{"id":80072,"date":"2026-03-04T09:02:13","date_gmt":"2026-03-04T01:02:13","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/80072.html"},"modified":"2026-03-04T09:02:13","modified_gmt":"2026-03-04T01:02:13","slug":"%e6%9c%8d%e5%8a%a1%e5%99%a8%e5%9f%9f%e5%90%8d%e9%85%8d%e7%bd%ae%e5%ae%8c%e6%95%b4%e6%8c%87%e5%8d%97%e4%b8%8e%e5%ae%9e%e6%88%98%e6%b5%81%e7%a8%8b","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/80072.html","title":{"rendered":"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b"},"content":{"rendered":"<p>  \u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6  <img decoding=\"async\" alt=\"menu-r.4af5f7ec.gif\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/03\/20260304010212-69a784941c6a6.gif\" style=\"width:16px;margin-left:4px;vertical-align:text-bottom;cursor:text\" \/> <\/p>\n<p> \u7b80\u4ecb&#xff1a;\u5728IT\u9886\u57df&#xff0c;\u670d\u52a1\u5668\u8bbe\u7f6e\u57df\u540d\u662f\u5b9e\u73b0\u7f51\u7edc\u670d\u52a1\u53ef\u8bbf\u95ee\u6027\u7684\u5173\u952e\u6b65\u9aa4\u3002\u901a\u8fc7\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d&#xff08;\u5982www.example.com&#xff09;\u7ed1\u5b9a\u5230\u670d\u52a1\u5668IP\u5730\u5740&#xff0c;\u7528\u6237\u53ef\u4fbf\u6377\u5730\u8bbf\u95ee\u7f51\u7ad9\u6216\u5e94\u7528\u3002\u8be5\u8fc7\u7a0b\u6db5\u76d6\u57df\u540d\u6ce8\u518c\u3001DNS\u7cfb\u7edf\u914d\u7f6e\u3001\u5404\u7c7bDNS\u8bb0\u5f55&#xff08;A\u3001CNAME\u3001MX\u7b49&#xff09;\u8bbe\u7f6e\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u3001SSL\/TLS\u5b89\u5168\u52a0\u5bc6\u90e8\u7f72\u4ee5\u53ca\u9632\u706b\u5899\u7aef\u53e3\u7ba1\u7406\u3002\u7ed3\u5408DNS\u89e3\u6790\u5668\u8f6f\u4ef6\u4e0e\u4e3b\u4eceDNS\u670d\u52a1\u5668\u67b6\u6784&#xff0c;\u5e76\u5229\u7528\u8d1f\u8f7d\u5747\u8861\u4e0eCDN\u4f18\u5316\u6027\u80fd&#xff0c;\u786e\u4fdd\u670d\u52a1\u9ad8\u53ef\u7528\u6027\u4e0e\u5b89\u5168\u6027\u3002\u6700\u540e\u901a\u8fc7nslookup\u3001dig\u7b49\u5de5\u5177\u8fdb\u884c\u6d4b\u8bd5\u9a8c\u8bc1&#xff0c;\u4fdd\u969c\u89e3\u6790\u51c6\u786e\u6027\u548c\u7cfb\u7edf\u7a33\u5b9a\u6027\u3002\u672c\u6307\u5357\u7cfb\u7edf\u68b3\u7406\u4e86\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5168\u6d41\u7a0b&#xff0c;\u9002\u7528\u4e8e\u8fd0\u7ef4\u4eba\u5458\u53ca\u521d\u5b66\u8005\u638c\u63e1\u6838\u5fc3\u6280\u80fd\u3002 <\/p>\n<h2> \u57df\u540d\u7cfb\u7edf&#xff1a;\u4ece\u5bfb\u5740\u673a\u5236\u5230\u5b89\u5168\u67b6\u6784\u7684\u5168\u94fe\u8def\u89e3\u6790 <\/h2>\n<p> \u4f60\u6709\u6ca1\u6709\u60f3\u8fc7&#xff0c;\u5f53\u4f60\u5728\u6d4f\u89c8\u5668\u91cc\u6572\u4e0b  google.com  \u7684\u90a3\u4e00\u523b&#xff0c;\u80cc\u540e\u7a76\u7adf\u53d1\u751f\u4e86\u4ec0\u4e48&#xff1f;\u8fd9\u4e2a\u770b\u4f3c\u7b80\u5355\u7684\u52a8\u4f5c&#xff0c;\u5176\u5b9e\u7275\u52a8\u4e86\u5168\u7403\u6700\u5e9e\u5927\u3001\u6700\u590d\u6742\u7684\u5206\u5e03\u5f0f\u6570\u636e\u5e93\u4e4b\u4e00\u2014\u2014  \u57df\u540d\u7cfb\u7edf&#xff08;DNS&#xff09;  \u3002\u5b83\u4e0d\u50cf\u7f51\u9875\u90a3\u6837\u76f4\u89c2&#xff0c;\u4e5f\u4e0d\u50cf\u670d\u52a1\u5668\u90a3\u6837\u770b\u5f97\u89c1\u6478\u5f97\u7740&#xff0c;\u4f46\u5b83\u5374\u662f\u6574\u4e2a\u4e92\u8054\u7f51\u8fd0\u8f6c\u7684\u201c\u795e\u7ecf\u7cfb\u7edf\u201d\u3002&#x1f9e0; <\/p>\n<p> \u800c\u66f4\u5173\u952e\u7684\u662f&#xff1a;\u4e00\u65e6\u8fd9\u4e2a\u7cfb\u7edf\u51fa\u95ee\u9898&#xff0c;\u4f60\u7684\u7f51\u7ad9\u5c31\u7b49\u4e8e\u201c\u4eba\u95f4\u84b8\u53d1\u201d&#xff1b;\u54ea\u6015\u53ea\u662f\u6162\u4e86\u51e0\u767e\u6beb\u79d2&#xff0c;\u7528\u6237\u53ef\u80fd\u5df2\u7ecf\u8f6c\u8eab\u79bb\u5f00\u3002\u6240\u4ee5\u554a&#xff0c;\u522b\u518d\u89c9\u5f97DNS\u53ea\u662f\u201c\u914d\u4e2aA\u8bb0\u5f55\u201d\u90a3\u4e48\u7b80\u5355\u4e86\u3002&#x1f525; <\/p>\n<p> \u4eca\u5929\u6211\u4eec\u5c31\u6765\u4e00\u6b21\u5f7b\u5e95\u62c6\u89e3\u2014\u2014\u4e0d\u8bb2\u6559\u79d1\u4e66\u5f0f\u7684\u5b9a\u4e49\u5806\u780c&#xff0c;\u800c\u662f\u4ece\u4e00\u4e2a\u5de5\u7a0b\u5e08\u7684\u89c6\u89d2&#xff0c;\u5e26\u4f60\u8d70\u5b8c\u4ece  \u57df\u540d\u6ce8\u518c \u2192 DNS\u89e3\u6790 \u2192 \u670d\u52a1\u90e8\u7f72 \u2192 HTTPS\u52a0\u5bc6 \u2192 \u5b89\u5168\u9632\u62a4 \u2192 \u9ad8\u53ef\u7528\u76d1\u63a7  \u7684\u5b8c\u6574\u95ed\u73af\u3002\u51c6\u5907\u597d\u4e86\u5417&#xff1f;\u6211\u4eec\u51fa\u53d1&#xff01; <\/p>\n<hr \/>\n<h3> \u4e00\u3001\u57df\u540d\u7684\u672c\u8d28&#xff1a;\u4e0d\u53ea\u662f\u540d\u5b57&#xff0c;\u66f4\u662f\u6218\u7565\u8d44\u4ea7 &#x1f4bc; <\/h3>\n<p> \u5f88\u591a\u4eba\u4ee5\u4e3a\u57df\u540d\u5c31\u662f\u4e2a\u7f51\u5740&#xff0c;\u4f46\u771f\u6b63\u61c2\u884c\u7684\u4eba\u77e5\u9053&#xff0c;\u4e00\u4e2a\u597d\u7684\u57df\u540d\u662f\u54c1\u724c\u62a4\u57ce\u6cb3\u7684\u4e00\u90e8\u5206\u3002 <\/p>\n<p> \u6bd4\u5982  .com  &#xff0c;\u4e3a\u4ec0\u4e48\u5927\u5bb6\u90fd\u62a2\u7740\u7528&#xff1f;\u56e0\u4e3a\u5b83\u4ee3\u8868\u7684\u662f\u201c\u901a\u7528\u9876\u7ea7\u57df\u201d\u4e2d\u6700\u6210\u719f\u3001\u6700\u88ab\u4fe1\u4efb\u7684\u90a3\u4e2a\u5708\u5c42\u3002\u641c\u7d22\u5f15\u64ce\u4e5f\u9ed8\u8ba4\u7ed9  .com  \u66f4\u9ad8\u7684\u6743\u91cd&#xff0c;\u7528\u6237\u5fc3\u7406\u4e0a\u4e5f\u4f1a\u89c9\u5f97\u201c\u8fd9\u516c\u53f8\u9760\u8c31\u201d\u3002\u76f8\u6bd4\u4e4b\u4e0b&#xff0c;  .top  \u6216  .xyz  \u867d\u4fbf\u5b9c&#xff0c;\u4f46\u5728\u5546\u52a1\u573a\u666f\u4e2d\u603b\u6709\u70b9\u201c\u51d1\u5408\u201d\u7684\u5473\u9053\u3002 <\/p>\n<p> \u90a3\u56fd\u5bb6\u4ee3\u7801\u9876\u7ea7\u57df\u5462&#xff1f;\u6bd4\u5982  .cn  \u3001  .jp  &#xff1f;\u5b83\u4eec\u7684\u4ef7\u503c\u5728\u4e8e  \u672c\u5730\u5316\u4fe1\u4efb  \u3002\u5982\u679c\u4f60\u505a\u4e2d\u56fd\u5e02\u573a&#xff0c;\u6ce8\u518c  example.cn  \u5e76\u914d\u5408\u767e\u5ea6SEO\u4f18\u5316&#xff0c;\u6548\u679c\u8fdc\u80dc\u4e8e\u53ea\u7528  .com  \u3002\u800c\u4e14\u5f88\u591a\u653f\u5e9c\u6216\u91d1\u878d\u7c7b\u9879\u76ee\u8fd8\u5f3a\u5236\u8981\u6c42\u4f7f\u7528\u672c\u56fdccTLD\u3002 <\/p>\n<p> \u4f46\u8fd9\u8fd8\u4e0d\u7b97\u5b8c\u3002\u9009\u597d\u540e\u7f00\u4e4b\u540e&#xff0c;\u771f\u6b63\u7684\u6311\u6218\u624d\u5f00\u59cb&#xff1a;  \u600e\u4e48\u786e\u4fdd\u8fd9\u4e2a\u57df\u540d\u6c38\u8fdc\u5c5e\u4e8e\u4f60&#xff1f;  <\/p>\n<p> \u8fd9\u91cc\u6709\u4e2a\u8840\u6cea\u6559\u8bad\u6848\u4f8b&#xff1a;\u67d0\u521b\u4e1a\u516c\u53f8\u5728\u65e9\u671f\u4e3a\u4e86\u7701\u51e0\u5341\u5757\u94b1\u6ca1\u5f00 