MX\u8a18\u9304\u5c07\u96fb\u5b50\u90f5\u4ef6\u5f15\u5c0e\u5230\u9069\u7576\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u3002\u512a\u5148\u7d1a\u503c\u6c7a\u5b9a\u5617\u8a66\u90f5\u4ef6\u4f3a\u670d\u5668\u7684\u9806\u5e8f\uff1a<\/p>\n

\r\n# \u5e36\u512a\u5148\u7d1a\u8a2d\u5b9a\u7684MX\u8a18\u9304\r\nexample.com.    IN    MX    10    primary-mail.example.com.\r\nexample.com.    IN    MX    20    backup-mail.example.com.\r\n\r\n# