240\u6709\u5b50\u57df\u540d\u5230\u53e6\u4e00\u4e2a\u57df\u540d（\u5b50\u6811\u7ea7\u522b\u540d）\u3002<\/li>\n
                                                                    • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                      old.example.com. 3600 IN DNAME new.example.com.<\/p>\n

                                                                        \n
                                                                      • TTL \u7279\u6027：\u4e0e CNAME \u7c7b\u4f3c，\u4f46\u4f5c\u7528\u4e8e\u6574\u4e2a\u5b50\u57df\u6811\u3002<\/li>\n
                                                                      • \u63a8\u8350\u914d\u7f6e：\u8fc1\u79fb\u573a\u666f\u5efa\u8bae 3600 s，\u7a33\u5b9a\u540e 86400 s\u3002<\/li>\n<\/ul>\n

                                                                        4.3 ANAME \/ ALIAS \u8bb0\u5f55<\/h4>\n
                                                                          \n
                                                                        • \u5b9a\u4e49：draft-ietf-dnsop-aname \u2014 \u5b9e\u73b0 CNAME \u5c55\u5e73（CNAME Flattening），\u89e3\u51b3\u6839\u57df\u540d（apex domain）\u4f7f\u7528 CNAME \u4e0e\u5176\u4ed6\u8bb0\u5f55\u51b2\u7a81\u7684\u95ee\u9898\u3002<\/li>\n
                                                                        • TTL \u7279\u6027：\u7531\u670d\u52a1\u5546\u5b9e\u73b0，\u901a\u5e38\u9ed8\u8ba4 300 s（Cloudflare）\u6216 15 min（\u90e8\u5206\u5e73\u53f0）\u3002<\/li>\n
                                                                        • \u63a8\u8350\u914d\u7f6e：\u4e0e A\/AAAA \u8bb0\u5f55\u4fdd\u6301\u4e00\u81f4\u3002<\/li>\n<\/ul>\n
                                                                          \n

                                                                          5 \u90ae\u4ef6\u76f8\u5173\u8bb0\u5f55<\/h3>\n

                                                                          5.1 MX \u8bb0\u5f55（Type 15）<\/h4>\n
                                                                            \n
                                                                          • \u5b9a\u4e49：[RFC 1035] \u2014 \u6307\u5b9a\u57df\u540d\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u5730\u5740\u53ca\u4f18\u5148\u7ea7（\u6570\u503c\u8d8a\u5c0f\u4f18\u5148\u7ea7\u8d8a\u9ad8）\u3002<\/li>\n
                                                                          • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                            example.com. 3600 IN MX 10 mail.example.com.<\/p>\n

                                                                              \n
                                                                            • TTL \u7279\u6027：\u65e0\u534f\u8bae\u7ea7\u9ed8\u8ba4\u503c\u3002\u90ae\u4ef6\u670d\u52a1\u53d8\u66f4\u9891\u7387\u8f83\u4f4e，\u901a\u5e38\u914d\u7f6e\u8f83\u9ad8 TTL\u3002<\/li>\n
                                                                            • \u63a8\u8350\u914d\u7f6e：\n
                                                                                \n
                                                                              • \u7a33\u5b9a\u90ae\u4ef6\u670d\u52a1：14400\u201386400 s（4\u201324 \u5c0f\u65f6）<\/li>\n
                                                                              • \u91d1\u878d\u884c\u4e1a\u5178\u578b\u914d\u7f6e：14400 s（4 \u5c0f\u65f6）<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                                                                                5.2 SPF \/ DKIM \/ DMARC（\u57fa\u4e8e TXT \u8bb0\u5f55）<\/h4>\n
                                                                                  \n
                                                                                • \u5b9a\u4e49：\u8fd9\u4e9b\u5e76\u975e\u72ec\u7acb\u7684 DNS \u8bb0\u5f55\u7c7b\u578b，\u800c\u662f\u5b58\u50a8\u5728 TXT \u8bb0\u5f55\u4e2d\u7684\u7279\u5b9a\u683c\u5f0f\u6587\u672c\u3002\n
                                                                                    \n
                                                                                  • SPF（Sender Policy Framework）：[RFC 7208] \u2014 \u6307\u5b9a\u5141\u8bb8\u4ee3\u53d1\u8be5\u57df\u90ae\u4ef6\u7684\u670d\u52a1\u5668\u3002<\/li>\n
                                                                                  • DKIM（DomainKeys Identified Mail）：[RFC 6376] \u2014 \u90ae\u4ef6\u6570\u5b57\u7b7e\u540d\u9a8c\u8bc1\u3002<\/li>\n
                                                                                  • DMARC（Domain-based Message Authentication）：[RFC 7489] \u2014 \u90ae\u4ef6\u57df\u540d\u7b56\u7565\u62a5\u544a\u4e0e\u5904\u7f6e\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                  • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                    example.com. 3600 IN TXT "v=spf1 mx a ~all"<\/p>\n

                                                                                      \n
                                                                                    • TTL \u7279\u6027：\u7ee7\u627f TXT \u8bb0\u5f55\u7684 TTL \u8bbe\u7f6e\u3002\u90ae\u4ef6\u5b89\u5168\u7b56\u7565\u53d8\u66f4\u9891\u7387\u4f4e，\u5efa\u8bae\u8f83\u9ad8 TTL\u3002<\/li>\n
                                                                                    • \u63a8\u8350\u914d\u7f6e：3600\u201386400 s\u3002\u4fee\u6539 SPF\/DMARC \u7b56\u7565\u524d\u5efa\u8bae\u63d0\u524d\u8c03\u4f4e\u81f3 300 s\u3002<\/li>\n<\/ul>\n
                                                                                      \n

                                                                                      6 \u57df\u540d\u670d\u52a1\u5668\u8bb0\u5f55<\/h3>\n

                                                                                      6.1 NS \u8bb0\u5f55（Type 2）<\/h4>\n
                                                                                        \n
                                                                                      • \u5b9a\u4e49：[RFC 1035] \u2014 \u6307\u5b9a\u8d1f\u8d23\u8be5\u57df\u540d\u7684\u6743\u5a01 DNS \u670d\u52a1\u5668\u3002<\/li>\n
                                                                                      • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                        example.com. 86400 IN NS ns1.example.com.
                                                                                        \nexample.com. 86400 IN NS ns2.example.com.<\/p>\n

                                                                                          \n
                                                                                        • TTL \u7279\u6027：NS \u8bb0\u5f55\u7684 TTL \u7531\u7236\u533a\u57df（\u5982 .com TLD）\u63a7\u5236\u3002\u5b50\u57df NS \u8bb0\u5f55\u7684 TTL \u901a\u5e38\u7531\u6ce8\u518c\u5546\u8bbe\u5b9a\u3002<\/li>\n
                                                                                        • \u63a8\u8350\u914d\u7f6e：86400 s（24 \u5c0f\u65f6）\u3002NS \u8bb0\u5f55\u53d8\u66f4\u9700\u7b49\u5f85\u65e7 TTL \u8fc7\u671f\u540e\u5168\u5c40\u751f\u6548，\u5efa\u8bae\u63d0\u524d\u89c4\u5212\u3002<\/li>\n<\/ul>\n

                                                                                          6.2 SOA \u8bb0\u5f55（Type 6）<\/h4>\n
                                                                                            \n
                                                                                          • \u5b9a\u4e49：[RFC 1035] \/ [RFC 2308] \u2014 \u6807\u8bb0 DNS \u533a\u57df\u7684\u6743\u5a01\u4fe1\u606f，\u5305\u542b\u4e3b\u670d\u52a1\u5668\u3001\u7ba1\u7406\u5458\u90ae\u7bb1\u3001\u5e8f\u5217\u53f7\u7b49\u5143\u6570\u636e\u3002<\/li>\n
                                                                                          • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                            example.com. 86400 IN SOA ns1.example.com. admin.example.com. (
                                                                                            \n 2024061201 ; Serial
                                                                                            \n 3600 ; Refresh
                                                                                            \n 900 ; Retry
                                                                                            \n 604800 ; Expire
                                                                                            \n 86400 ; Minimum TTL
                                                                                            \n)<\/p>\n

