MX\u8bb0\u5f55\u5c06\u7535\u5b50\u90ae\u4ef6\u5f15\u5bfc\u5230\u9002\u5f53\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u3002\u4f18\u5148\u7ea7\u503c\u51b3\u5b9a\u5c1d\u8bd5\u90ae\u4ef6\u670d\u52a1\u5668\u7684\u987a\u5e8f\uff1a<\/p>\n

\r\n# \u5e26\u4f18\u5148\u7ea7\u8bbe\u7f6e\u7684MX\u8bb0\u5f55\r\nexample.com.    IN    MX    10    primary-mail.example.com.\r\nexample.com.    IN    MX    20    backup-mail.example.com.\r\n\r\n# Google Workspace MX\u914d\u7f6e\r\nexample.com.    IN    MX    1     aspmx.l.google.com.\r\nexample.com.    IN    MX    5     alt1.aspmx.l.google.com.\r\nexample.com.    IN    MX    10    alt2.aspmx.l.google.com.\r\n<\/code><\/pre>\n
SPF\u8bb0\u5f55 – \u53d1\u4ef6\u4eba\u7b56\u7565\u6846\u67b6<\/h3>\n
SPF\u8bb0\u5f55\u901a\u8fc7\u6307\u5b9a\u6388\u6743\u7684\u90ae\u4ef6\u670d\u52a1\u5668\u6765\u5e2e\u52a9\u9632\u6b62\u7535\u5b50\u90ae\u4ef6\u6b3a\u9a97\u3002\u4ee5\u4e0b\u662f\u5982\u4f55\u5b9e\u65bd\u5404\u79cdSPF\u7b56\u7565\uff1a<\/p>\n
\r\n# \u57fa\u672cSPF\u8bb0\u5f55\r\nexample.com.    IN    TXT    \"v=spf1 ip4:192.0.2.0\/24 include:_spf.google.com ~all\"\r\n\r\n# \u4e25\u683cSPF\u914d\u7f6e\r\nexample.com.    IN    TXT    \"v=spf1 mx ip4:203.0.113.0\/24 -all\"\r\n\r\n# \u591a\u670d\u52a1SPF\r\nexample.com.    IN    TXT    \"v=spf1 include:spf.protection.outlook.com include:_spf.google.com ip4:203.0.113.0\/24 -all\"\r\n<\/code><\/pre>\n
\u9ad8\u7ea7DNS\u7ba1\u7406\u8bb0\u5f55<\/strong><\/h2>\n
\u8fd9\u4e9b\u8bb0\u5f55\u5b9a\u4e49\u4e86DNS\u533a\u57df\u7684\u57fa\u672c\u7ed3\u6784\u548c\u6743\u9650\u3002\u5bf9\u4e8e\u7ba1\u7406\u670d\u52a1\u5668\u79df\u7528\u57fa\u7840\u8bbe\u65bd\u7684\u7cfb\u7edf\u7ba1\u7406\u5458\u6765\u8bf4\uff0c\u7406\u89e3\u8fd9\u4e9b\u8bb0\u5f55\u5bf9\u4e8e\u7ef4\u62a4DNS\u7a33\u5b9a\u6027\u81f3\u5173\u91cd\u8981\u3002<\/p>\n
NS\u8bb0\u5f55 – \u57df\u540d\u670d\u52a1\u5668<\/h3>\n
NS\u8bb0\u5f55\u59d4\u6d3eDNS\u533a\u57df\u7684\u6743\u9650\u3002\u4ee5\u4e0b\u662f\u5197\u4f59\u57df\u540d\u670d\u52a1\u5668\u7684\u5178\u578b\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u4e3b\u8981\u548c\u6b21\u8981NS\u8bb0\u5f55\r\nexample.com.    IN    NS    ns1.nameserver.com.\r\nexample.com.    IN    NS    ns2.nameserver.com.\r\n\r\n# \u5b50\u57df\u59d4\u6d3e\r\nsub.example.com.    IN    NS    ns1.other-provider.com.\r\nsub.example.com.    IN    NS    ns2.other-provider.com.\r\n<\/code><\/pre>\n
SOA\u8bb0\u5f55 – \u6743\u5a01\u8bb0\u5f55\u8d77\u59cb<\/h3>\n
SOA\u8bb0\u5f55\u5305\u542b\u6709\u5173\u60a8\u7684DNS\u533a\u57df\u7684\u57fa\u672c\u4fe1\u606f\u3002\u8ba9\u6211\u4eec\u5206\u89e3\u4e00\u4e2a\u5178\u578b\u7684SOA\u8bb0\u5f55\uff1a<\/p>\n