WHOIS \u9690\u79c1\u4fdd\u62a4&#xff0c;\u7ed3\u679c\u4fe1\u606f\u88ab\u722c\u866b\u6293\u8d70&#xff0c;\u534a\u5e74\u540e\u88ab\u4eba\u62a2\u6ce8\u540c\u540d\u5546\u6807&#043;\u57df\u540d&#xff0c;\u53cd\u544a\u4fb5\u6743\u2026\u2026\u6700\u540e\u82b1\u4e86\u5341\u51e0\u4e07\u624d\u8d4e\u56de\u3002&#x1f631; <\/p>\n<p> \u6240\u4ee5\u8bb0\u4f4f\u8fd9\u6761\u94c1\u5f8b&#xff1a; <\/p>\n<p> \u2705 \u6ce8\u518c\u4efb\u4f55\u57df\u540d\u65f6&#xff0c;\u7b2c\u4e00\u65f6\u95f4\u5f00\u542f\u9690\u79c1\u4fdd\u62a4&#xff01;  \u2705 \u8bbe\u7f6e\u81ea\u52a8\u7eed\u8d39 &#043; \u63d0\u524d30\u5929\u90ae\u4ef6\u63d0\u9192&#xff01;  \u2705 \u628a\u57df\u540d\u7ba1\u7406\u8d26\u53f7\u7ed1\u5b9a\u624b\u673a&#043;\u90ae\u7bb1&#043;\u4e8c\u6b21\u9a8c\u8bc1&#xff01; <\/p>\n<p> \u5426\u5219\u54ea\u5929\u65e9\u4e0a\u9192\u6765\u53d1\u73b0\u5b98\u7f51\u6253\u4e0d\u5f00&#xff0c;\u4f60\u5c31\u77e5\u9053\u4ec0\u4e48\u53eb\u201c\u6280\u672f\u65e0\u5c0f\u4e8b\u201d\u3002 <\/p>\n<hr \/>\n<h3> \u4e8c\u3001DNS\u89e3\u6790\u5168\u6d41\u7a0b\u63ed\u79d8&#xff1a;\u4f60\u4ee5\u4e3a\u7684\u201c\u5feb\u201d&#xff0c;\u5176\u5b9e\u662f\u5c42\u5c42\u7f13\u5b58\u7684\u827a\u672f &#x1f575;\ufe0f\u200d\u2642\ufe0f <\/h3>\n<p> \u60f3\u8c61\u4e00\u4e0b&#xff1a;\u5168\u7403\u6709\u8d85\u8fc715\u4ebf\u4e2a\u57df\u540d&#xff0c;\u6bcf\u5929\u4ea7\u751f\u6570\u5343\u4ebf\u6b21\u67e5\u8be2\u8bf7\u6c42&#xff0c;\u5982\u679c\u6bcf\u6b21\u90fd\u8981\u4ece\u5934\u67e5\u4e00\u904d&#xff0c;\u90a3\u7f51\u7edc\u65e9\u5c31\u762b\u75ea\u4e86\u3002\u53ef\u73b0\u5b9e\u662f&#xff0c;\u7edd\u5927\u591a\u6570\u8bf7\u6c42\u90fd\u80fd\u5728\u51e0\u5341\u6beb\u79d2\u5185\u5b8c\u6210\u3002\u8fd9\u662f\u600e\u4e48\u505a\u5230\u7684&#xff1f; <\/p>\n<p> \u7b54\u6848\u5c31\u662f&#xff1a;  \u9012\u5f52 &#043; \u8fed\u4ee3 &#043; \u7f13\u5b58  \u7684\u4e09\u91cd\u594f\u3002 <\/p>\n<h4> 2.1 \u4e24\u79cd\u67e5\u8be2\u6a21\u5f0f&#xff1a;\u9012\u5f52 vs \u8fed\u4ee3 \u2014\u2014 \u5230\u5e95\u8c01\u8be5\u5e72\u6d3b&#xff1f; <\/h4>\n<p> \u5f88\u591a\u4eba\u641e\u4e0d\u6e05\u8fd9\u4e24\u8005\u7684\u533a\u522b&#xff0c;\u5176\u5b9e\u53ef\u4ee5\u7528\u4e00\u4e2a\u751f\u6d3b\u5316\u7684\u6bd4\u55bb\u6765\u7406\u89e3&#xff1a; <\/p>\n<ul>\n<li>\n<p>  \u9012\u5f52\u67e5\u8be2  &#xff1a;\u5c31\u50cf\u4f60\u95ee\u5ba2\u670d\u201c\u6211\u5bb6\u5bbd\u5e26\u4e3a\u5565\u65ad\u4e86&#xff1f;\u201d  \u4f60\u8bf4&#xff1a;\u201c\u6211\u8981\u7ed3\u679c&#xff01;\u201d \u4e0d\u7ba1\u4ed6\u627e\u51e0\u4e2a\u4eba\u3001\u6253\u51e0\u4e2a\u7535\u8bdd&#xff0c;\u6700\u540e\u5fc5\u987b\u7ed9\u4f60\u7b54\u590d\u3002 <\/p>\n<\/li>\n<li>\n<p>  \u8fed\u4ee3\u67e5\u8be2  &#xff1a;\u5219\u662f\u5ba2\u670d\u544a\u8bc9\u4f60&#xff1a;\u201c\u8fd9\u4e2a\u95ee\u9898\u6211\u4e0d\u76f4\u63a5\u5904\u7406&#xff0c;\u4f60\u53bb\u627e\u8fd0\u7ef4\u90e8\u3002\u201d  \u4ed6\u81ea\u5df1\u4e0d\u53bb\u5e2e\u4f60\u8dd1\u817f&#xff0c;\u53ea\u7ed9\u4f60\u6307\u6761\u8def\u3002 <\/p>\n<\/li>\n<\/ul>\n<p> \u5728DNS\u4e2d&#xff1a; <\/p>\n<ul>\n<li> \u7528\u6237\u8bbe\u5907 \u2192 \u672c\u5730DNS\u89e3\u6790\u5668&#xff1a;\u8d70  \u9012\u5f52  &#xff08;\u6211\u8981\u6700\u7ec8IP&#xff01;&#xff09; <\/li>\n<li> \u89e3\u6790\u5668 \u2192 \u6839\u670d\u52a1\u5668 \/ TLD\u670d\u52a1\u5668 \/ \u6743\u5a01\u670d\u52a1\u5668&#xff1a;\u8d70  \u8fed\u4ee3  &#xff08;\u544a\u8bc9\u6211\u4e0b\u4e00\u6b65\u53bb\u54ea\u95ee&#xff09; <\/li>\n<\/ul>\n<p> \u6765\u770b\u4e00\u6bb5\u771f\u5b9e\u7684\u4ea4\u4e92\u6d41\u7a0b&#xff1a; <\/p>\n<p>sequenceDiagram<br \/>\n    participant User as \u7528\u6237\u8bbe\u5907<br \/>\n    participant Resolver as \u672c\u5730DNS\u89e3\u6790\u5668(\u9012\u5f52)<br \/>\n    participant RootServer as \u6839\u670d\u52a1\u5668<br \/>\n    participant TLDServer as .com TLD\u670d\u52a1\u5668<br \/>\n    participant AuthServer as example.com \u6743\u5a01\u670d\u52a1\u5668<\/p>\n<p>    User-&gt;&gt;Resolver: \u67e5\u8be2 www.example.com \u7684A\u8bb0\u5f55 (\u9012\u5f52)<br \/>\n    Resolver-&gt;&gt;RootServer: \u67e5\u8be2 .com \u57df\u7684NS\u8bb0\u5f55 (\u8fed\u4ee3)<br \/>\n    RootServer&#8211;&gt;&gt;Resolver: \u8fd4\u56de .com TLD\u670d\u52a1\u5668\u5730\u5740\u5217\u8868<br \/>\n    Resolver-&gt;&gt;TLDServer: \u67e5\u8be2 example.com \u7684NS\u8bb0\u5f55 (\u8fed\u4ee3)<br \/>\n    TLDServer&#8211;&gt;&gt;Resolver: \u8fd4\u56de example.com \u7684\u6743\u5a01\u670d\u52a1\u5668\u5730\u5740<br \/>\n    Resolver-&gt;&gt;AuthServer: \u67e5\u8be2 www.example.com \u7684A\u8bb0\u5f55 (\u8fed\u4ee3)<br \/>\n    AuthServer&#8211;&gt;&gt;Resolver: \u8fd4\u56de IP \u5730\u5740 (\u5982 93.184.216.34)<br \/>\n    Resolver&#8211;&gt;&gt;User: \u8fd4\u56de\u6700\u7ec8IP\u5730\u5740 (\u9012\u5f52\u5b8c\u6210)<\/p>\n<p> \u770b\u5230\u4e86\u5417&#xff1f;\u6574\u4e2a\u8fc7\u7a0b\u50cf\u6781\u4e86\u4e00\u6b21\u201c\u5bfb\u5b9d\u6e38\u620f\u201d&#xff1a;\u6bcf\u4e00\u6b65\u90fd\u53ea\u80fd\u83b7\u5f97\u7ebf\u7d22&#xff0c;\u4e0d\u80fd\u76f4\u8fbe\u7ec8\u70b9\u3002\u8fd9\u79cd\u8bbe\u8ba1\u867d\u7136\u591a\u8df3\u4e86\u51e0\u6b65&#xff0c;\u4f46\u5374\u5b9e\u73b0\u4e86\u4e24\u4e2a\u91cd\u8981\u76ee\u6807&#xff1a; <\/p>\n<li>  \u8d1f\u8f7d\u5206\u6563  &#xff1a;\u6ca1\u6709\u4e00\u53f0\u670d\u52a1\u5668\u9700\u8981\u8bb0\u4f4f\u6240\u6709\u57df\u540d&#xff1b; <\/li>\n<li>  \u81ea\u6cbb\u6027\u5f3a  &#xff1a;\u6bcf\u4e2a\u5c42\u7ea7\u72ec\u7acb\u7ba1\u7406\u81ea\u5df1\u7684\u6570\u636e&#xff0c;\u4e92\u4e0d\u5f71\u54cd\u3002 <\/li>\n<p> \u4e0d\u8fc7\u8fd9\u91cc\u4e5f\u6709\u5751\u70b9\u26a0\ufe0f&#xff1a;\u5982\u679c\u4f60\u7684\u4f01\u4e1a\u81ea\u5efa\u4e86\u89e3\u6790\u5668&#xff08;\u6bd4\u5982\u7528\u4e86 Unbound&#xff09;&#xff0c;\u5343\u4e07\u522b\u5fd8\u4e86\u9650\u5236\u9012\u5f52\u6743\u9650&#xff01;\u4e0d\u7136\u5f88\u5bb9\u6613\u88ab\u9ed1\u5ba2\u62ff\u6765\u53d1\u52a8  DNS\u653e\u5927\u653b\u51fb  \u2014\u2014 \u7528\u4f60\u7684\u670d\u52a1\u5668\u53bb\u8f70\u70b8\u522b\u4eba&#xff0c;\u81ea\u5df1\u80cc\u9505\u3002 <\/p>\n<p> \u5e38\u89c1\u505a\u6cd5\u662f\u52a0ACL\u63a7\u5236\u8bbf\u95ee\u8303\u56f4&#xff1a; <\/p>\n<p>server:<br \/>\n    interface: 0.0.0.0<br \/>\n    access-control: 192.168.0.0\/16 allow<br \/>\n    access-control: 0.0.0.0\/0 deny<\/p>\n<p> \u8fd9\u6837\u53ea\u6709\u5185\u7f51\u80fd\u7528&#xff0c;\u5916\u4eba\u60f3\u8e6d\u90fd\u4e0d\u884c\u3002 <\/p>\n<hr \/>\n<h4> 2.2 \u7f13\u5b58\u4e0eTTL&#xff1a;\u901f\u5ea6\u4e0e\u4e00\u81f4\u6027\u7684\u535a\u5f08 \u2696\ufe0f <\/h4>\n<p> \u73b0\u5728\u6211\u4eec\u6765\u804a\u4e00\u4e2a\u8001\u751f\u5e38\u8c08\u5374\u603b\u88ab\u8bef\u89e3\u7684\u8bdd\u9898&#xff1a;  TTL&#xff08;Time to Live&#xff09;\u5230\u5e95\u8bbe\u591a\u5c11\u5408\u9002&#xff1f;  <\/p>\n<p> \u5148\u8bf4\u7ed3\u8bba&#xff1a;  \u6ca1\u6709\u6807\u51c6\u7b54\u6848&#xff0c;\u5168\u770b\u4e1a\u52a1\u573a\u666f\u3002  <\/p>\n<table>\n<tr> \u573a\u666f  \u63a8\u8350TTL  \u7406\u7531 <\/tr>\n<tbody>\n<tr>\n<td> \u7a33\u5b9a\u670d\u52a1&#xff08;\u9759\u6001IP&#xff09; <\/td>\n<td> 86400&#xff08;24\u5c0f\u65f6&#xff09; <\/td>\n<td> \u51cf\u5c11\u4e0a\u6e38\u538b\u529b&#xff0c;\u63d0\u5347\u54cd\u5e94\u901f\u5ea6 <\/td>\n<\/tr>\n<tr>\n<td> \u6b63\u5728\u8fc1\u79fbIP\u7684\u670d\u52a1 <\/td>\n<td> 300&#xff08;5\u5206\u949f&#xff09; <\/td>\n<td> \u8ba9\u53d8\u66f4\u5feb\u901f\u751f\u6548&#xff0c;\u907f\u514d\u957f\u65f6\u95f4\u4e2d\u65ad <\/td>\n<\/tr>\n<tr>\n<td> CDN\u63a5\u5165\u57df\u540d <\/td>\n<td> 300~600 <\/td>\n<td> \u5e73\u8861\u66f4\u65b0\u9891\u7387\u4e0e\u547d\u4e2d\u7387 <\/td>\n<\/tr>\n<tr>\n<td> \u52a8\u6001\u8c03\u5ea6\/\u7070\u5ea6\u53d1\u5e03 <\/td>\n<td> 60\u4ee5\u4e0b <\/td>\n<td> \u652f\u6301\u79d2\u7ea7\u5207\u6362 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p> \u91cd\u70b9\u6765\u4e86&#xff1a;  \u6539IP\u4e4b\u524d\u4e00\u5b9a\u8981\u63d0\u524d\u964dTTL&#xff01;  <\/p>\n<p> \u4e3e\u4e2a\u771f\u5b9e\u4f8b\u5b50&#xff1a;\u67d0\u516c\u53f8\u8ba1\u5212\u628a\u4e3b\u7ad9\u8fc1\u79fb\u5230\u65b0\u673a\u623f&#xff0c;\u4f46\u5fd8\u8bb0\u63d0\u524d\u8c03\u6574TTL&#xff0c;\u7ed3\u679c\u65e7IP\u8fd8\u5728\u5927\u91cf\u7f13\u5b58\u4e2d\u5b58\u6d3b&#xff0c;\u5bfc\u81f4\u4e00\u534a\u7528\u6237\u8fdb\u4e0d\u53bb\u7f51\u7ad9&#xff0c;\u6574\u6574\u6302\u4e86\u4e03\u516b\u4e2a\u5c0f\u65f6\u2026\u2026&#x1f494; <\/p>\n<p> \u6b63\u786e\u59ff\u52bf\u662f\u8fd9\u6837\u7684&#xff1a; <\/p>\n<li> \u63d0\u524d24\u5c0f\u65f6\u5c06 TTL \u6539\u4e3a 300&#xff1b; <\/li>\n<li> \u7b49\u5f85\u5168\u7403\u7f13\u5b58\u9010\u6e10\u5237\u65b0&#xff1b; <\/li>\n<li> \u518d\u6267\u884cIP\u5207\u6362&#xff1b; <\/li>\n<li> \u5207\u6362\u6210\u529f\u540e\u518d\u9010\u6b65\u8c03\u9ad8TTL\u6062\u590d\u6027\u80fd\u3002 <\/li>\n<p> \u4f60\u53ef\u4ee5\u7528  dig  \u5b9e\u65f6\u67e5\u770b\u5269\u4f59TTL&#xff1a; <\/p>\n<p>dig www.example.com &#043;noall &#043;answer<\/p>\n<p> \u8f93\u51fa\u793a\u4f8b&#xff1a; <\/p>\n<p>www.example.com.    287 IN  A   93.184.216.34<\/p>\n<p> \u8fd9\u91cc\u7684  287  \u8868\u793a\u8fd9\u6761\u8bb0\u5f55\u8fd8\u80fd\u5728\u672c\u5730\u7f13\u5b58\u4e2d\u6d3b287\u79d2\u3002\u662f\u4e0d\u662f\u5f88\u76f4\u89c2&#xff1f; <\/p>\n<p> \u4f46\u6ce8\u610f\u26a0\ufe0f&#xff1a;\u6709\u4e9b\u8001\u65e7ISP\u6216\u4e2d\u95f4\u4ee3\u7406\u4f1a\u201c\u65e0\u89c6TTL\u201d&#xff0c;\u9020\u6210\u6240\u8c13\u7684\u201c\u987d\u56fa\u7f13\u5b58\u201d\u3002\u6240\u4ee5\u5728\u91cd\u5927\u53d8\u66f4\u540e&#xff0c;\u6700\u597d\u901a\u8fc7\u591a\u5730\u8282\u70b9\u6d4b\u8bd5\u786e\u8ba4\u662f\u5426\u771f\u6b63\u751f\u6548\u3002 <\/p>\n<hr \/>\n<h4> 2.3 \u56db\u7c7b\u670d\u52a1\u5668\u7684\u5206\u5de5\u534f\u4f5c&#xff1a;\u6839\u3001TLD\u3001\u6743\u5a01\u3001\u672c\u5730\u89e3\u6790\u5668 <\/h4>\n<p> \u5728\u6574\u4e2aDNS\u5b87\u5b99\u4e2d&#xff0c;\u56db\u7c7b\u670d\u52a1\u5668\u5404\u53f8\u5176\u804c&#xff0c;\u7f3a\u4e00\u4e0d\u53ef\u3002 <\/p>\n<table>\n<tr> \u7c7b\u578b  \u804c\u8d23  \u7279\u70b9 <\/tr>\n<tbody>\n<tr>\n<td> \u6839\u670d\u52a1\u5668 <\/td>\n<td> \u63d0\u4f9bTLD\u670d\u52a1\u5668\u5730\u5740 <\/td>\n<td> \u5168\u7403\u4ec513\u7ec4\u903b\u8f91\u6839&#xff08;A~M&#xff09;&#xff0c;\u7269\u7406\u8282\u70b9\u8d85\u5343\u4e2a <\/td>\n<\/tr>\n<tr>\n<td> TLD\u670d\u52a1\u5668 <\/td>\n<td> \u5b58\u50a8\u4e8c\u7ea7\u57df\u540d\u7684NS\u8bb0\u5f55 <\/td>\n<td> \u5982  .com  \u3001  .org  \u5404\u81ea\u7ef4\u62a4\u4e00\u5957 <\/td>\n<\/tr>\n<tr>\n<td> \u6743\u5a01\u670d\u52a1\u5668 <\/td>\n<td> \u6258\u7ba1\u5177\u4f53\u57df\u540d\u7684\u6240\u6709\u8bb0\u5f55 <\/td>\n<td> \u7531Cloudflare\u3001AWS Route 53\u7b49\u63d0\u4f9b <\/td>\n<\/tr>\n<tr>\n<td> \u672c\u5730\u89e3\u6790\u5668 <\/td>\n<td> \u4ee3\u8868\u7528\u6237\u53d1\u8d77\u9012\u5f52\u67e5\u8be2 <\/td>\n<td> \u8fd0\u8425\u5546\u3001\u4f01\u4e1a\u5185\u7f51\u6216DoH\u670d\u52a1 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p> \u5b83\u4eec\u4e4b\u95f4\u7684\u534f\u4f5c\u6d41\u7a0b\u5982\u4e0b&#xff1a; <\/p>\n<li> \u7528\u6237\u8bf7\u6c42  mail.google.com  <\/li>\n<li> \u672c\u5730\u89e3\u6790\u5668\u67e5\u7f13\u5b58 \u2192 \u65e0\u679c \u2192 \u95ee\u6839\u670d\u52a1\u5668\u201c.com\u5728\u54ea\u201d <\/li>\n<li> \u6839\u8fd4\u56de \u2192 \u95eeTLD\u670d\u52a1\u5668\u201cgoogle.com\u7684\u6743\u5a01\u662f\u8c01\u201d <\/li>\n<li> TLD\u8fd4\u56de \u2192 \u76f4\u63a5\u8054\u7cfb\u6743\u5a01\u670d\u52a1\u5668\u62ffA\u8bb0\u5f55 <\/li>\n<li> \u6210\u529f\u83b7\u53d6IP\u5e76\u8fd4\u56de&#xff0c;\u540c\u65f6\u7f13\u5b58\u4e0b\u6765 <\/li>\n<p> \u5176\u4e2d&#xff0c;\u6743\u5a01\u670d\u52a1\u5668\u7684\u6570\u636e\u6765\u6e90\u901a\u5e38\u662f\u533a\u57df\u6587\u4ef6&#xff08;Zone File&#xff09;\u3002\u4ee5 BIND \u4e3a\u4f8b&#xff1a; <\/p>\n<p>$ORIGIN example.com.<br \/>\n&#064;       IN SOA   ns1.example.com. admin.example.com. (<br \/>\n                2025040501 ; serial<br \/>\n                3600       ; refresh<br \/>\n                1800       ; retry<br \/>\n                604800     ; expire<br \/>\n                86400 )    ; minimum TTL<\/p>\n<p>        IN NS    ns1.example.com.<br \/>\n        IN NS    ns2.example.com.