                                                                                              \n
                                                                                            • TTL \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                \n
                                                                                              • Refresh（\u5237\u65b0\u95f4\u9694）：\u4ece\u533a 2 \u670d\u52a1\u5668\u8f6e\u8be2\u4e3b\u670d\u52a1\u5668\u7684\u95f4\u9694，\u9ed8\u8ba4 3600 s\u3002<\/li>\n
                                                                                              • Retry（\u91cd\u8bd5\u95f4\u9694）：\u5237\u65b0\u5931\u8d25\u540e\u7684\u91cd\u8bd5\u95f4\u9694，\u9ed8\u8ba4 900 s\u3002<\/li>\n
                                                                                              • Expire（\u8fc7\u671f\u65f6\u95f4）：\u4ece\u533a 2 \u670d\u52a1\u5668\u65e0\u6cd5\u8054\u7cfb\u4e3b\u670d\u52a1\u5668\u65f6\u7684\u8fc7\u671f\u65f6\u95f4，\u9ed8\u8ba4 604800 s（7 \u5929）\u3002<\/li>\n
                                                                                              • Minimum TTL（\u6700\u5c0f TTL）：\u5426\u5b9a\u7f13\u5b58\u7684\u9ed8\u8ba4 TTL，\u4e5f\u662f\u533a\u57df\u5185\u5176\u4ed6\u8bb0\u5f55\u672a\u663e\u5f0f\u8bbe\u7f6e TTL \u65f6\u7684\u9ed8\u8ba4\u503c\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                                                                                                \n

                                                                                                7 \u53cd\u5411\u89e3\u6790\u8bb0\u5f55<\/h3>\n

                                                                                                7.1 PTR \u8bb0\u5f55（Type 12）<\/h4>\n
                                                                                                  \n
                                                                                                • \u5b9a\u4e49：[RFC 1035] \u2014 \u5c06 IP \u5730\u5740\u6620\u5c04\u5230\u57df\u540d（\u53cd\u5411 DNS \u89e3\u6790）\u3002<\/li>\n
                                                                                                • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                  1.2.3.4.in-addr.arpa. 3600 IN PTR example.com.<\/p>\n

                                                                                                    \n
                                                                                                  • TTL \u7279\u6027：PTR \u8bb0\u5f55\u7531 IP \u5730\u5740\u7684 ASN \u6301\u6709\u8005\u7ba1\u7406，\u901a\u5e38 TTL \u8f83\u9ad8\u3002<\/li>\n
                                                                                                  • \u63a8\u8350\u914d\u7f6e：3600\u201386400 s\u3002\u90ae\u4ef6\u670d\u52a1\u5668\u53cd\u5783\u573e\u9a8c\u8bc1\u4f9d\u8d56 PTR，\u5efa\u8bae\u4fdd\u6301\u7a33\u5b9a\u3002<\/li>\n<\/ul>\n
                                                                                                    \n

                                                                                                    8 \u670d\u52a1\u53d1\u73b0\u8bb0\u5f55<\/h3>\n

                                                                                                    8.1 SRV \u8bb0\u5f55（Type 33）<\/h4>\n
                                                                                                      \n
                                                                                                    • \u5b9a\u4e49：[RFC 2782] \u2014 \u6307\u5b9a\u7279\u5b9a\u670d\u52a1\u7684\u670d\u52a1\u5668\u4f4d\u7f6e，\u5305\u542b\u4f18\u5148\u7ea7\u3001\u6743\u91cd\u3001\u7aef\u53e3\u548c\u76ee\u6807\u4e3b\u673a\u3002<\/li>\n
                                                                                                    • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                      _sip._tcp.example.com. 3600 IN SRV 10 60 5060 sipserver.example.com.<\/p>\n

                                                                                                        \n
                                                                                                      • \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                          \n
                                                                                                        • Priority（\u4f18\u5148\u7ea7）：\u6570\u503c\u8d8a\u5c0f\u4f18\u5148\u7ea7\u8d8a\u9ad8\u3002<\/li>\n
                                                                                                        • Weight（\u6743\u91cd）：\u540c\u7b49\u4f18\u5148\u7ea7\u4e0b\u7684\u8d1f\u8f7d\u5747\u8861\u6743\u91cd\u3002<\/li>\n
                                                                                                        • Port（\u7aef\u53e3）：\u670d\u52a1\u76d1\u542c\u7684 TCP\/UDP \u7aef\u53e3\u3002<\/li>\n
                                                                                                        • Target（\u76ee\u6807）：\u670d\u52a1\u6240\u5728\u4e3b\u673a\u57df\u540d\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                                        • \u63a8\u8350\u914d\u7f6e：300\u20133600 s\u3002\u670d\u52a1\u53d1\u73b0\u573a\u666f\u5efa\u8bae\u8f83\u4f4e TTL \u4ee5\u5feb\u901f\u54cd\u5e94\u62d3\u6251\u53d8\u66f4\u3002<\/li>\n<\/ul>\n

                                                                                                          8.2 AFSDB \u8bb0\u5f55（Type 18）<\/h4>\n
                                                                                                            \n
                                                                                                          • \u5b9a\u4e49：[RFC 1183] \u2014 \u6307\u5b9a AFS（Andrew File System）\u6570\u636e\u5e93\u670d\u52a1\u5668\u7684\u4f4d\u7f6e\u3002<\/li>\n
                                                                                                          • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                            example.com. 3600 IN AFSDB 1 afsdb.example.com.<\/p>\n

                                                                                                              \n
                                                                                                            • TTL \u7279\u6027：\u5185\u90e8\u6587\u4ef6\u7cfb\u7edf\u4f7f\u7528，TTL \u7531\u5185\u90e8\u7b56\u7565\u51b3\u5b9a，\u901a\u5e38 3600\u201386400 s\u3002<\/li>\n<\/ul>\n

                                                                                                              8.3 SVCB \u8bb0\u5f55（Type 64）<\/h4>\n
                                                                                                                \n
                                                                                                              • \u5b9a\u4e49：[RFC 9460] \u2014 \u670d\u52a1\u7ed1\u5b9a（Service Binding）\u8bb0\u5f55，\u63d0\u4f9b\u534f\u8bae\u4e0e\u7aef\u70b9\u4fe1\u606f，\u4f18\u5316\u5ba2\u6237\u7aef\u8fde\u63a5\u51b3\u7b56\u3002\u652f\u6301\u591a\u7aef\u70b9\u5197\u4f59\u548c\u53c2\u6570\u4f20\u9012\u3002<\/li>\n
                                                                                                              • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                example.com. 3600 IN SVCB 1 .<\/p>\n

                                                                                                                  \n
                                                                                                                • TTL \u7279\u6027：\u65b0\u5174\u8bb0\u5f55\u7c7b\u578b，TTL \u5efa\u8bae 300\u20133600 s\u3002\u914d\u5408 HTTPS \u8bb0\u5f55\u4f7f\u7528\u53ef\u5b9e\u73b0 QUIC\/HTTP3 \u5feb\u901f\u5207\u6362\u3002<\/li>\n
                                                                                                                • \u6ce8\u610f\u4e8b\u9879：\u90e8\u5206\u8001\u65e7 DNS \u89e3\u6790\u5668\u53ef\u80fd\u4e0d\u652f\u6301 SVCB，\u9700\u6e10\u8fdb\u5f0f\u90e8\u7f72\u3002<\/li>\n<\/ul>\n

                                                                                                                  8.4 HTTPS \u8bb0\u5f55（Type 65）<\/h4>\n
                                                                                                                    \n
                                                                                                                  • \u5b9a\u4e49：[RFC 9460] \u2014 SVCB \u7684\u7279\u5316\u7248\u672c，\u4e13\u95e8\u63cf\u8ff0 HTTPS \u670d\u52a1\u7684\u5efa\u8054\u4fe1\u606f\u3002<\/li>\n
                                                                                                                  • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                    example.com. 3600 IN HTTPS 1 "alpn=h2,h3; no-default-alpn; ipv4hint=93.184.216.34;"<\/p>\n

                                                                                                                      \n
                                                                                                                    • TTL \u7279\u6027：\u4e0e SVCB \u76f8\u540c，\u5efa\u8bae 300\u20133600 s\u3002<\/li>\n
                                                                                                                    • \u5173\u7cfb：HTTPS \u8bb0\u5f55\u662f SVCB \u7684\u522b\u540d（HTTPS \u7684 svcparam \u96c6\u5408\u662f SVCB \u7684\u5b50\u96c6）\u3002<\/li>\n<\/ul>\n
                                                                                                                      \n

                                                                                                                      9 \u5b89\u5168\u4e0e\u8ba4\u8bc1\u8bb0\u5f55<\/h3>\n

                                                                                                                      9.1 CAA \u8bb0\u5f55（Type 257）<\/h4>\n
                                                                                                                        \n
                                                                                                                      • \u5b9a\u4e49：[RFC 6844] \u2014 \u8bc1\u4e66\u9881\u53d1\u673a\u6784\u6388\u6743（Certification Authority Authorization），\u63a7\u5236\u5141\u8bb8\u4e3a\u57df\u540d\u9881\u53d1\u8bc1\u4e66\u7684 CA \u673a\u6784\u3002<\/li>\n
                                                                                                                      • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                        example.com. 600 IN CAA 0 issue "letsencrypt.org"
                                                                                                                        \nexample.com. 600 IN CAA 0 issuewild "sectigo.com"
                                                                                                                        \nexample.com. 600 IN CAA 0 iodef "mailto:security@example.com"<\/p>\n

                                                                                                                          \n
                                                                                                                        • \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                                            \n
                                                                                                                          • flag：0（\u5ffd\u7565\u4e0d\u8bc6\u522b\u7684\u6307\u4ee4）\u6216 128（\u5fc5\u987b\u7406\u89e3，\u5426\u5219\u62d2\u7edd\u7b7e\u53d1）\u3002<\/li>\n
                                                                                                                          • tag：issue（\u6388\u6743\u666e\u901a\u8bc1\u4e66）\u3001issuewild（\u6388\u6743\u901a\u914d\u7b26\u8bc1\u4e66）\u3001iodef（\u8fdd\u89c4\u901a\u77e5）\u3002<\/li>\n
                                                                                                                          • value：CA \u7684\u57df\u540d\u6807\u8bc6\u6216\u8fdd\u89c4\u901a\u77e5\u90ae\u7bb1\/URL\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                                                          • TTL \u7279\u6027：\u4ece 2017 \u5e74 9 \u6708 8 \u65e5\u8d77，CA\/Browser Forum 187 \u53f7\u63d0\u6848\u8981\u6c42\u6240\u6709 CA \u5f3a\u5236\u68c0\u67e5 CAA \u8bb0\u5f55\u3002\u817e\u8baf\u4e91\u7b49\u670d\u52a1\u5546\u9ed8\u8ba4 TTL \u4e3a 600 s\u3002<\/li>\n
                                                                                                                          • \u63a8\u8350\u914d\u7f6e：600\u20133600 s\u3002CAA \u8bb0\u5f55\u53d8\u66f4\u751f\u6548\u5feb，\u5efa\u8bae 600 s\u3002<\/li>\n<\/ul>\n

                                                                                                                            9.2 DNSSEC \u7cfb\u5217\u8bb0\u5f55<\/h4>\n

                                                                                                                            DNSSEC（DNS Security Extensions）\u901a\u8fc7\u6570\u5b57\u7b7e\u540d\u4fdd\u969c DNS \u54cd\u5e94\u5b8c\u6574\u6027\u4e0e\u771f\u5b9e\u6027，\u6d89\u53ca\u4ee5\u4e0b\u8bb0\u5f55\u7c7b\u578b：<\/p>\n

                                                                                                                            9.2.1 DNSKEY \u8bb0\u5f55（Type 48）<\/h5>\n
                                                                                                                              \n
                                                                                                                            • \u5b9a\u4e49：[RFC 4034] \u2014 \u5b58\u50a8\u57df\u7684\u516c\u94a5，\u7528\u4e8e\u9a8c\u8bc1 RRSIG \u7b7e\u540d\u3002<\/li>\n
                                                                                                                            • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                              example.com. 86400 IN DNSKEY 256 3 5 ( AQPSKmynfzW4kyBv015MUG2DeIQ3… )<\/p>\n

                                                                                                                                \n
                                                                                                                              • TTL \u7279\u6027：\u5bc6\u94a5\u8f6e\u8f6c\u9891\u7387\u4f4e，\u5efa\u8bae\u9ad8 TTL（86400 s）\u3002ZSK（\u7b7e\u540d\u5bc6\u94a5）\u53ef\u4f4e\u4e8e KSK（\u5bc6\u94a5\u7b7e\u540d\u5bc6\u94a5）\u3002<\/li>\n<\/ul>\n
                                                                                                                                9.2.2 DS \u8bb0\u5f55（Type 43）<\/h5>\n
                                                                                                                                  \n
                                                                                                                                • \u5b9a\u4e49：[RFC 4034] \u2014 \u59d4\u6258\u7b7e\u540d\u8005（Delegation Signer），\u5b58\u50a8\u5728\u7236\u533a\u57df\u4e2d，\u6307\u5411\u5b50\u57df\u7684 DNSKEY\u3002<\/li>\n
                                                                                                                                • TTL \u7279\u6027：\u7531 TLD\/\u7236\u533a\u57df\u7ba1\u7406，TTL \u901a\u5e38\u8f83\u9ad8（86400 s）\u3002\u53d8\u66f4\u9700\u7b49\u5f85\u7236\u533a\u57df\u5237\u65b0\u3002<\/li>\n<\/ul>\n
                                                                                                                                  9.2.3 RRSIG \u8bb0\u5f55（Type 46）<\/h5>\n
                                                                                                                                    \n
                                                                                                                                  • \u5b9a\u4e49：[RFC 4034] \u2014 DNSSEC \u8d44\u6e90\u8bb0\u5f55\u96c6\u7b7e\u540d\u3002\u6bcf\u6761\u7b7e\u540d\u8986\u76d6\u4e00\u4e2a RRset\u3002<\/li>\n
                                                                                                                                  • TTL \u7279\u6027：RRSIG \u7684 TTL \u5e94\u7b49\u4e8e\u88ab\u7b7e\u540d RRset \u7684\u539f\u59cb TTL\u3002\u7b7e\u540d\u6709\u6548\u671f\u901a\u5e38\u4e3a 30 \u5929（\u7531 RRSIG \u8bb0\u5f55\u4e2d\u7684 Expiration \u5b57\u6bb5\u63a7\u5236）\u3002<\/li>\n<\/ul>\n
                                                                                                                                    9.2.4 NSEC \u8bb0\u5f55（Type 47）<\/h5>\n
                                                                                                                                      \n
                                                                                                                                    • \u5b9a\u4e49：[RFC 4034] \/ [RFC 4035] \u2014 \u63d0\u4f9b\u5426\u5b9a\u5b58\u5728\u8bc1\u660e（\u8bc1\u660e\u67d0\u540d\u79f0\u5728\u533a\u57df\u4e2d\u786e\u5b9e\u4e0d\u5b58\u5728）\u3002<\/li>\n
                                                                                                                                    • TTL \u7279\u6027：\u5e94\u7b49\u4e8e SOA \u7684 Minimum TTL \u5b57\u6bb5\u503c\u3002[RFC 8198] \u5efa\u8bae\u9012\u5f52\u89e3\u6790\u5668\u5728\u6536\u5230\u5426\u5b9a\u54cd\u5e94\u65f6\u4f7f\u7528 SOA Minimum \u5b57\u6bb5\u4f5c\u4e3a\u5426\u5b9a\u7f13\u5b58 TTL\u3002<\/li>\n<\/ul>\n
                                                                                                                                      9.2.5 NSEC3 \u8bb0\u5f55（Type 50）<\/h5>\n
                                                                                                                                        \n
                                                                                                                                      • \u5b9a\u4e49：[RFC 5155] \u2014 NSEC \u7684\u6539\u8fdb\u7248，\u5bf9\u57df\u540d\u8fdb\u884c\u54c8\u5e0c\u52a0\u5bc6，\u9632\u6b62\u533a\u57df\u679a\u4e3e\u653b\u51fb\u3002<\/li>\n
                                                                                                                                      • TTL \u7279\u6027：\u4e0e NSEC \u76f8\u540c，\u7b49\u4e8e SOA Minimum TTL\u3002<\/li>\n<\/ul>\n
                                                                                                                                        9.2.6 TLSA \u8bb0\u5f55（Type 52）<\/h5>\n
                                                                                                                                          \n
                                                                                                                                        • \u5b9a\u4e49：[RFC 6698] \u2014 TLS \u8bc1\u4e66\u5173\u8054（TLSA），\u7528\u4e8e DANE（DNS-based Authentication of Named Entities）\u534f\u8bae\u3002<\/li>\n
                                                                                                                                        • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                                          _25._tcp.example.com. 3600 IN TLSA 3 1 1 <certificate-hash><\/p>\n

                                                                                                                                            \n
                                                                                                                                          • \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                                                              \n
                                                                                                                                            • Certificate Usage（\u8bc1\u4e66\u7528\u6cd5）：0\u20133，\u5b9a\u4e49\u8bc1\u4e66\u5339\u914d\u65b9\u5f0f\u3002<\/li>\n
                                                                                                                                            • Selector（\u9009\u62e9\u5668）：0（\u5b8c\u6574\u8bc1\u4e66）\u6216 1（\u516c\u94a5）\u3002<\/li>\n
                                                                                                                                            • Matching Type（\u5339\u914d\u7c7b\u578b）：0（SHA-256）\u6216 1（SHA-512）\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                                                                            • \u63a8\u8350\u914d\u7f6e：3600\u201386400 s\u3002DANE \u90e8\u7f72\u573a\u666f\u5efa\u8bae\u4e0e\u8bc1\u4e66\u6709\u6548\u671f\u5bf9\u9f50\u3002<\/li>\n<\/ul>\n
                                                                                                                                              9.2.7 SSHFP \u8bb0\u5f55（Type 44）<\/h5>\n
                                                                                                                                                \n
                                                                                                                                              • \u5b9a\u4e49：[RFC 4255] \u2014 \u5b58\u50a8 SSH \u670d\u52a1\u5668\u7684\u516c\u94a5\u6307\u7eb9，\u7528\u4e8e SSH \u8fde\u63a5\u9a8c\u8bc1\u3002<\/li>\n
                                                                                                                                              • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                                                example.com. 3600 IN SSHFP 1 1 abcdef1234567890…<\/p>\n

                                                                                                                                                  \n
                                                                                                                                                • \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                                                                    \n
                                                                                                                                                  • Algorithm（\u7b97\u6cd5）：1 = RSA，2 = DSA，3 = ECDSA，4 = ED25519\u3002<\/li>\n
                                                                                                                                                  • Fingerprint Type（\u6307\u7eb9\u7c7b\u578b）：1 = SHA-1，2 = SHA-256\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                                                                                  • \u63a8\u8350\u914d\u7f6e：86400 s\u3002SSH \u670d\u52a1\u5668\u5bc6\u94a5\u53d8\u66f4\u9891\u7387\u6781\u4f4e\u3002<\/li>\n<\/ul>\n
                                                                                                                                                    9.2.8 CERT \u8bb0\u5f55（Type 37）<\/h5>\n
                                                                                                                                                      \n
                                                                                                                                                    • \u5b9a\u4e49：[RFC 4398] \u2014 \u5b58\u50a8\u8bc1\u4e66（PKIX\u3001SPKI\u3001PGP \u7b49），\u7528\u4e8e X.509 \u8bc1\u4e66\u5728 DNS \u4e2d\u7684\u53d1\u5e03\u3002<\/li>\n
                                                                                                                                                    • TTL \u7279\u6027：\u8f83\u5c11\u4f7f\u7528，TTL \u7531\u90e8\u7f72\u7b56\u7565\u51b3\u5b9a，\u901a\u5e38 3600\u201386400 s\u3002<\/li>\n<\/ul>\n
                                                                                                                                                      9.2.9 OPENPGPKEY \u8bb0\u5f55（Type 61）<\/h5>\n
                                                                                                                                                        \n
                                                                                                                                                      • \u5b9a\u4e49：[RFC 7929] \u2014 \u5b58\u50a8 OpenPGP \u516c\u94a5，\u7528\u4e8e\u5c06\u57df\u540d\u4e0e OpenPGP \u5bc6\u94a5\u5173\u8054\u3002<\/li>\n
                                                                                                                                                      • TTL \u7279\u6027：\u5bc6\u94a5\u8f6e\u8f6c\u9891\u7387\u4f4e，\u5efa\u8bae 86400 s\u3002<\/li>\n<\/ul>\n

                                                                                                                                                        9.3 CSYNC \u8bb0\u5f55（Type 65）<\/h4>\n
                                                                                                                                                          \n
                                                                                                                                                        • \u5b9a\u4e49：[RFC 7477] \u2014 \u533a\u57df\u540c\u6b65（Child Synchronization），\u7528\u4e8e\u5728\u7236\/\u5b50\u533a\u57df\u4e4b\u95f4\u540c\u6b65 NS \u548c DS \u8bb0\u5f55\u3002<\/li>\n
                                                                                                                                                        • TTL \u7279\u6027：\u65b0\u5174\u8bb0\u5f55，TTL \u5efa\u8bae 3600 s\u3002<\/li>\n<\/ul>\n
                                                                                                                                                          \n

                                                                                                                                                          10 \u547d\u540d\u4e0e\u8def\u7531\u8bb0\u5f55<\/h3>\n

                                                                                                                                                          10.1 NAPTR \u8bb0\u5f55（Type 35）<\/h4>\n
                                                                                                                                                            \n
                                                                                                                                                          • \u5b9a\u4e49：[RFC 3403] \u2014 \u547d\u540d\u6743\u5a01\u6307\u9488（Naming Authority Pointer），\u7528\u4e8e ENUM \u67e5\u8be2，\u5c06\u7535\u8bdd\u53f7\u7801\u6620\u5c04\u5230\u7f51\u7edc\u670d\u52a1\u3002<\/li>\n
                                                                                                                                                          • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                                                            example.com. 3600 IN NAPTR 100 10 "u" "E2U+sip" "!" "!.*!sip:user@example.com!" .<\/p>\n

                                                                                                                                                              \n
                                                                                                                                                            • \u5b57\u6bb5\u8bf4\u660e：\n
                                                                                                                                                                \n
                                                                                                                                                              • Order（\u987a\u5e8f）：\u6570\u503c\u8d8a\u5c0f\u4f18\u5148\u5904\u7406\u3002<\/li>\n
                                                                                                                                                              • Preference（\u504f\u597d）：\u540c\u7b49 Order \u4e0b\u7684\u4f18\u5148\u7ea7\u3002<\/li>\n
                                                                                                                                                              • Flags（\u6807\u5fd7）：u（\u8fd4\u56de URI）\u3001s（\u8fd4\u56de\u670d\u52a1\u540d）\u7b49\u3002<\/li>\n
                                                                                                                                                              • Services（\u670d\u52a1）：\u5982 E2U+sip\u3002<\/li>\n
                                                                                                                                                              • RegExp（\u6b63\u5219\u8868\u8fbe\u5f0f）：\u7528\u4e8e\u8f6c\u6362\u67e5\u8be2\u3002<\/li>\n
                                                                                                                                                              • Replacement（\u66ff\u6362）：\u66ff\u4ee3\u57df\u540d\u3002<\/li>\n<\/ul>\n<\/li>\n
                                                                                                                                                              • \u63a8\u8350\u914d\u7f6e：3600\u201386400 s\u3002ENUM \u670d\u52a1\u53d8\u66f4\u9891\u7387\u4f4e\u3002<\/li>\n<\/ul>\n
                                                                                                                                                                \n

                                                                                                                                                                11 \u5176\u4ed6\u8bb0\u5f55<\/h3>\n

                                                                                                                                                                11.1 HINFO \u8bb0\u5f55（Type 13）<\/h4>\n
                                                                                                                                                                  \n
                                                                                                                                                                • \u5b9a\u4e49：[RFC 1035] \u2014 \u4e3b\u673a\u4fe1\u606f\u8bb0\u5f55，\u5b58\u50a8\u4e3b\u673a CPU \u548c\u64cd\u4f5c\u7cfb\u7edf\u4fe1\u606f\u3002<\/li>\n
                                                                                                                                                                • \u683c\u5f0f\u793a\u4f8b：<\/li>\n<\/ul>\n

                                                                                                                                                                  example.com. 86400 IN HINFO "Intel Xeon" "Linux 5.15"<\/p>\n

                                                                                                                                                                    \n
                                                                                                                                                                  • \u5b89\u5168\u5efa\u8bae：\u66b4\u9732\u4e3b\u673a\u4fe1\u606f\u53ef\u80fd\u5e26\u6765\u5b89\u5168\u98ce\u9669，\u751f\u4ea7\u73af\u5883\u5efa\u8bae\u5220\u9664\u6216\u7559\u7a7a\u3002<\/li>\n<\/ul>\n

                                                                                                                                                                    11.2 OPT \u8bb0\u5f55（Type 41）<\/h4>\n
                                                                                                                                                                      \n
                                                                                                                                                                    • \u5b9a\u4e49：[RFC 6891] \u2014 EDNS0（Extension Mechanisms for DNS）\u9009\u9879\u8bb0\u5f55，\u7528\u4e8e\u6269\u5c55 DNS \u62a5\u6587\u5927\u5c0f\u548c\u6dfb\u52a0\u6269\u5c55\u529f\u80fd\u3002<\/li>\n
                                                                                                                                                                    • TTL \u7279\u6027：OPT \u8bb0\u5f55\u4e0d\u7f13\u5b58，TTL \u5b57\u6bb5\u88ab\u89e3\u91ca\u4e3a EXTENDED-RCODE \u548c VERSION \u7b49\u6807\u5fd7\u4f4d，\u65e0\u5b9e\u9645 TTL \u542b\u4e49\u3002<\/li>\n<\/ul>\n

                                                                                                                                                                      11.3 ANY \u67e5\u8be2（Type 255）<\/h4>\n
                                                                                                                                                                        \n
                                                                                                                                                                      • \u5b9a\u4e49：[RFC 1035] \u2014 \u8fd4\u56de\u533a\u57df\u4e2d\u6240\u6709\u8bb0\u5f55\u7c7b\u578b\u3002\u6ce8\u610f：[RFC 8482] \u5df2\u7981\u6b62\u5c06 ANY \u7528\u4e8e\u653e\u5927\u653b\u51fb，\u73b0\u4ee3\u89e3\u6790\u5668\u5bf9 ANY \u67e5\u8be2\u8fd4\u56de\u6709\u9650\u7ed3\u679c\u3002<\/li>\n
                                                                                                                                                                      • TTL \u7279\u6027：\u4e0d\u9002\u7528（ANY \u662f\u67e5\u8be2\u7c7b\u578b，\u975e\u5b58\u50a8\u8bb0\u5f55）\u3002<\/li>\n<\/ul>\n

                                                                                                                                                                        11.4 AXFR \/ IXFR \u8bb0\u5f55<\/h4>\n
                                                                                                                                                                          \n
                                                                                                                                                                        • \u5b9a\u4e49：[RFC 1035] \/ [RFC 1996] \u2014 \u533a\u57df\u4f20\u8f93（\u5168\u91cf\/\u589e\u91cf），\u7528\u4e8e\u4e3b\u4ece DNS \u670d\u52a1\u5668\u540c\u6b65\u3002<\/li>\n
                                                                                                                                                                        • TTL \u7279\u6027：\u4e0d\u9002\u7528（\u4f20\u8f93\u534f\u8bae\u7ea7\u522b\u64cd\u4f5c，\u975e\u8d44\u6e90\u8bb0\u5f55）\u3002<\/li>\n<\/ul>\n
                                                                                                                                                                          \n

                                                                                                                                                                          12 TTL \u914d\u7f6e\u6700\u4f73\u5b9e\u8df5<\/h3>\n

                                                                                                                                                                          12.1 \u5404\u8bb0\u5f55\u7c7b\u578b TTL \u63a8\u8350\u901f\u67e5\u8868<\/h4>\n\n\u8bb0\u5f55\u7c7b\u578b\u63a8\u8350 TTL（\u7a33\u5b9a\u671f）\u63a8\u8350 TTL（\u53d8\u66f4\u671f）\u6700\u5c0f TTL（\u4e91\u5e73\u53f0\u9650\u5236）<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                                                                                                                                                                          A \/ AAAA<\/td>\n86400 s（24 h）<\/td>\n300 s（5 min）<\/td>\n\u963f\u91cc\u4e91\u514d\u8d39\u7248 600 s；\u4f01\u4e1a\u7248 1 s<\/td>\n<\/tr>\n
                                                                                                                                                                          CNAME<\/td>\n86400 s<\/td>\n300 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          MX<\/td>\n14400 s（4 h）<\/td>\n3600 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          NS<\/td>\n86400 s<\/td>\n86400 s（\u63d0\u524d\u89c4\u5212）<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          SOA Minimum<\/td>\n86400 s<\/td>\n\u2014<\/td>\n\u2014<\/td>\n<\/tr>\n
                                                                                                                                                                          TXT（SPF\/DMARC）<\/td>\n3600 s<\/td>\n300 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          PTR<\/td>\n86400 s<\/td>\n3600 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          SRV<\/td>\n3600 s<\/td>\n300 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          CAA<\/td>\n600\u20133600 s<\/td>\n600 s<\/td>\n\u817e\u8baf\u4e91\u9ed8\u8ba4 600 s<\/td>\n<\/tr>\n
                                                                                                                                                                          SVCB \/ HTTPS<\/td>\n3600 s<\/td>\n300 s<\/td>\n\u89c6\u670d\u52a1\u5546<\/td>\n<\/tr>\n
                                                                                                                                                                          DNSKEY<\/td>\n86400 s<\/td>\n86400 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          DS<\/td>\n86400 s<\/td>\n86400 s<\/td>\n\u7531 TLD \u63a7\u5236<\/td>\n<\/tr>\n
                                                                                                                                                                          RRSIG<\/td>\n\u7b49\u4e8e\u88ab\u7b7e\u540d RRset TTL<\/td>\n\u2014<\/td>\n\u2014<\/td>\n<\/tr>\n
                                                                                                                                                                          NSEC \/ NSEC3<\/td>\n\u7b49\u4e8e SOA Minimum<\/td>\n\u2014<\/td>\n\u2014<\/td>\n<\/tr>\n
                                                                                                                                                                          TLSA<\/td>\n3600\u201386400 s<\/td>\n3600 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          SSHFP<\/td>\n86400 s<\/td>\n3600 s<\/td>\n\u540c A<\/td>\n<\/tr>\n
                                                                                                                                                                          NAPTR<\/td>\n3600\u201386400 s<\/td>\n3600 s<\/td>\n\u540c A<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                                                                                          12.2 TTL \u53d8\u66f4\u7ba1\u7406\u6d41\u7a0b<\/h4>\n
                                                                                                                                                                        • \u76d1\u6d4b\u73b0\u6709 TTL：\u901a\u8fc7 dig \u547d\u4ee4\u67e5\u8be2\u5f53\u524d\u914d\u7f6e\u3002<\/li>\n