\r\n# SOA\u8bb0\u5f55\u7ed3\u6784\r\nexample.com.    IN    SOA    ns1.nameserver.com. admin.example.com. (\r\n                            2024030301  ; \u5e8f\u5217\u53f7 (YYYYMMDDNN)\r\n                            7200        ; \u5237\u65b0\u65f6\u95f4 (2\u5c0f\u65f6)\r\n                            3600        ; \u91cd\u8bd5\u65f6\u95f4 (1\u5c0f\u65f6)\r\n                            1209600     ; \u8fc7\u671f\u65f6\u95f4 (2\u5468)\r\n                            3600        ; \u6700\u5c0fTTL (1\u5c0f\u65f6)\r\n                            )\r\n<\/code><\/pre>\n
\u5b89\u5168\u589e\u5f3a\u578bDNS\u8bb0\u5f55<\/strong><\/h2>\n
\u73b0\u4ee3DNS\u914d\u7f6e\u9700\u8981\u5f3a\u5927\u7684\u5b89\u5168\u63aa\u65bd\u3002\u8fd9\u4e9b\u8bb0\u5f55\u6709\u52a9\u4e8e\u4fdd\u62a4\u60a8\u7684\u57df\u540d\u548c\u670d\u52a1\u514d\u53d7\u5404\u79cd\u5a01\u80c1\u3002<\/p>\n
DNSKEY\u548cRRSIG\u8bb0\u5f55<\/h3>\n
DNSSEC\u5b9e\u65bd\u9700\u8981\u6b63\u786e\u7684\u5bc6\u94a5\u7ba1\u7406\u3002\u4ee5\u4e0b\u662fDNSKEY\u914d\u7f6e\u793a\u4f8b\uff1a<\/p>\n
\r\n# \u533a\u57df\u7b7e\u540d\u5bc6\u94a5 (ZSK)\r\nexample.com.    IN    DNSKEY    256 3 13 (\r\n                                mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+\r\n                                KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==\r\n                                )\r\n\r\n# \u5bc6\u94a5\u7b7e\u540d\u5bc6\u94a5 (KSK)\r\nexample.com.    IN    DNSKEY    257 3 13 (\r\n                                qZM60MUJp95oGr\/24np7w1GMRLGwstm1L6zGKbJGMZ\/ICnhUirYgx8Wu\r\n                                kh7rnvAVjRYLA9FrYGpZ6qQJHyQkR3w==\r\n                                )\r\n<\/code><\/pre>\n
CAA\u8bb0\u5f55 – \u8bc1\u4e66\u9881\u53d1\u673a\u6784\u6388\u6743<\/h3>\n
CAA\u8bb0\u5f55\u6307\u5b9a\u54ea\u4e9b\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u53ef\u4ee5\u4e3a\u60a8\u7684\u57df\u540d\u9881\u53d1SSL\u8bc1\u4e66\uff1a<\/p>\n
\r\n# \u4e25\u683cCAA\u914d\u7f6e\r\nexample.com.    IN    CAA    0 issue \"letsencrypt.org\"\r\nexample.com.    IN    CAA    0 issuewild \";\"\r\nexample.com.    IN    CAA    0 iodef \"mailto:security@example.com\"\r\n\r\n# \u591aCA\u6388\u6743\r\nexample.com.    IN    CAA    0 issue \"digicert.com\"\r\nexample.com.    IN    CAA    0 issue \"sectigo.com\"\r\n<\/code><\/pre>\n
\u670d\u52a1\u548c\u6587\u672c\u8bb0\u5f55<\/strong><\/h2>\n
\u8fd9\u4e9b\u591a\u529f\u80fd\u8bb0\u5f55\u7c7b\u578b\u652f\u6301\u5728\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\u5e38\u7528\u7684\u5404\u79cd\u670d\u52a1\u914d\u7f6e\u548c\u57df\u540d\u9a8c\u8bc1\u8981\u6c42\u3002<\/p>\n
SRV\u8bb0\u5f55 – \u670d\u52a1\u4f4d\u7f6e<\/h3>\n