<br \/>\nwww     IN A     192.0.2.10<br \/>\nmail    IN A     192.0.2.20<\/p>\n<p> \u8fd9\u91cc\u9762\u6709\u51e0\u4e2a\u7ec6\u8282\u4f60\u5f97\u7279\u522b\u6ce8\u610f&#xff1a; <\/p>\n<ul>\n<li>  Serial \u5fc5\u987b\u9012\u589e  &#xff1a;\u5426\u5219\u8f85\u52a9DNS\u4e0d\u4f1a\u89e6\u53d1\u540c\u6b65&#xff1b; <\/li>\n<li>  NS\u81f3\u5c11\u4e24\u4e2a  &#xff1a;\u9632\u6b62\u5355\u70b9\u6545\u969c&#xff1b; <\/li>\n<li>  SOA\u91cc\u7684Expire\u65f6\u95f4\u4e0d\u8981\u592a\u77ed  &#xff1a;\u5efa\u8bae\u4e00\u5468\u4ee5\u4e0a&#xff0c;\u9632\u6b62\u4e3b\u670d\u52a1\u5668\u5b95\u673a\u592a\u4e45\u5bfc\u81f4\u670d\u52a1\u505c\u6b62\u5e94\u7b54\u3002 <\/li>\n<\/ul>\n<p> \u6b64\u5916&#xff0c;\u8fd1\u5e74\u6765 DoH&#xff08;DNS over HTTPS&#xff09;\u548c DoT&#xff08;DNS over TLS&#xff09;\u6b63\u5728\u6539\u53d8\u4f20\u7edf\u660e\u6587\u4f20\u8f93\u7684\u65b9\u5f0f\u3002\u867d\u7136\u63d0\u5347\u4e86\u9690\u79c1\u6027&#xff0c;\u4f46\u4e5f\u5f15\u53d1\u4e86\u65b0\u7684\u4e89\u8bae&#xff1a;\u6bd4\u5982 Google \u548c Cloudflare \u6210\u4e3a\u5c11\u6570\u51e0\u4e2a\u638c\u63e1\u5168\u5c40\u67e5\u8be2\u6570\u636e\u7684\u5de8\u5934&#xff0c;\u4e2d\u5fc3\u5316\u98ce\u9669\u53cd\u800c\u52a0\u5267\u4e86\u3002&#x1f914; <\/p>\n<hr \/>\n<h3> \u4e09\u3001DNS\u8bb0\u5f55\u914d\u7f6e\u5b9e\u6218&#xff1a;\u522b\u518d\u5199\u9519CNAME\u4e86&#xff01;&#x1f6ab; <\/h3>\n<p> \u4e0d\u540c\u7c7b\u578b\u7684DNS\u8bb0\u5f55\u5bf9\u5e94\u4e0d\u540c\u7684\u7528\u9014&#xff0c;\u4e0b\u9762\u6211\u6311\u51e0\u4e2a\u6700\u5bb9\u6613\u51fa\u9519\u7684\u5730\u65b9\u91cd\u70b9\u8bb2\u3002 <\/p>\n<h4> 3.1 A\/AAAA\u8bb0\u5f55&#xff1a;IPv4\u4e0eIPv6\u53cc\u6808\u5e76\u884c\u624d\u662f\u672a\u6765 &#x1f310; <\/h4>\n<p> \u57fa\u7840\u4e2d\u7684\u57fa\u7840&#xff1a;A\u8bb0\u5f55\u6620\u5c04IPv4&#xff0c;AAAA\u8bb0\u5f55\u6620\u5c04IPv6\u3002 <\/p>\n<p>www.example.com.    IN    A      203.0.113.10<br \/>\nwww.example.com.    IN    AAAA   2001:db8::1<\/p>\n<p> \u4f46\u73b0\u5728\u7684\u95ee\u9898\u662f&#xff1a;\u5f88\u591a\u4eba\u53ea\u914dA\u8bb0\u5f55&#xff0c;\u5b8c\u5168\u5ffd\u7565IPv6\u3002\u4f46\u4f60\u77e5\u9053\u5417&#xff1f;iOS\u8bbe\u5907\u4f18\u5148\u5c1d\u8bd5IPv6\u8fde\u63a5&#xff0c;\u5b89\u5353\u4e5f\u65e9\u5df2\u5168\u9762\u652f\u6301\u3002\u5982\u679c\u4f60\u6ca1\u90e8\u7f72AAAA&#xff0c;\u67d0\u4e9b\u7528\u6237\u53ef\u80fd\u4f1a\u7ecf\u5386\u201c\u9996\u8fde\u5931\u8d25\u2192\u964d\u7ea7\u91cd\u8bd5\u201d\u7684\u5ef6\u8fdf\u60e9\u7f5a\u3002 <\/p>\n<p> \u5efa\u8bae\u7b56\u7565&#xff1a; <\/p>\n<p> \u2705 \u53cc\u6808\u5e76\u884c&#xff1a;A &#043; AAAA \u540c\u65f6\u5b58\u5728  \u2705 Happy Eyeballs\u7b97\u6cd5&#xff1a;\u5ba2\u6237\u7aef\u4f18\u5148\u8bd5IPv6&#xff0c;\u5931\u8d25\u8fc5\u901f\u56de\u843dIPv4  \u2705 \u76d1\u63a7IPv6\u53ef\u8fbe\u6027&#xff1a;\u522b\u8ba9\u8bc1\u4e66\u6b63\u5e38\u4f46\u94fe\u8def\u4e0d\u901a <\/p>\n<p> \u9a8c\u8bc1\u547d\u4ee4&#xff1a; <\/p>\n<p>dig AAAA www.example.com &#043;short<br \/>\nping6 2001:db8::1<\/p>\n<hr \/>\n<h4> 3.2 CNAME\u9677\u9631&#xff1a;\u6839\u57df\u540d\u4e0d\u80fd\u8bbe\u522b\u540d&#xff01;&#x1f6ab; <\/h4>\n<p> \u8fd9\u662f\u4e00\u4e2a\u7ecf\u5178\u8bef\u533a&#xff1a;\u6709\u4eba\u60f3\u628a  example.com  \u6307\u5411\u67d0\u4e2aCDN\u5730\u5740&#xff0c;\u4e8e\u662f\u8fd9\u4e48\u5199&#xff1a; <\/p>\n<p>example.com.    IN    CNAME    cdn-provider.net.   \u274c \u9519\u8bef&#xff01;<\/p>\n<p> \u7ed3\u679c\u70b8\u4e86\u2014\u2014\u56e0\u4e3a\u6839\u636eRFC\u89c4\u5b9a&#xff1a;  \u6839\u57df\u540d\u4e0d\u80fd\u8bbe\u7f6eCNAME\u8bb0\u5f55  &#xff0c;\u56e0\u4e3a\u5b83\u5fc5\u987b\u540c\u65f6\u627f\u8f7d SOA\u3001NS \u7b49\u5173\u952e\u8bb0\u5f55&#xff0c;\u800cCNAME\u4e0d\u5141\u8bb8\u4e0e\u5176\u4ed6\u8bb0\u5f55\u5171\u5b58\u3002 <\/p>\n<p> \u6b63\u786e\u7684\u66ff\u4ee3\u65b9\u6848\u6709\u4e09\u79cd&#xff1a; <\/p>\n<li>\n<p>  \u4f7f\u7528ANAME\/ALIAS\u8bb0\u5f55  &#xff08;\u5382\u5546\u7279\u6709&#xff09;  Cloudflare\u3001DNSimple\u3001Azure DNS \u90fd\u652f\u6301\u8fd9\u79cd\u201c\u4f2a\u8bb0\u5f55\u201d&#xff0c;\u5916\u89c2\u50cfCNAME&#xff0c;\u5b9e\u9645\u8fd4\u56deA\u8bb0\u5f55\u3002 <\/p>\n<\/li>\n<li>\n<p>  DNAME\u5b9e\u73b0\u57df\u7ea7\u91cd\u5b9a\u5411   \u6bd4\u5982\u628a\u6574\u4e2a  *.old.com  \u91cd\u5b9a\u5411\u5230  *.new.com  <\/p>\n<\/li>\n<li>\n<p>  \u624b\u52a8\u540c\u6b65A\u8bb0\u5f55   \u867d\u9ebb\u70e6&#xff0c;\u4f46\u6700\u517c\u5bb9\u3002 <\/p>\n<\/li>\n<p> \u8bb0\u4f4f\u4e00\u53e5\u8bdd&#xff1a; <\/p>\n<p> \u201cCNAME\u53ea\u80fd\u7528\u4e8e\u975e\u6839\u8282\u70b9\u7684\u5b50\u57df\u540d\u3002\u201d <\/p>\n<hr \/>\n<h4> 3.3 MX\u8bb0\u5f55&#xff1a;\u90ae\u4ef6\u7cfb\u7edf\u7684\u751f\u547d\u7ebf \u2709\ufe0f <\/h4>\n<p> MX\u8bb0\u5f55\u51b3\u5b9a\u4e86\u8c01\u6765\u6536\u4f60\u7684\u90ae\u4ef6\u3002\u683c\u5f0f\u5982\u4e0b&#xff1a; <\/p>\n<p>example.com.    IN    MX    10    mail1.example.com.<br \/>\nexample.com.    IN    MX    20    mail2.example.com.<\/p>\n<p> \u6570\u5b57\u8d8a\u5c0f\u4f18\u5148\u7ea7\u8d8a\u9ad8\u3002\u5f53  mail1  \u5b95\u673a\u65f6&#xff0c;\u53d1\u4ef6\u65b9MTA\u4f1a\u81ea\u52a8\u5c1d\u8bd5  mail2  \u3002 <\/p>\n<p> \u6700\u4f73\u5b9e\u8df5&#xff1a; <\/p>\n<p> \u2705 \u81f3\u5c11\u914d\u7f6e\u4e24\u53f0MX\u670d\u52a1\u5668&#xff08;\u5f02\u5730\u5bb9\u707e&#xff09;  \u2705 \u4f7f\u7528\u4e13\u7528\u4e3b\u673a\u540d&#xff08;\u4e0d\u8981\u548cweb\u5171\u7528&#xff09;  \u2705 \u914d\u7f6e\u53cd\u5411DNS&#xff08;PTR&#xff09;\u5339\u914d\u6b63\u5411\u89e3\u6790  \u2705 \u6dfb\u52a0SPF\u8bb0\u5f55\u9632\u4f2a\u9020&#xff08;TXT\u7c7b\u578b&#xff09; <\/p>\n<p> \u9a8c\u8bc1\u5de5\u5177\u63a8\u8350&#xff1a; <\/p>\n<p>dig MX example.com &#043;short<br \/>\ntelnet mail1.example.com 25<br \/>\nEHLO test.com<\/p>\n<p> \u6216\u8005\u76f4\u63a5\u4e0a  mxtoolbox.com  \u4e00\u952e\u68c0\u6d4b\u5168\u5957\u914d\u7f6e\u3002 <\/p>\n<hr \/>\n<h4> 3.4 \u5e38\u7528\u8bb0\u5f55\u5bf9\u6bd4\u8868&#xff08;\u6536\u85cf\u7ea7&#xff09;&#x1f4cc; <\/h4>\n<table>\n<tr> \u8bb0\u5f55\u7c7b\u578b  \u529f\u80fd  \u662f\u5426\u5141\u8bb8\u540c\u540d\u5171\u5b58  \u793a\u4f8b <\/tr>\n<tbody>\n<tr>\n<td> A <\/td>\n<td> IPv4\u6620\u5c04 <\/td>\n<td> \u662f&#xff08;\u8f6e\u8be2\u8d1f\u8f7d\u5747\u8861&#xff09; <\/td>\n<td>  host IN A 192.0.2.1  <\/td>\n<\/tr>\n<tr>\n<td> AAAA <\/td>\n<td> IPv6\u6620\u5c04 <\/td>\n<td> \u662f <\/td>\n<td>  host IN AAAA 2001::1  <\/td>\n<\/tr>\n<tr>\n<td> CNAME <\/td>\n<td> \u522b\u540d\u6307\u5411 <\/td>\n<td> \u5426&#xff08;\u7981\u6b62\u5176\u4ed6\u8bb0\u5f55&#xff09; <\/td>\n<td>  www IN CNAME &#064;  <\/td>\n<\/tr>\n<tr>\n<td> MX <\/td>\n<td> \u90ae\u4ef6\u4ea4\u6362 <\/td>\n<td> \u662f&#xff08;\u6309\u4f18\u5148\u7ea7\u6392\u5e8f&#xff09; <\/td>\n<td>  IN MX 10 mail  <\/td>\n<\/tr>\n<tr>\n<td> NS <\/td>\n<td> \u6743\u5a01\u670d\u52a1\u5668 <\/td>\n<td> \u662f&#xff08;\u81f3\u5c11\u4e24\u4e2a&#xff09; <\/td>\n<td>  IN NS ns1.provider.com  <\/td>\n<\/tr>\n<tr>\n<td> TXT <\/td>\n<td> \u6587\u672c\u4fe1\u606f&#xff08;SPF\/DKIM&#xff09; <\/td>\n<td> \u662f <\/td>\n<td>  &#034;v&#061;spf1 a mx ~all&#034;  <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p> \u8fd9\u5f20\u8868\u5efa\u8bae\u6253\u5370\u8d34\u5899\u4e0a&#xff0c;\u5929\u5929\u770b\u4e00\u904d&#xff0c;\u4fdd\u4f60\u4e0d\u8e29\u5751\u3002 <\/p>\n<hr \/>\n<h3> \u56db\u3001\u81ea\u5efaDNS\u670d\u52a1\u5668&#xff1a;BIND vs Unbound&#xff0c;\u600e\u4e48\u9009&#xff1f;&#x1f527; <\/h3>\n<p> \u8981\u4e0d\u8981\u81ea\u5efaDNS&#xff1f;\u6211\u7684\u5efa\u8bae\u662f&#xff1a;  \u5185\u7f51\u5fc5\u5efa&#xff0c;\u516c\u7f51\u614e\u5efa  \u3002 <\/p>\n<p> \u539f\u56e0\u5f88\u7b80\u5355&#xff1a; <\/p>\n<ul>\n<li> \u5185\u7f51\u81ea\u5efa \u2192 \u7edf\u4e00\u7ba1\u7406\u3001\u52a0\u901f\u8bbf\u95ee\u3001\u8fc7\u6ee4\u5e7f\u544a\u3001\u5ba1\u8ba1\u65e5\u5fd7&#xff1b; <\/li>\n<li> \u516c\u7f51\u81ea\u5efa \u2192 \u6210\u672c\u9ad8\u3001\u96be\u7ef4\u62a4\u3001\u6613\u6210\u653b\u51fb\u9776\u6807\u3002 <\/li>\n<\/ul>\n<p> \u4f46\u5982\u679c\u771f\u8981\u4e0a&#xff0c;\u4e3b\u6d41\u9009\u62e9\u5c31\u4e24\u4e2a&#xff1a;  BIND  \u548c  Unbound  \u3002 <\/p>\n<h4> 4.1 BIND&#xff1a;\u6743\u5a01\u4e4b\u738b&#xff0c;\u529f\u80fd\u5168\u9762\u4f46\u590d\u6742 <\/h4>\n<p> BIND \u662f\u4e16\u754c\u4e0a\u6700\u53e4\u8001\u7684DNS\u8f6f\u4ef6&#xff0c;\u51e0\u4e4e\u6210\u4e86\u884c\u4e1a\u6807\u51c6\u3002\u9002\u5408\u7528\u6765\u642d\u5efa\u5bf9\u5916\u63d0\u4f9b\u89e3\u6790\u670d\u52a1\u7684  \u6743\u5a01\u670d\u52a1\u5668  \u3002 <\/p>\n<p> \u5b89\u88c5&#xff08;CentOS\u4e3a\u4f8b&#xff09;&#xff1a; <\/p>\n<p>sudo dnf install bind bind-utils -y<br \/>\nsudo systemctl start named<br \/>\nsudo systemctl enable named<\/p>\n<p> \u6838\u5fc3\u914d\u7f6e\u6587\u4ef6  \/etc\/named.conf  &#xff1a; <\/p>\n<p>options {<br \/>\n    listen-on port 53 { any; };<br \/>\n    directory       &#034;\/var\/named&#034;;<br \/>\n    allow-query     { any; };<br \/>\n    recursion no;  \/\/ \u5173\u95ed\u9012\u5f52&#xff01;\u9632\u6b62\u88ab\u6ee5\u7528<br \/>\n    dnssec-validation yes;<br \/>\n};<\/p>\n<p>zone &#034;example.com&#034; IN {<br \/>\n    type master;<br \/>\n    file &#034;example.com.zone&#034;;<br \/>\n    allow-transfer { 192.168.10.2; };  \/\/ \u4e3b\u4ece\u540c\u6b65\u7528<br \/>\n};<\/p>\n<p> \u7136\u540e\u521b\u5efa\u533a\u57df\u6587\u4ef6  \/var\/named\/example.com.zone  &#xff1a; <\/p>\n<p>$TTL 86400<br \/>\n&#064;       IN SOA  ns1.example.com. admin.example.com. (<br \/>\n                2025040501 ; Serial<br \/>\n                3600       ; Refresh<br \/>\n                1800       ; Retry<br \/>\n                604800     ; Expire<br \/>\n                86400 )    ; Minimum TTL<\/p>\n<p>        IN NS   ns1.example.com.<br \/>\n        IN NS   ns2.example.com.<br \/>\nns1     IN A    192.168.10.1<br \/>\nns2     IN A    192.168.10.2<br \/>\n&#064;       IN A    192.168.10.10<br \/>\nwww     IN A    192.168.10.10<br \/>\nmail    IN A    192.168.10.11<br \/>\n&#064;       IN MX 10 mail.example.com.<\/p>\n<p> \u6d41\u7a0b\u56fe\u5c55\u793a\u5b8c\u6574\u89e3\u6790\u8def\u5f84&#xff1a; <\/p>\n<p>graph TD<br \/>\n    A[\u5ba2\u6237\u7aef\u8bf7\u6c42 www.example.com] &#8211;&gt; B{\u672c\u5730Resolver}<br \/>\n    B &#8211;&gt; C[\u67e5\u8be2\u6839\u670d\u52a1\u5668]<br \/>\n    C &#8211;&gt; D[\u67e5\u8be2.com TLD\u670d\u52a1\u5668]<br \/>\n    D &#8211;&gt; E[\u67e5\u8be2 example.com \u7684\u6743\u5a01NS]<br \/>\n    E &#8211;&gt; F[BIND\u670d\u52a1\u5668\u8fd4\u56deA\u8bb0\u5f55]<br \/>\n    F &#8211;&gt; G[\u5ba2\u6237\u7aef\u83b7\u53d6IP\u5e76\u5efa\u7acb\u8fde\u63a5]<br \/>\n    style A fill:#f9f,stroke:#333<br \/>\n    style G fill:#bfb,stroke:#333<\/p>\n<p> \u8bb0\u4f4f\u5173\u952e\u70b9&#xff1a; <\/p>\n<ul>\n<li> \u4fee\u6539 zone \u6587\u4ef6\u540e\u52a1\u5fc5\u9012\u589e  Serial  <\/li>\n<li> \u5f00\u542f  allow-transfer  \u65f6\u4e25\u683c\u9650\u5236IP\u767d\u540d\u5355 <\/li>\n<li> \u5916\u7f51\u5f00\u653e\u524d\u505a\u597d\u9632\u706b\u5899\u89c4\u5219&#xff08;\u4ec5\u653e\u884c53\u7aef\u53e3UDP\/TCP&#xff09; <\/li>\n<\/ul>\n<hr \/>\n<h4> 4.2 Unbound&#xff1a;\u8f7b\u91cf\u9012\u5f52&#xff0c;\u4e13\u4e3a\u4f01\u4e1a\u5185\u7f51\u6253\u9020 &#x1f3e2; <\/h4>\n<p> Unbound \u4e0d\u662f\u6743\u5a01\u670d\u52a1\u5668&#xff0c;\u800c\u662f\u4e13\u6ce8\u4e8e  \u9012\u5f52\u89e3\u6790  \u7684\u9ad8\u6027\u80fd\u7f13\u5b58\u4ee3\u7406\u3002\u975e\u5e38\u9002\u5408\u90e8\u7f72\u5728\u4f01\u4e1a\u5185\u90e8\u4f5c\u4e3a\u7edf\u4e00DNS\u5165\u53e3\u3002 <\/p>\n<p> \u5b89\u88c5&#xff1a; <\/p>\n<p>sudo dnf install unbound -y<br \/>\nsudo systemctl start unbound<br \/>\nsudo systemctl enable unbound<\/p>\n<p> \u914d\u7f6e  \/etc\/unbound\/unbound.conf  &#xff1a; <\/p>\n<p>server:<br \/>\n    interface: 0.0.0.0<br \/>\n    access-control: 192.168.10.0\/24 allow<br \/>\n    access-control: 127.0.0.1 allow<br \/>\n    do-not-query-localhost: no<br \/>\n    root-hints: &#034;\/var\/lib\/unbound\/root.hints&#034;<br \/>\n    trust-anchor-file: &#034;\/var\/lib\/unbound\/root.key&#034;<br \/>\n    cache-min-ttl: 3600<br \/>\n    cache-max-ttl: 86400<br \/>\n    prefetch: yes<br \/>\n    num-threads: 2<\/p>\n<p> \u4f18\u52bf\u975e\u5e38\u660e\u663e&#xff1a; <\/p>\n<p> \u2705  \u9690\u79c1\u4fdd\u62a4  &#xff1a;\u4e0d\u518d\u4f9d\u8d56Google\/Cloudflare  \u2705  \u52a0\u901f\u8bbf\u95ee  &#xff1a;\u9ad8\u9891\u57df\u540d\u672c\u5730\u7f13\u5b58&#xff0c;\u6beb\u79d2\u7ea7\u54cd\u5e94  \u2705  \u7b56\u7565\u63a7\u5236  &#xff1a;\u53ef\u62e6\u622a\u5e7f\u544a\u3001\u6076\u610f\u7ad9\u70b9  \u2705  \u7edf\u4e00\u5ba1\u8ba1  &#xff1a;\u6240\u6709\u67e5\u8be2\u884c\u4e3a\u96c6\u4e2d\u8bb0\u5f55 <\/p>\n<p> \u4e3e\u4e2a\u5b9e\u7528\u6280\u5de7&#xff1a;\u5c4f\u853d\u5e7f\u544a\u57df\u540d <\/p>\n<p>local-zone: &#034;ad.doubleclick.net&#034; redirect<br \/>\nlocal-data: &#034;ad.doubleclick.net A 0.0.0.0&#034;<\/p>\n<p> \u91cd\u542f\u540e&#xff0c;\u6240\u6709\u5bf9\u8be5\u57df\u540d\u7684\u8bf7\u6c42\u90fd\u4f1a\u88ab\u9759\u9ed8\u4e22\u5f03\u3002 <\/p>\n<p> \u6d4b\u8bd5\u547d\u4ee4&#xff1a; <\/p>\n<p>dig &#064;192.168.10.1 google.com<\/p>\n<p> \u4f60\u4f1a\u770b\u5230\u54cd\u5e94\u65f6\u95f4\u660e\u663e\u6bd4\u9996\u6b21\u67e5\u8be2\u5feb\u5f97\u591a\u2014\u2014\u8fd9\u5c31\u662f\u7f13\u5b58\u7684\u529b\u91cf\u3002\u26a1 <\/p>\n<p> \u6d41\u7a0b\u56fe\u8bf4\u660e\u5de5\u4f5c\u539f\u7406&#xff1a; <\/p>\n<p>flowchart LR<br \/>\n    User[\u5185\u7f51\u7528\u6237] &#8211;&gt; Unbound[Unbound\u9012\u5f52\u89e3\u6790\u5668]<br \/>\n    Unbound &#8211;&gt; Cache{\u662f\u5426\u547d\u4e2d\u7f13\u5b58?}<br \/>\n    Cache &#8212; \u662f &#8211;&gt; Return[\u8fd4\u56de\u7f13\u5b58\u7ed3\u679c]<br \/>\n    Cache &#8212; \u5426 &#8211;&gt; Root[\u53d1\u8d77\u9012\u5f52\u67e5\u8be2\u81f3\u6839\u670d\u52a1\u5668]<br \/>\n    Root &#8211;&gt; TLD[\u67e5\u8be2.com\u7b49\u9876\u7ea7\u57df]<br \/>\n    TLD &#8211;&gt; Auth[\u8054\u7cfb\u6743\u5a01DNS]<br \/>\n    Auth &#8211;&gt; Data[\u83b7\u53d6A\u8bb0\u5f55]<br \/>\n    Data &#8211;&gt; CacheStore[\u5b58\u5165\u7f13\u5b58]<br \/>\n    CacheStore &#8211;&gt; Return<\/p>\n<p>    style User fill:#cff,stroke:#333<br \/>\n    style Return fill:#bfb,stroke:#333<\/p>\n<hr \/>\n<h3> \u4e94\u3001\u4e3b\u4eceDNS\u9ad8\u53ef\u7528&#xff1a;\u4e0d\u6015\u5b95\u673a&#xff0c;\u5c31\u6015\u4e0d\u4f1a\u540c\u6b65 &#x1f501; <\/h3>\n<p> \u5355\u70b9DNS&#xff1f;\u522b\u5f00\u73a9\u7b11\u3002\u4e00\u65e6\u6302\u6389&#xff0c;\u6574\u4e2a\u4e1a\u52a1\u5c31\u6b47\u83dc\u4e86\u3002 <\/p>\n<p> \u89e3\u51b3\u65b9\u6848&#xff1a;  \u4e3b\u4ece\u67b6\u6784&#xff08;Master-Slave&#xff09;  <\/p>\n<p> \u539f\u7406\u5f88\u7b80\u5355&#xff1a;\u4e00\u53f0\u4e3b\u670d\u52a1\u5668\u8d1f\u8d23\u5199\u5165&#xff0c;\u591a\u53f0\u4ece\u670d\u52a1\u5668\u5b9a\u65f6\u540c\u6b65\u6570\u636e&#xff0c;\u5171\u540c\u5bf9\u5916\u63d0\u4f9b\u67e5\u8be2\u670d\u52a1\u3002 <\/p>\n<h4> 5.1 \u533a\u57df\u4f20\u8f93\u534f\u8bae&#xff1a;AXFR vs IXFR <\/h4>\n<ul>\n<li>  AXFR  &#xff1a;\u5168\u91cf\u540c\u6b65&#xff0c;\u6bcf\u6b21\u4f20\u6574\u4e2a\u6587\u4ef6&#xff1b; <\/li>\n<li>  IXFR  &#xff1a;\u589e\u91cf\u540c\u6b65&#xff0c;\u53ea\u4f20\u53d8\u5316\u90e8\u5206&#xff0c;\u7701\u5e26\u5bbd\u3002 <\/li>\n<\/ul>\n<p> BIND \u9ed8\u8ba4\u652f\u6301 AXFR&#xff0c;\u914d\u7f6e\u5982\u4e0b&#xff1a; <\/p>\n<p> \u4e3b\u670d\u52a1\u5668&#xff1a; <\/p>\n<p>zone &#034;example.com&#034; IN {<br \/>\n    type master;<br \/>\n    file &#034;example.com.zone&#034;;<br \/>\n    allow-transfer { 192.168.10.2; };  \/\/ \u5141\u8bb8\u8f85\u52a9\u670d\u52a1\u5668\u62c9\u53d6<br \/>\n};<\/p>\n<p> \u8f85\u52a9\u670d\u52a1\u5668&#xff1a; <\/p>\n<p>zone &#034;example.com&#034; IN {<br \/>\n    type slave;<br \/>\n    file &#034;slaves\/example.com.zone&#034;;<br \/>\n    masters { 192.168.10.1; };  \/\/ \u4e3b\u670d\u52a1\u5668IP<br \/>\n};<\/p>\n<p> \u542f\u52a8\u540e\u81ea\u52a8\u540c\u6b65&#xff0c;\u65e5\u5fd7\u4e2d\u4f1a\u51fa\u73b0&#xff1a; <\/p>\n<p>named[1234]: zone example.com\/IN: transferred serial 2025040501<\/p>\n<p> \u8868\u793a\u540c\u6b65\u6210\u529f\u3002 <\/p>\n<p> \u26a0\ufe0f \u5b89\u5168\u63d0\u793a&#xff1a;  allow-transfer  \u4e00\u5b9a\u8981\u52a0IP\u767d\u540d\u5355&#xff0c;\u5426\u5219\u4efb\u4f55\u4eba\u90fd\u80fd\u4e0b\u8f7d\u4f60\u7684\u5b8c\u6574DNS\u6570\u636e&#xff0c;\u76f8\u5f53\u4e8e\u6cc4\u9732\u6240\u6709\u5b50\u57df\u540d&#xff01; <\/p>\n<hr \/>\n<h4> 5.2 \u6545\u969c\u5207\u6362\u4e0e\u5065\u5eb7\u68c0\u67e5\u811a\u672c &#x1f4a1; <\/h4>\n<p> \u5373\u4f7f\u6709\u4e86\u4e3b\u4ece&#xff0c;\u4e5f\u4e0d\u80fd\u5b8c\u5168\u653e\u5fc3\u3002\u4e07\u4e00\u4e3b\u670d\u52a1\u5668\u5b95\u673a\u600e\u4e48\u529e&#xff1f; <\/p>\n<p> \u53ef\u4ee5\u5199\u4e2a\u7b80\u5355\u7684\u76d1\u63a7\u811a\u672c&#xff1a; <\/p>\n<p>#!\/bin\/bash<br \/>\nMASTER_IP&#061;&#034;192.168.10.1&#034;<br \/>\nDOMAIN&#061;&#034;example.com&#034;<\/p>\n<p>if ! dig &#064;$MASTER_IP $DOMAIN &#043;short &gt;\/dev\/null 2&gt;&amp;1; then<br \/>\n    echo &#034;$(date): Master DNS is down!&#034; | mail -s &#034;DNS Alert&#034; admin&#064;example.com<br \/>\nfi<\/p>\n<p> \u52a0\u5165 cron \u6bcf5\u5206\u949f\u8dd1\u4e00\u6b21&#xff1a; <\/p>\n<p>*\/5 * * * * \/usr\/local\/bin\/check-dns.sh<\/p>\n<p> \u66f4\u9ad8\u7ea7\u7684\u505a\u6cd5\u662f\u7ed3\u5408 Prometheus &#043; Grafana \u505a\u53ef\u89c6\u5316\u76d1\u63a7&#xff0c;\u751a\u81f3\u81ea\u52a8\u89e6\u53d1\u5207\u6362\u9884\u6848\u3002 <\/p>\n<p> \u72b6\u6001\u673a\u6a21\u578b\u5982\u4e0b&#xff1a; <\/p>\n<p>stateDiagram-v2<br \/>\n    [*] &#8211;&gt; Healthy<br \/>\n    Healthy &#8211;&gt; Degraded: \u4e3bDNS\u65e0\u54cd\u5e94<br \/>\n    Degraded &#8211;&gt; Recovery: \u6062\u590d\u901a\u4fe1<br \/>\n    Degraded &#8211;&gt; Failover: \u8d85\u65f6\u672a\u6062\u590d<br \/>\n    Failover &#8211;&gt; ManualIntervention: \u901a\u77e5\u8fd0\u7ef4\u63a5\u7ba1<br \/>\n    Recovery &#8211;&gt; Healthy<\/p>\n<p> \u8fd9\u624d\u662f\u771f\u6b63\u7684\u751f\u4ea7\u7ea7\u601d\u7ef4\u3002 <\/p>\n<hr \/>\n<h3> \u516d\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a&#xff1a;\u4e00\u4e2aIP\u5982\u4f55\u627f\u8f7d\u591a\u4e2a\u7ad9\u70b9&#xff1f;&#x1f310; <\/h3>\n<p> DNS\u89e3\u6790\u5b8c\u4e4b\u540e&#xff0c;\u6d41\u91cf\u5230\u8fbe\u670d\u52a1\u5668&#xff0c;\u63a5\u4e0b\u6765\u5c31\u5f97\u9760 Web \u670d\u52a1\u5668\u6765\u533a\u5206\u5230\u5e95\u662f\u54ea\u4e2a\u7f51\u7ad9\u4e86\u3002 <\/p>\n<h4> 6.1 Apache VirtualHost \u914d\u7f6e <\/h4>\n<p> Apache \u4f7f\u7528  &lt;VirtualHost&gt;  \u6307\u4ee4\u5b9e\u73b0\u57fa\u4e8e\u57df\u540d\u7684\u865a\u62df\u4e3b\u673a&#xff1a; <\/p>\n<p>&lt;VirtualHost *:80&gt;<br \/>\n    ServerName example.com<br \/>\n    ServerAlias www.example.com<br \/>\n    DocumentRoot \/var\/www\/example<br \/>\n    ErrorLog \/var\/log\/httpd\/example_error.log<br \/>\n    CustomLog \/var\/log\/httpd\/example_access.log combined<br \/>\n&lt;\/VirtualHost&gt;<\/p>\n<p>&lt;VirtualHost *:80&gt;<br \/>\n    ServerName blog.example.com<br \/>\n    DocumentRoot \/var\/www\/blog<br \/>\n    ErrorLog \/var\/log\/httpd\/blog_error.log<br \/>\n    CustomLog \/var\/log\/httpd\/blog_access.log combined<br \/>\n&lt;\/VirtualHost&gt;<\/p>\n<p> \u91cd\u542f\u751f\u6548&#xff1a; <\/p>\n<p>sudo systemctl restart httpd<\/p>\n<p> Apache \u4f1a\u6839\u636e HTTP \u8bf7\u6c42\u5934\u4e2d\u7684  Host:  \u5b57\u6bb5\u51b3\u5b9a\u8def\u7531\u5230\u54ea\u4e2a\u7ad9\u70b9\u3002 <\/p>\n<p> \u5efa\u8bae\u5b9e\u8df5&#xff1a; <\/p>\n<p> \u2705 \u6bcf\u4e2a\u7ad9\u70b9\u72ec\u7acb\u65e5\u5fd7 \u2192 \u4fbf\u4e8e\u6392\u67e5  \u2705 \u76ee\u5f55\u6743\u9650\u9694\u79bb \u2192 SELinux \u6216 ACL \u63a7\u5236  \u2705 \u7ed3\u5408 PHP-FPM \u6c60\u673a\u5236 \u2192 \u9632\u6b62\u5355\u4e2a\u7ad9\u70b9\u8017\u5c3d\u8d44\u6e90 <\/p>\n<hr \/>\n<h4> 6.2 Nginx server \u5757&#xff1a;\u7075\u6d3b\u5339\u914d\u52a8\u6001\u5b50\u57df &#x1f3af; <\/h4>\n<p> Nginx \u66f4\u9ad8\u6548&#xff0c;\u8bed\u6cd5\u4e5f\u66f4\u7b80\u6d01&#xff1a; <\/p>\n<p>server {<br \/>\n    listen 80;<br \/>\n    server_name ~^(?&lt;subdomain&gt;.&#043;)\\\\.example\\\\.com$;<br \/>\n    root \/var\/www\/sites\/$subdomain;<br \/>\n    index index.html;<\/p>\n<p>    access_log \/var\/log\/nginx\/$subdomain.access.log;<br \/>\n    error_log \/var\/log\/nginx\/$subdomain.error.log;<\/p>\n<p>    location \/ {<br \/>\n        try_files $uri $uri\/ &#061;404;<br \/>\n    }<br \/>\n}<\/p>\n<p> \u8fd9\u6bb5\u914d\u7f6e\u652f\u6301\u4efb\u610f\u5b50\u57df&#xff08;\u5982  dev.example.com  \u3001  api.example.com  &#xff09;&#xff0c;\u771f\u6b63\u505a\u5230\u201c\u52a8\u6001\u6258\u7ba1\u201d\u3002 <\/p>\n<p> \u66f4\u8981\u547d\u7684\u662f&#xff0c;\u4f60\u8fd8\u5f97\u9632\u7740\u522b\u4eba\u6076\u610f\u6307\u5411\u4f60\u7684IP&#xff1a; <\/p>\n<p>server {<br \/>\n    listen 80 default_server;<br \/>\n    return 444;  # \u76f4\u63a5\u5173\u95ed\u8fde\u63a5&#xff0c;\u4e0d\u7559\u75d5\u8ff9<br \/>\n}<\/p>\n<p>  return 444  \u662f Nginx \u7279\u6709\u6307\u4ee4&#xff0c;TCP \u5c42\u76f4\u63a5\u65ad\u5f00&#xff0c;\u8fdeHTTP\u54cd\u5e94\u90fd\u4e0d\u8fd4\u56de&#xff0c;\u5b8c\u7f8e\u62b5\u5fa1\u65e0\u6548\u6d41\u91cf\u51b2\u51fb\u3002 <\/p>\n<p> \u6d41\u7a0b\u56fe\u8bf4\u660e\u5904\u7406\u903b\u8f91&#xff1a; <\/p>\n<p>graph LR<br \/>\n    Request[\u6536\u5230HTTP\u8bf7\u6c42] &#8211;&gt; ExtractHost[\u63d0\u53d6Host\u5934]<br \/>\n    ExtractHost &#8211;&gt; Match{\u662f\u5426\u6709\u5339\u914dserver\u5757?}<br \/>\n    Match &#8212; \u662f &#8211;&gt; ServeContent[\u8fd4\u56de\u5bf9\u5e94\u7f51\u7ad9\u5185\u5bb9]<br \/>\n    Match &#8212; \u5426 &#8211;&gt; Default[\u4ea4\u7531default_server\u5904\u7406]<br \/>\n    Default &#8211;&gt; Close[\u8fd4\u56de444\u5173\u95ed\u8fde\u63a5]<\/p>\n<p>    style Request fill:#f96,stroke:#333<br \/>\n    style ServeContent fill:#bfb,stroke:#333<\/p>\n<hr \/>\n<h3> \u4e03\u3001HTTPS\u5b89\u5168\u52a0\u56fa&#xff1a;\u4eceLet\u2019s Encrypt\u5230TLS 1.3 &#x1f510; <\/h3>\n<p> \u6ca1\u6709HTTPS\u7684\u7f51\u7ad9&#xff0c;\u5728\u73b0\u4ee3\u6d4f\u89c8\u5668\u91cc\u7b49\u4e8e\u201c\u4e0d\u5b89\u5168\u201d\u4e09\u4e2a\u5927\u7ea2\u5b57\u3002\u6240\u4ee5\u5fc5\u987b\u4e0aSSL\/TLS\u3002 <\/p>\n<h4> 7.1 \u8bc1\u4e66\u7c7b\u578b\u600e\u4e48\u9009&#xff1f; <\/h4>\n<table>\n<tr> \u7c7b\u578b  \u9a8c\u8bc1\u65b9\u5f0f  \u663e\u793a\u6548\u679c  \u9002\u7528\u573a\u666f <\/tr>\n<tbody>\n<tr>\n<td> DV <\/td>\n<td> \u57df\u540d\u6240\u6709\u6743 <\/td>\n<td> \u9501\u56fe\u6807 <\/td>\n<td> \u6d4b\u8bd5\/\u4e2a\u4eba\u7ad9 <\/td>\n<\/tr>\n<tr>\n<td> OV <\/td>\n<td> \u4f01\u4e1a\u4fe1\u606f\u5ba1\u6838 <\/td>\n<td> \u9501&#043;\u5355\u4f4d\u540d <\/td>\n<td> \u4f01\u4e1a\u5b98\u7f51 <\/td>\n<\/tr>\n<tr>\n<td> EV <\/td>\n<td> \u6cd5\u5f8b\u5b9e\u4f53\u6df1\u5ea6\u9a8c\u8bc1 <\/td>\n<td> \u66fe\u7eff\u8272\u5730\u5740\u680f&#xff08;\u73b0\u57fa\u672c\u53d6\u6d88&#xff09; <\/td>\n<td> \u91d1\u878d\/\u7535\u5546 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p> \u76ee\u524d\u4e3b\u6d41\u6d4f\u89c8\u5668\u5df2\u5f31\u5316EV\u89c6\u89c9\u5dee\u5f02&#xff0c;\u4f46\u4ece\u5408\u89c4\u89d2\u5ea6\u770b&#xff0c;\u94f6\u884c\u7c7b\u7cfb\u7edf\u4ecd\u9700EV\u3002 <\/p>\n<p> \u63a8\u8350\u7ec4\u5408&#xff1a;  Let\u2019s Encrypt&#xff08;\u514d\u8d39DV&#xff09; &#043; \u81ea\u52a8\u5316\u90e8\u7f72  <\/p>\n<h4> 7.2 Certbot \u4e00\u952e\u641e\u5b9aHTTPS <\/h4>\n<p>sudo apt install certbot python3-certbot-nginx -y<br \/>\nsudo certbot &#8211;nginx -d example.com -d www.example.com<\/p>\n<p> Certbot \u4f1a\u81ea\u52a8&#xff1a; <\/p>\n<ul>\n<li> \u9a8c\u8bc1\u57df\u540d\u63a7\u5236\u6743 <\/li>\n<li> \u83b7\u53d6\u8bc1\u4e66 <\/li>\n<li> \u4fee\u6539Nginx\u914d\u7f6e\u542f\u7528HTTPS <\/li>\n<li> \u6dfb\u52a0HTTP\u2192HTTPS\u91cd\u5b9a\u5411 <\/li>\n<\/ul>\n<p> \u8bc1\u4e66\u8def\u5f84&#xff1a; <\/p>\n<ul>\n<li> \u8bc1\u4e66&#xff1a;  \/etc\/letsencrypt\/live\/example.com\/fullchain.pem  <\/li>\n<li> \u79c1\u94a5&#xff1a;  \/etc\/letsencrypt\/live\/example.com\/privkey.pem  <\/li>\n<\/ul>\n<h4> 7.3 \u5f3a\u5316TLS\u914d\u7f6e&#xff08;A&#043;\u8bc4\u7ea7\u5fc5\u5907&#xff09; <\/h4>\n<p>server {<br \/>\n    listen 443 ssl http2;<br \/>\n    server_name example.com;<\/p>\n<p>    ssl_certificate \/etc\/letsencrypt\/live\/example.com\/fullchain.pem;<br \/>\n    ssl_certificate_key \/etc\/letsencrypt\/live\/example.com\/privkey.pem;<\/p>\n<p>    ssl_protocols TLSv1.2 TLSv1.3;<br \/>\n    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;<\/p>\n<p>    ssl_stapling on;<br \/>\n    ssl_stapling_verify on;<br \/>\n    ssl_trusted_certificate \/etc\/letsencrypt\/live\/example.com\/chain.pem;<\/p>\n<p>    add_header Strict-Transport-Security &#034;max-age&#061;31536000; includeSubDomains&#034; always;<br \/>\n}<\/p>\n<p> \u8fd9\u5957\u914d\u7f6e\u80fd\u5728  SSL Labs  \u8dd1\u51faA&#043;\u6210\u7ee9\u3002 <\/p>\n<p> \u8bc1\u4e66\u751f\u547d\u5468\u671f\u7ba1\u7406\u6d41\u7a0b&#xff1a; <\/p>\n<p> &#096;&#096;&#096;mermaid  graph TD  A[\u53d1\u8d77\u8bc1\u4e66\u7533\u8bf7] \u2013&gt; B{\u57df\u540d\u9a8c\u8bc1\u6210\u529f?}  B \u2013&gt;|\u662f| C[\u7b7e\u53d190\u5929\u8bc1\u4e66]  B \u2013&gt;|\u5426| D[\u5931\u8d25\u5e76\u8bb0\u5f55\u65e5\u5fd7]  C \u2013&gt; E[\u90e8\u7f72\u81f3Web\u670d\u52a1\u5668]  E \u2013&gt; F[ <\/p>\n<p>  \u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6  <img decoding=\"async\" alt=\"menu-r.4af5f7ec.gif\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/03\/20260304010212-69a784941c6a6.gif\" style=\"width:16px;margin-left:4px;vertical-align:text-bottom;cursor:text\" \/> <\/p>\n<p> \u7b80\u4ecb&#xff1a;\u5728IT\u9886\u57df&#xff0c;\u670d\u52a1\u5668\u8bbe\u7f6e\u57df\u540d\u662f\u5b9e\u73b0\u7f51\u7edc\u670d\u52a1\u53ef\u8bbf\u95ee\u6027\u7684\u5173\u952e\u6b65\u9aa4\u3002\u901a\u8fc7\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d&#xff08;\u5982www.example.com&#xff09;\u7ed1\u5b9a\u5230\u670d\u52a1\u5668IP\u5730\u5740&#xff0c;\u7528\u6237\u53ef\u4fbf\u6377\u5730\u8bbf\u95ee\u7f51\u7ad9\u6216\u5e94\u7528\u3002\u8be5\u8fc7\u7a0b\u6db5\u76d6\u57df\u540d\u6ce8\u518c\u3001DNS\u7cfb\u7edf\u914d\u7f6e\u3001\u5404\u7c7bDNS\u8bb0\u5f55&#xff08;A\u3001CNAME\u3001MX\u7b49&#xff09;\u8bbe\u7f6e\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u3001SSL\/TLS\u5b89\u5168\u52a0\u5bc6\u90e8\u7f72\u4ee5\u53ca\u9632\u706b\u5899\u7aef\u53e3\u7ba1\u7406\u3002\u7ed3\u5408DNS\u89e3\u6790\u5668\u8f6f\u4ef6\u4e0e\u4e3b\u4eceDNS\u670d\u52a1\u5668\u67b6\u6784&#xff0c;\u5e76\u5229\u7528\u8d1f\u8f7d\u5747\u8861\u4e0eCDN\u4f18\u5316\u6027\u80fd&#xff0c;\u786e\u4fdd\u670d\u52a1\u9ad8\u53ef\u7528\u6027\u4e0e\u5b89\u5168\u6027\u3002\u6700\u540e\u901a\u8fc7nslookup\u3001dig\u7b49\u5de5\u5177\u8fdb\u884c\u6d4b\u8bd5\u9a8c\u8bc1&#xff0c;\u4fdd\u969c\u89e3\u6790\u51c6\u786e\u6027\u548c\u7cfb\u7edf\u7a33\u5b9a\u6027\u3002\u672c\u6307\u5357\u7cfb\u7edf\u68b3\u7406\u4e86\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5168\u6d41\u7a0b&#xff0c;\u9002\u7528\u4e8e\u8fd0\u7ef4\u4eba\u5458\u53ca\u521d\u5b66\u8005\u638c\u63e1\u6838\u5fc3\u6280\u80fd\u3002 <\/p>\n<p>   \u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6   <img decoding=\"async\" alt=\"menu-r.4af5f7ec.gif\" src=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/03\/20260304010212-69a784941c6a6.gif\" style=\"width:16px;margin-left:4px;vertical-align:text-bottom;cursor:text\" \/>  <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6    \u7b80\u4ecb&#xff1a;\u5728IT\u9886\u57df&#xff0c;\u670d\u52a1\u5668\u8bbe\u7f6e\u57df\u540d\u662f\u5b9e\u73b0\u7f51\u7edc\u670d\u52a1\u53ef\u8bbf\u95ee\u6027\u7684\u5173\u952e\u6b65\u9aa4\u3002\u901a\u8fc7\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d&#xff08;\u5982www.example.com&#xff09;\u7ed1\u5b9a\u5230\u670d\u52a1\u5668IP\u5730\u5740&#xff0c;\u7528\u6237\u53ef\u4fbf\u6377\u5730\u8bbf\u95ee\u7f51\u7ad9\u6216\u5e94\u7528\u3002\u8be5\u8fc7\u7a0b\u6db5\u76d6\u57df\u540d\u6ce8\u518c\u3001DNS\u7cfb\u7edf\u914d\u7f6e\u3001\u5404\u7c7bDNS\u8bb0\u5f55&#xff08;A\u3001CNAME\u3001MX\u7b49&#xff09;\u8bbe\u7f6e\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u3001SSL\/TLS\u5b89\u5168\u52a0\u5bc6\u90e8\u7f72\u4ee5\u53ca\u9632\u706b\u5899\u7aef\u53e3\u7ba1\u7406\u3002\u7ed3<\/p>\n","protected":false},"author":2,"featured_media":80071,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"topic":[],"class_list":["post-80072","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/80072.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6  \u7b80\u4ecb&#xff1a;\u5728IT\u9886\u57df&#xff0c;\u670d\u52a1\u5668\u8bbe\u7f6e\u57df\u540d\u662f\u5b9e\u73b0\u7f51\u7edc\u670d\u52a1\u53ef\u8bbf\u95ee\u6027\u7684\u5173\u952e\u6b65\u9aa4\u3002\u901a\u8fc7\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d&#xff08;\u5982www.example.com&#xff09;\u7ed1\u5b9a\u5230\u670d\u52a1\u5668IP\u5730\u5740&#xff0c;\u7528\u6237\u53ef\u4fbf\u6377\u5730\u8bbf\u95ee\u7f51\u7ad9\u6216\u5e94\u7528\u3002\u8be5\u8fc7\u7a0b\u6db5\u76d6\u57df\u540d\u6ce8\u518c\u3001DNS\u7cfb\u7edf\u914d\u7f6e\u3001\u5404\u7c7bDNS\u8bb0\u5f55&#xff08;A\u3001CNAME\u3001MX\u7b49&#xff09;\u8bbe\u7f6e\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u3001SSL\/TLS\u5b89\u5168\u52a0\u5bc6\u90e8\u7f72\u4ee5\u53ca\u9632\u706b\u5899\u7aef\u53e3\u7ba1\u7406\u3002\u7ed3\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/80072.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-04T01:02:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/03\/20260304010212-69a784941c6a6.gif\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/80072.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/80072.html\",\"name\":\"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-03-04T01:02:13+00:00\",\"dateModified\":\"2026-03-04T01:02:13+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/80072.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/80072.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/80072.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/80072.html","og_locale":"zh_CN","og_type":"article","og_title":"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u672c\u6587\u8fd8\u6709\u914d\u5957\u7684\u7cbe\u54c1\u8d44\u6e90&#xff0c;\u70b9\u51fb\u83b7\u53d6  \u7b80\u4ecb&#xff1a;\u5728IT\u9886\u57df&#xff0c;\u670d\u52a1\u5668\u8bbe\u7f6e\u57df\u540d\u662f\u5b9e\u73b0\u7f51\u7edc\u670d\u52a1\u53ef\u8bbf\u95ee\u6027\u7684\u5173\u952e\u6b65\u9aa4\u3002\u901a\u8fc7\u5c06\u4eba\u7c7b\u53ef\u8bfb\u7684\u57df\u540d&#xff08;\u5982www.example.com&#xff09;\u7ed1\u5b9a\u5230\u670d\u52a1\u5668IP\u5730\u5740&#xff0c;\u7528\u6237\u53ef\u4fbf\u6377\u5730\u8bbf\u95ee\u7f51\u7ad9\u6216\u5e94\u7528\u3002\u8be5\u8fc7\u7a0b\u6db5\u76d6\u57df\u540d\u6ce8\u518c\u3001DNS\u7cfb\u7edf\u914d\u7f6e\u3001\u5404\u7c7bDNS\u8bb0\u5f55&#xff08;A\u3001CNAME\u3001MX\u7b49&#xff09;\u8bbe\u7f6e\u3001Web\u670d\u52a1\u5668\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u3001SSL\/TLS\u5b89\u5168\u52a0\u5bc6\u90e8\u7f72\u4ee5\u53ca\u9632\u706b\u5899\u7aef\u53e3\u7ba1\u7406\u3002\u7ed3","og_url":"https:\/\/www.wsisp.com\/helps\/80072.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-03-04T01:02:13+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2026\/03\/20260304010212-69a784941c6a6.gif"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"9 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/80072.html","url":"https:\/\/www.wsisp.com\/helps\/80072.html","name":"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-03-04T01:02:13+00:00","dateModified":"2026-03-04T01:02:13+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/80072.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/80072.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/80072.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u670d\u52a1\u5668\u57df\u540d\u914d\u7f6e\u5b8c\u6574\u6307\u5357\u4e0e\u5b9e\u6218\u6d41\u7a0b"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/80072","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=80072"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/80072\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/80071"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=80072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=80072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=80072"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=80072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}