                                                                                                                                                                          dig<\/span> +nocmd +nocomment +ttlid example.com ANY<\/p>\n

                                                                                                                                                                        • \n

                                                                                                                                                                          \u6e10\u8fdb\u5f0f\u8c03\u6574：\u6309 50% \u5e45\u5ea6\u9010\u6b65\u63a5\u8fd1\u76ee\u6807\u503c，\u907f\u514d TTL \u8df3\u53d8\u5bfc\u81f4\u7f13\u5b58\u4e0d\u4e00\u81f4\u3002<\/p>\n<\/li>\n

                                                                                                                                                                        • \n

                                                                                                                                                                          \u751f\u6548\u9a8c\u8bc1：\u4f7f\u7528\u5168\u7403 DNS \u4f20\u64ad\u68c0\u67e5\u5de5\u5177（\u5982 WhatsMyDNS）\u9a8c\u8bc1\u5168\u5c40\u751f\u6548\u60c5\u51b5\u3002<\/p>\n<\/li>\n

                                                                                                                                                                        • \n

                                                                                                                                                                          \u53d8\u66f4\u5b8c\u6210\u540e\u6062\u590d：\u53d8\u66f4\u5b8c\u6210\u4e14\u4e1a\u52a1\u7a33\u5b9a\u540e，\u6062\u590d\u539f TTL \u8bbe\u7f6e\u4ee5\u4f18\u5316\u89e3\u6790\u6027\u80fd\u3002<\/p>\n<\/li>\n

                                                                                                                                                                          12.3 \u7279\u6b8a\u573a\u666f\u7b56\u7565<\/h4>\n\n\u573a\u666f\u63a8\u8350 TTL\u8bf4\u660e<\/tr>\n\n\n\n\n\n\n\n
                                                                                                                                                                          \u751f\u4ea7\u73af\u5883\u7a33\u5b9a\u670d\u52a1<\/td>\n86400 s（24 h）<\/td>\n\u7535\u5546\u4e3b\u7ad9\u3001\u4f01\u4e1a\u95e8\u6237<\/td>\n<\/tr>\n
                                                                                                                                                                          \u7070\u5ea6\u53d1\u5e03 \/ AB \u6d4b\u8bd5<\/td>\n300 s（5 min）<\/td>\n\u65b0\u529f\u80fd\u6e10\u8fdb\u5f0f\u6d41\u91cf\u5207\u6362<\/td>\n<\/tr>\n
                                                                                                                                                                          \u5e94\u6025\u6545\u969c\u5207\u6362<\/td>\n60 s（1 min）<\/td>\n\u707e\u5907\u7cfb\u7edf\u5207\u6362<\/td>\n<\/tr>\n
                                                                                                                                                                          \u591a\u4e91\u67b6\u6784\u90e8\u7f72<\/td>\n3600 s（1 h）<\/td>\n\u6df7\u5408\u4e91\u8d1f\u8f7d\u5747\u8861<\/td>\n<\/tr>\n
                                                                                                                                                                          DDoS \u9632\u62a4<\/td>\n60 s + Anycast<\/td>\n\u63d0\u5347\u653b\u51fb\u6d41\u91cf\u6e05\u6d17\u6548\u7387<\/td>\n<\/tr>\n
                                                                                                                                                                          CDN \u52a8\u6001\u52a0\u901f<\/td>\n300\u20133600 s<\/td>\n\u914d\u5408 CDN \u5382\u5546\u52a8\u6001 TTL \u8c03\u8282<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                                                                                          12.4 \u884c\u4e1a\u57fa\u51c6\u6570\u636e（\u6765\u6e90：DNSPerf 2023 \u5e74\u5ea6\u62a5\u544a）<\/h4>\n
                                                                                                                                                                            \n
                                                                                                                                                                          • \u5168\u7403 TOP10 \u57df\u540d\u6ce8\u518c\u5546\u5e73\u5747\u9ed8\u8ba4 TTL：7200 s（2 \u5c0f\u65f6）<\/li>\n
                                                                                                                                                                          • \u91d1\u878d\u884c\u4e1a\u5178\u578b\u914d\u7f6e：14400 s（4 \u5c0f\u65f6）<\/li>\n
                                                                                                                                                                          • CDN \u670d\u52a1\u5546\u63a8\u8350\u503c：300\u20133600 s（\u52a8\u6001\u8c03\u6574）<\/li>\n<\/ul>\n
                                                                                                                                                                            \n

                                                                                                                                                                            13 DNS \u8bb0\u5f55\u7c7b\u578b\u7f16\u53f7\u8868<\/h3>\n

                                                                                                                                                                            \u4ee5\u4e0b\u4e3a IANA \u6ce8\u518c\u7684\u5e38\u7528 DNS \u8bb0\u5f55\u7c7b\u578b\u53ca\u5176\u7f16\u53f7（\u975e exhaustive，\u4ec5\u5217\u5e38\u7528\u7c7b\u578b）：<\/p>\n\n\u7c7b\u578b\u7f16\u53f7\u5b9a\u4e49 RFC\u8bf4\u660e<\/tr>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                                                                                                                                                                            A<\/td>\n1<\/td>\n[RFC 1035]<\/td>\nIPv4 \u5730\u5740\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            NS<\/td>\n2<\/td>\n[RFC 1035]<\/td>\n\u57df\u540d\u670d\u52a1\u5668\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            CNAME<\/td>\n5<\/td>\n[RFC 1035]<\/td>\n\u89c4\u8303\u540d\u79f0\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            SOA<\/td>\n6<\/td>\n[RFC 1035]<\/td>\n\u8d77\u59cb\u6388\u6743\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            PTR<\/td>\n12<\/td>\n[RFC 1035]<\/td>\n\u6307\u9488\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            HINFO<\/td>\n13<\/td>\n[RFC 1035]<\/td>\n\u4e3b\u673a\u4fe1\u606f\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            MX<\/td>\n15<\/td>\n[RFC 1035]<\/td>\n\u90ae\u4ef6\u4ea4\u6362\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            TXT<\/td>\n16<\/td>\n[RFC 1035]<\/td>\n\u6587\u672c\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            AFSDB<\/td>\n18<\/td>\n[RFC 1183]<\/td>\nAFS \u6570\u636e\u5e93\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            AAAA<\/td>\n28<\/td>\n[RFC 3596]<\/td>\nIPv6 \u5730\u5740\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            SRV<\/td>\n33<\/td>\n[RFC 2782]<\/td>\n\u670d\u52a1\u5b9a\u4f4d\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            NAPTR<\/td>\n35<\/td>\n[RFC 3403]<\/td>\n\u547d\u540d\u6743\u5a01\u6307\u9488<\/td>\n<\/tr>\n
                                                                                                                                                                            CERT<\/td>\n37<\/td>\n[RFC 4398]<\/td>\n\u8bc1\u4e66\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            DNAME<\/td>\n39<\/td>\n[RFC 2672]<\/td>\n\u522b\u540d\u57df\u540d\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            APL<\/td>\n42<\/td>\n[RFC 3123]<\/td>\n\u5730\u5740\u524d\u7f00\u5217\u8868<\/td>\n<\/tr>\n
                                                                                                                                                                            DS<\/td>\n43<\/td>\n[RFC 4034]<\/td>\n\u59d4\u6258\u7b7e\u540d\u8005\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            SSHFP<\/td>\n44<\/td>\n[RFC 4255]<\/td>\nSSH \u516c\u94a5\u6307\u7eb9<\/td>\n<\/tr>\n
                                                                                                                                                                            RRSIG<\/td>\n46<\/td>\n[RFC 4034]<\/td>\nDNSSEC \u7b7e\u540d\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            NSEC<\/td>\n47<\/td>\n[RFC 4034]<\/td>\n\u5426\u5b9a\u5b58\u5728\u8bc1\u660e<\/td>\n<\/tr>\n
                                                                                                                                                                            DNSKEY<\/td>\n48<\/td>\n[RFC 4034]<\/td>\nDNSSEC \u516c\u94a5<\/td>\n<\/tr>\n
                                                                                                                                                                            DHCID<\/td>\n49<\/td>\n[RFC 4701]<\/td>\nDHCP \u6807\u8bc6\u7b26<\/td>\n<\/tr>\n
                                                                                                                                                                            NSEC3<\/td>\n50<\/td>\n[RFC 5155]<\/td>\n\u589e\u5f3a\u578b\u5426\u5b9a\u5b58\u5728\u8bc1\u660e<\/td>\n<\/tr>\n
                                                                                                                                                                            TLSA<\/td>\n52<\/td>\n[RFC 6698]<\/td>\nTLS \u8bc1\u4e66\u5173\u8054<\/td>\n<\/tr>\n
                                                                                                                                                                            OPENPGPKEY<\/td>\n61<\/td>\n[RFC 7929]<\/td>\nOpenPGP \u516c\u94a5<\/td>\n<\/tr>\n
                                                                                                                                                                            SVCB<\/td>\n64<\/td>\n[RFC 9460]<\/td>\n\u670d\u52a1\u7ed1\u5b9a\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            HTTPS<\/td>\n65<\/td>\n[RFC 9460]<\/td>\nHTTPS \u670d\u52a1\u8bb0\u5f55<\/td>\n<\/tr>\n
                                                                                                                                                                            CSYNC<\/td>\n65<\/td>\n[RFC 7477]<\/td>\n\u533a\u57df\u540c\u6b65<\/td>\n<\/tr>\n
                                                                                                                                                                            OPT<\/td>\n41<\/td>\n[RFC 6891]<\/td>\nEDNS0 \u9009\u9879（\u4f2a\u8bb0\u5f55）<\/td>\n<\/tr>\n
                                                                                                                                                                            ANY<\/td>\n255<\/td>\n[RFC 1035]<\/td>\n\u6240\u6709\u8bb0\u5f55（\u67e5\u8be2\u7c7b\u578b）<\/td>\n<\/tr>\n
                                                                                                                                                                            DLV<\/td>\n32769<\/td>\n[RFC 4431]<\/td>\nDNSSEC \u65c1\u8def\u9a8c\u8bc1（\u5df2\u5e9f\u5f03）<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                                                                                            \u6ce8：SPF \u8bb0\u5f55\u7c7b\u578b（Type 99）\u5df2\u5728 [RFC 7208] \u4e2d\u88ab\u6807\u8bb0\u4e3a"\u5df2\u5f52\u6863"（Historic），\u5b9e\u9645\u90e8\u7f72\u4e2d SPF \u7b56\u7565\u7edf\u4e00\u4f7f\u7528 TXT \u8bb0\u5f55\u5b58\u50a8\u3002<\/p>\n

                                                                                                                                                                            \n

                                                                                                                                                                            14 \u53c2\u8003\u8d44\u6599<\/h3>\n
                                                                                                                                                                              \n
                                                                                                                                                                            • [RFC 1035] \u2014 Domain Names – Implementation and Specification<\/li>\n
                                                                                                                                                                            • [RFC 2308] \u2014 Negative Caching of DNS Queries<\/li>\n
                                                                                                                                                                            • [RFC 2672] \u2014 DNAME RR<\/li>\n
                                                                                                                                                                            • [RFC 2782] \u2014 A RR for Assigning Locators (SRV)<\/li>\n
                                                                                                                                                                            • [RFC 3123] \u2014 The APL RR<\/li>\n
                                                                                                                                                                            • [RFC 3403] \u2014 The Naming Authority Pointer (NAPTR) DNS Record<\/li>\n
                                                                                                                                                                            • [RFC 3596] \u2014 DNS Extensions to Support IPng<\/li>\n
                                                                                                                                                                            • [RFC 4034] \u2014 DNS Security Extensions (DNSSEC) Resource Records<\/li>\n
                                                                                                                                                                            • [RFC 4035] \u2014 Protocol Specifications<\/li>\n
                                                                                                                                                                            • [RFC 4255] \u2014 DNS RR for SSH Public Key Fingerprints<\/li>\n
                                                                                                                                                                            • [RFC 4398] \u2014 Storage of Certificates in the DNS<\/li>\n
                                                                                                                                                                            • [RFC 4701] \u2014 A Method for Storing IPsec Key Management Info in DNS<\/li>\n
                                                                                                                                                                            • [RFC 5155] \u2014 DNS Security Extension Naming Authority Privilege<\/li>\n
                                                                                                                                                                            • [RFC 6698] \u2014 DNS-Based Authentication of Named Entities (DANE)<\/li>\n
                                                                                                                                                                            • [RFC 6844] \u2014 Certification Authority Authorization (CAA)<\/li>\n
                                                                                                                                                                            • [RFC 6891] \u2014 Extension Mechanisms for DNS (EDNS0)<\/li>\n
                                                                                                                                                                            • [RFC 7208] \u2014 Sender Policy Framework (SPF)<\/li>\n
                                                                                                                                                                            • [RFC 7477] \u2014 Child Synchronization (CSYNC)<\/li>\n
                                                                                                                                                                            • [RFC 7489] \u2014 DMARC<\/li>\n
                                                                                                                                                                            • [RFC 7929] \u2014 OpenPGP Key Records in DNS<\/li>\n
                                                                                                                                                                            • [RFC 8198] \u2014 Authoritative DNS Using DNSSEC with Ed25519 and Ed448<\/li>\n
                                                                                                                                                                            • [RFC 8482] \u2014 Prohibiting Any Queries in the DNS<\/li>\n
                                                                                                                                                                            • [RFC 9460] \u2014 Service Binding and Parameter Specification via the DNS (SVCB and HTTPS)<\/li>\n
                                                                                                                                                                            • IANA \u2014 DNS Resource Record (RR) TYPEs Registry: https:\/\/www.iana.org\/assignments\/dns-parameters<\/li>\n
                                                                                                                                                                            • DNSPerf \u2014 State of the Internet\/LAN Report 2023<\/li>\n<\/ul>\n
                                                                                                                                                                              \n

                                                                                                                                                                              \u6ce8：\u672c\u6587\u4e3a\u201cDNS \u57df\u540d\u7cfb\u7edf \u201d\u76f8\u5173\u5408\u8f91\u3002 \u7565\u4f5c\u91cd\u6392，\u5982\u6709\u5185\u5bb9\u5f02\u5e38，\u8bf7\u770b\u539f\u6587\u3002<\/p>\n

                                                                                                                                                                              \n

                                                                                                                                                                              \u53c2\u8003\u8d44\u6599<\/h2>\n
                                                                                                                                                                                \n
                                                                                                                                                                              • DNS \u539f\u7406\u5165\u95e8 \u2014 \u962e\u4e00\u5cf0<\/li>\n
                                                                                                                                                                              • DNS \u67e5\u8be2\u539f\u7406\u8be6\u89e3 – \u962e\u4e00\u5cf0<\/li>\n
                                                                                                                                                                              • DNS \u57fa\u7840\u4e4b\u901a\u8fc7 dig \u547d\u4ee4\u7406\u89e3 DNS \u57df\u540d\u89e3\u6790<\/li>\n
                                                                                                                                                                              • \u4e00\u6587\u5f04\u61c2\u4ec0\u4e48\u662f DNS\u3001A \u8bb0\u5f55\u3001CNAME \u4ee5\u53ca\u4f7f\u7528\u65b9\u6cd5<\/li>\n
                                                                                                                                                                              • RFC 8484 – DNS Queries over HTTPS (DoH)<\/li>\n
                                                                                                                                                                              • RFC 7858 – DNS over TLS (DoT)<\/li>\n
                                                                                                                                                                              • RFC 4033~RFC 4035 – DNS Security Extensions<\/li>\n
                                                                                                                                                                              • RFC 6891 – Extension Mechanisms for DNS (EDNS0)<\/li>\n
                                                                                                                                                                              • RFC 2181 – Clarifications to the DNS Specification<\/li>\n
                                                                                                                                                                              • CNAME Lookup – MxToolbox<\/li>\n<\/ul>\n
                                                                                                                                                                                \n
                                                                                                                                                                                  \n
                                                                                                                                                                                • DNS A \u8bb0\u5f55 NS \u8bb0\u5f55 CNAME \u8bb0\u5f55 TXT \u8bb0\u5f55 TTL \u503c_a \u8bb0\u5f55 ttl-CSDN \u535a\u5ba2 https:\/\/blog.csdn.net\/silentpebble\/article\/details\/44196083<\/li>\n
                                                                                                                                                                                • A \u8bb0\u5f55\u548c CNAME \u8bb0\u5f55\u7684\u533a\u522b_\u6ca1\u6709 a \u8bb0\u5f55\u53ea\u6709 cname-CSDN \u535a\u5ba2_ https:\/\/blog.csdn.net\/aaaaaab_\/article\/details\/86678464<\/li>\n
                                                                                                                                                                                • \u7b80\u5355\u7684\u89e3\u91ca\u4e0b\u4ec0\u4e48\u662f CNAME？-CSDN \u535a\u5ba2 https:\/\/blog.csdn.net\/DD_orz\/article\/details\/100034049<\/li>\n
                                                                                                                                                                                • DNS \u57fa\u7840\u4e4b\u901a\u8fc7 dig \u547d\u4ee4\u7406\u89e3 DNS \u57df\u540d\u89e3\u6790\u4e2d\u7684 A \u8bb0\u5f55，AAAA \u8bb0\u5f55，CNAME \u8bb0\u5f55，MX \u8bb0\u5f55，NS \u8bb0\u5f55_dig cname-CSDN \u535a\u5ba2 https:\/\/blog.csdn.net\/zxl1990_ok\/article\/details\/125432123<\/li>\n
                                                                                                                                                                                • \u4e00\u6587\u5f04\u61c2\u4ec0\u4e48\u662f DNS\u3001A \u8bb0\u5f55\u3001CNAME \u4ee5\u53ca\u4f7f\u7528\u65b9\u6cd5_dns cname-CSDN \u535a\u5ba2 https:\/\/blog.csdn.net\/weixin_43820024\/article\/details\/132116370<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                                                                                                                                                                                  DNS \u57df\u540d\u7cfb\u7edf
                                                                                                                                                                                  \n1. DNS \u6982\u8ff0
                                                                                                                                                                                  \n1.1 \u57df\u540d\u7cfb\u7edf\u7b80\u4ecb
                                                                                                                                                                                  \nDNS（Domain Name System，\u57df\u540d\u7cfb\u7edf）\u662f\u4e92\u8054\u7f51\u4e2d\u7528\u4e8e\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d（\u4f8b\u5982 www.example.com）\u8f6c\u6362\u4e3a\u8ba1\u7b97\u673a\u53ef\u7406\u89e3\u7684 IP \u5730\u5740（\u4f8b\u5982 192.168.1.1）\u7684\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u7cfb\u7edf\u3002DNS \u5145\u5f53\u4e92\u8054\u7f51\u4e2d\u7684\\”\u7535\u8bdd\u7c3f\\”\u89d2\u8272，\u5c06\u7528\u6237\u8f93\u5165\u7684\u57df\u540d\u6620\u5c04\u5230\u5b9e\u9645\u7684\u7f51\u7edc\u5730\u5740，\u4f7f<\/p>\n","protected":false},"author":2,"featured_media":115351,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[245],"topic":[],"class_list":["post-115364","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-dns"],"yoast_head":"\nDNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/115364.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"DNS \u57df\u540d\u7cfb\u7edf 1. DNS \u6982\u8ff0 1.1 \u57df\u540d\u7cfb\u7edf\u7b80\u4ecb DNS（Domain Name System，\u57df\u540d\u7cfb\u7edf）\u662f\u4e92\u8054\u7f51\u4e2d\u7528\u4e8e\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d（\u4f8b\u5982 www.example.com）\u8f6c\u6362\u4e3a\u8ba1\u7b97\u673a\u53ef\u7406\u89e3\u7684 IP \u5730\u5740（\u4f8b\u5982 192.168.1.1）\u7684\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u7cfb\u7edf\u3002DNS \u5145\u5f53\u4e92\u8054\u7f51\u4e2d\u7684"\u7535\u8bdd\u7c3f"\u89d2\u8272，\u5c06\u7528\u6237\u8f93\u5165\u7684\u57df\u540d\u6620\u5c04\u5230\u5b9e\u9645\u7684\u7f51\u7edc\u5730\u5740，\u4f7f\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/115364.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-11T17:25:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261011172526-6acbc68643134.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"23 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/115364.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/115364.html\",\"name\":\"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-10-11T17:25:30+00:00\",\"dateModified\":\"2026-10-11T17:25:30+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/115364.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/115364.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/115364.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/115364.html","og_locale":"zh_CN","og_type":"article","og_title":"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"DNS \u57df\u540d\u7cfb\u7edf 1. DNS \u6982\u8ff0 1.1 \u57df\u540d\u7cfb\u7edf\u7b80\u4ecb DNS（Domain Name System，\u57df\u540d\u7cfb\u7edf）\u662f\u4e92\u8054\u7f51\u4e2d\u7528\u4e8e\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d（\u4f8b\u5982 www.example.com）\u8f6c\u6362\u4e3a\u8ba1\u7b97\u673a\u53ef\u7406\u89e3\u7684 IP \u5730\u5740（\u4f8b\u5982 192.168.1.1）\u7684\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u7cfb\u7edf\u3002DNS \u5145\u5f53\u4e92\u8054\u7f51\u4e2d\u7684\"\u7535\u8bdd\u7c3f\"\u89d2\u8272，\u5c06\u7528\u6237\u8f93\u5165\u7684\u57df\u540d\u6620\u5c04\u5230\u5b9e\u9645\u7684\u7f51\u7edc\u5730\u5740，\u4f7f","og_url":"https:\/\/www.wsisp.com\/helps\/115364.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-10-11T17:25:30+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/10\/20261011172526-6acbc68643134.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"23 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/115364.html","url":"https:\/\/www.wsisp.com\/helps\/115364.html","name":"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-10-11T17:25:30+00:00","dateModified":"2026-10-11T17:25:30+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/115364.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/115364.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/115364.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"DNS \u57df\u540d\u7cfb\u7edf | \u539f\u7406\u3001\u7c7b\u578b\u53ca\u89e3\u6790\u65f6\u6548"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/115364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=115364"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/115364\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/115351"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=115364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=115364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=115364"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=115364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}