SRV\u8bb0\u5f55\u6307\u5b9a\u7279\u5b9a\u670d\u52a1\u7684\u4f4d\u7f6e\u3002\u5b83\u4eec\u5bf9VoIP\u548cActive Directory\u7b49\u670d\u52a1\u81f3\u5173\u91cd\u8981\uff1a<\/p>\n
\r\n# \u683c\u5f0f\uff1a_\u670d\u52a1._\u534f\u8bae.\u540d\u79f0. TTL\u7c7b\u522b SRV \u4f18\u5148\u7ea7 \u6743\u91cd \u7aef\u53e3 \u76ee\u6807\r\n\r\n# XMPP\u670d\u52a1\u5668\u914d\u7f6e\r\n_xmpp-server._tcp.example.com.    IN    SRV    10 20 5269    xmpp.example.com.\r\n_xmpp-client._tcp.example.com.    IN    SRV    10 20 5222    xmpp.example.com.\r\n\r\n# Microsoft 365 SIP\u914d\u7f6e\r\n_sip._tls.example.com.           IN    SRV    100 1 443    sipdir.online.lync.com.\r\n_sipfederationtls._tcp.example.com. IN SRV    100 1 5061   sipfed.online.lync.com.\r\n<\/code><\/pre>\n
TXT\u8bb0\u5f55 – \u591a\u7528\u9014\u6587\u672c\u8bb0\u5f55<\/h3>\n
TXT\u8bb0\u5f55\u670d\u52a1\u4e8e\u591a\u79cd\u7528\u9014\uff0c\u4ece\u57df\u540d\u9a8c\u8bc1\u5230\u5b89\u5168\u7b56\u7565\u3002\u4ee5\u4e0b\u662f\u57fa\u672c\u5b9e\u65bd\uff1a<\/p>\n
\r\n# Google\u7ad9\u70b9\u9a8c\u8bc1\r\nexample.com.    IN    TXT    \"google-site-verification=randomstring123\"\r\n\r\n# Microsoft 365\u9a8c\u8bc1\r\nexample.com.    IN    TXT    \"MS=msverify.randomstring123\"\r\n\r\n# DMARC\u7b56\u7565\r\n_dmarc.example.com.    IN    TXT    \"v=DMARC1; p=reject; rua=mailto:dmarc@example.com\"\r\n<\/code><\/pre>\n
DNS\u8bb0\u5f55\u7ba1\u7406\u6700\u4f73\u5b9e\u8df5<\/strong><\/h2>\n
\u5b9e\u65bd\u9002\u5f53\u7684DNS\u7ba1\u7406\u7b56\u7565\u5bf9\u4e8e\u7ef4\u62a4\u53ef\u9760\u7684\u670d\u52a1\u5668\u79df\u7528\u57fa\u7840\u8bbe\u65bd\u81f3\u5173\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u5173\u952e\u8003\u8651\u56e0\u7d20\uff1a<\/p>\n
TTL\u4f18\u5316<\/h3>\n
\r\n# \u6807\u51c6TTL\u8bbe\u7f6e\r\n$TTL 3600    ; \u9ed8\u8ba4TTL\u4e3a1\u5c0f\u65f6\r\n\r\n# \u8ba1\u5212\u66f4\u6539\u65f6\u7684\u4f4eTTL\r\nwww.example.com.    60    IN    A    203.0.113.10\r\n\r\n# \u7a33\u5b9a\u8bb0\u5f55\u7684\u9ad8TTL\r\nstatic.example.com.    86400    IN    A    203.0.113.20\r\n<\/code><\/pre>\n
\u5bf9\u4e8e\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u66f4\u6539\uff0c\u5b9e\u65bdTTL\u8c03\u6574\u7b56\u7565\uff1a<\/p>\n
1. \u5728\u8ba1\u5212\u66f4\u6539\u524d24-48\u5c0f\u65f6\u964d\u4f4eTTL\u503c
\n2. \u8fdb\u884c\u5fc5\u8981\u7684DNS\u66f4\u65b0
\n3. \u786e\u8ba4\u7a33\u5b9a\u6027\u540e\u6062\u590d\u6807\u51c6TTL\u503c<\/p>\n
\u5197\u4f59\u89c4\u5212<\/h3>\n
\u5b9e\u65bd\u5197\u4f59DNS\u914d\u7f6e\u4ee5\u786e\u4fdd\u9ad8\u53ef\u7528\u6027\uff1a<\/p>\n
\r\n# \u5730\u7406DNS\u5206\u5e03\r\nexample.com.    IN    NS    ns1.us-east.example.net.    ; \u7f8e\u56fd\u4e1c\u6d77\u5cb8\r\nexample.com.    IN    NS    ns1.us-west.example.net.    ; \u7f8e\u56fd\u897f\u6d77\u5cb8\r\nexample.com.    IN    NS    ns1.eu-central.example.net. ; \u6b27\u6d32\r\n<\/code><\/pre>\n
\u6545\u969c\u6392\u9664\u548c\u9a8c\u8bc1<\/strong><\/h2>\n
\u6709\u6548\u7684DNS\u6545\u969c\u6392\u9664\u9700\u8981\u7406\u89e3\u5de5\u5177\u548c\u65b9\u6cd5\u3002\u4ee5\u4e0b\u662fDNS\u9a8c\u8bc1\u7684\u5b9e\u7528\u65b9\u6cd5\uff1a<\/p>\n
\u547d\u4ee4\u884cDNS\u67e5\u8be2<\/h3>\n
\u4f7f\u7528\u8fd9\u4e9b\u547d\u4ee4\u9a8c\u8bc1\u60a8\u7684DNS\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u9a8c\u8bc1A\u8bb0\u5f55\r\ndig +short A example.com\r\n\r\n# \u68c0\u67e5DNSSEC\r\ndig +dnssec example.com DNSKEY\r\n\r\n# \u5b8c\u6574DNS\u89e3\u6790\u8def\u5f84\r\ndig +trace example.com\r\n\r\n# \u53cd\u5411DNS\u67e5\u8be2\r\ndig -x 203.0.113.10\r\n<\/code><\/pre>\n
DNS\u4f20\u64ad\u6d4b\u8bd5<\/h3>\n
\u4f7f\u7528\u591a\u4e2aDNS\u89e3\u6790\u5668\u76d1\u63a7\u4e0d\u540c\u5730\u7406\u4f4d\u7f6e\u7684DNS\u4f20\u64ad\uff1a<\/p>\n
\r\n# \u9488\u5bf9Google DNS\u6d4b\u8bd5\r\ndig @8.8.8.8 example.com\r\n\r\n# \u9488\u5bf9Cloudflare DNS\u6d4b\u8bd5\r\ndig @1.1.1.1 example.com\r\n\r\n# \u9488\u5bf9\u672c\u5730ISP\u6d4b\u8bd5\r\ndig @local.isp.resolver example.com\r\n<\/code><\/pre>\n
DNS\u914d\u7f6e\u7684\u672a\u6765\u5c55\u671b<\/strong><\/h2>\n
\u7ef4\u62a4\u5f3a\u5927\u7684DNS\u57fa\u7840\u8bbe\u65bd\u9700\u8981\u4e0e\u65b0\u5174\u6807\u51c6\u548c\u5b89\u5168\u5b9e\u8df5\u4fdd\u6301\u540c\u6b65\u3002\u8003\u8651\u5b9e\u65bd\uff1a<\/p>\n
\n
DANE\uff08\u57fa\u4e8eDNS\u7684\u547d\u540d\u5b9e\u4f53\u8ba4\u8bc1\uff09\u4ee5\u589e\u5f3a\u5b89\u5168\u6027<\/li>\n
DoT\uff08DNS over TLS\uff09\u548cDoH\uff08DNS over HTTPS\uff09\u652f\u6301<\/li>\n
\u6269\u5c55DNS\u76d1\u63a7\u548c\u5206\u6790<\/li>\n
\u901a\u8fc7API\u5b9e\u73b0DNS\u81ea\u52a8\u5316\u7ba1\u7406<\/li>\n<\/ul>\n
\u7ed3\u8bba<\/strong><\/h2>\n
\u638c\u63e1DNS\u8bb0\u5f55\u7c7b\u578b\u5bf9\u4e8e\u6709\u6548\u7ba1\u7406\u7f8e\u56fd\u670d\u52a1\u5668\u79df\u7528\u57fa\u7840\u8bbe\u65bd\u81f3\u5173\u91cd\u8981\u3002\u4ece\u57fa\u672c\u7684A\u8bb0\u5f55\u5230\u9ad8\u7ea7\u5b89\u5168\u914d\u7f6e\uff0c\u9002\u5f53\u7684DNS\u7ba1\u7406\u786e\u4fdd\u53ef\u9760\u7684\u670d\u52a1\u4ea4\u4ed8\u548c\u5f3a\u5927\u7684\u5b89\u5168\u6027\u3002\u5728\u4fdd\u6301\u5411\u540e\u517c\u5bb9\u6027\u7684\u540c\u65f6\uff0c\u4f7f\u60a8\u7684DNS\u914d\u7f6e\u4e0e\u65b0\u5174\u6807\u51c6\u4fdd\u6301\u540c\u6b65\uff0c\u4ee5\u83b7\u5f97\u6700\u4f73\u6027\u80fd\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5bf9\u4e8e\u4efb\u4f55\u7ba1\u7406\u7f8e\u56fdDNS\u670d\u52a1\u5668\u4e0a\u7684\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u7684\u4eba\u6765\u8bf4\uff0c\u7406\u89e3DNS\u8bb0\u5f55\u7c7b\u578b\u81f3\u5173\u91cd\u8981\u3002\u65e0\u8bba\u60a8\u662f\u5728\u914d\u7f6e\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u8fd8\u662f\u6392\u67e5DNS\u95ee\u9898\uff0c\u638c\u63e1\u8fd9\u4e9b\u8bb0\u5f55\u7c7b\u578b\u90fd\u662f\u5fc5\u4e0d\u53ef\u5c11\u7684\u3002\u672c\u6280\u672f\u6307\u5357\u6df1\u5165\u63a2\u8ba813\u79cd\u57fa\u672cDNS\u8bb0\u5f55\u7c7b\u578b\uff0c\u5e76\u63d0\u4f9b\u5b9e\u9645\u5b9e\u65bd\u793a\u4f8b\u548c\u6700\u4f73\u5b9e\u8df5\u3002 \u7406\u89e3\u6838\u5fc3DNS\u8bb0\u5f55 \u8ba9\u6211\u4eec\u4ece\u6784\u6210\u57df\u540d\u89e3\u6790\u57fa\u7840\u7684\u57fa\u672cDNS\u8bb0\u5f55\u5f00\u59cb\u3002\u8fd9\u4e9b\u8bb0\u5f55\u5bf9\u4e8e\u57fa\u672c\u7f51\u7ad9\u529f\u80fd\u81f3\u5173\u91cd\u8981\uff0c\u5e76\u4f5c\u4e3a\u66f4\u590d\u6742DNS\u914d\u7f6e\u7684\u57fa\u7840\u3002 A\u8bb0\u5f55 – IPv4\u5730\u5740\u6620\u5c04 A\u8bb0\u5f55\u63d0\u4f9b\u6700\u57fa\u672c\u7684DNS\u89e3\u6790\u5f62\u5f0f\uff0c\u5c06\u4e3b\u673a\u540d\u6620\u5c04\u5230IPv4\u5730\u5740\u3002\u4ee5\u4e0b\u662f\u914d\u7f6eA\u8bb0\u5f55\u7684\u5b9e\u9645\u793a\u4f8b\uff1a # A\u8bb0\u5f55\u914d\u7f6e\u793a\u4f8b host.example.com. IN A 203.0.113.1 # \u7528\u4e8e\u8d1f\u8f7d\u5747\u8861\u7684\u591a\u4e2aA\u8bb0\u5f55 www.example.com. IN A 203.0.113.1 www.example.com. IN A 203.0.113.2 AAAA\u8bb0\u5f55 – IPv6\u652f\u6301 AAAA\u8bb0\u5f55\u7684\u7528\u9014\u4e0eA\u8bb0\u5f55\u76f8\u540c\uff0c\u4f46\u7528\u4e8eIPv6\u5730\u5740\u3002\u73b0\u4ee3DNS\u914d\u7f6e\u901a\u5e38\u5305\u542b\u8fd9\u4e24\u79cd\u8bb0\u5f55\u7c7b\u578b\uff1a # AAAA\u8bb0\u5f55\u914d\u7f6e\u793a\u4f8b host.example.com. IN AAAA 2001:db8:85a3::8a2e:370:7334 CNAME\u8bb0\u5f55 – \u89c4\u8303\u540d\u79f0 CNAME\u8bb0\u5f55\u4e3a\u60a8\u7684\u57df\u540d\u521b\u5efa\u522b\u540d\u3002\u5b83\u4eec\u5728\u9700\u8981\u57df\u540d\u9a8c\u8bc1\u7684\u670d\u52a1\u6216\u8bbe\u7f6e\u6307\u5411CDN\u7aef\u70b9\u7684\u5b50\u57df\u540d\u65f6\u7279\u522b\u6709\u7528\uff1a # \u6807\u51c6CNAME\u914d\u7f6e blog.example.com. IN CNAME example.com. cdn.example.com. IN CNAME d1234.cloudfront.net. # AWS S3\u7f51\u7ad9CNAME\u793a\u4f8b photos.example.com. IN CNAME example-bucket.s3-website.us-east-1.amazonaws.com. \u90ae\u4ef6\u670d\u52a1\u5668\u914d\u7f6e\u8bb0\u5f55 […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":20241,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4816],"tags":[5175,5176,5177,3572,353],"class_list":["post-20252","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-sc","tag-us-dns-servers-sc","tag-dns-management-sc","tag-dns-records-sc","tag-dns-configuration-sc","tag-server-rental-sc"],"acf":[],"yoast_head":"\n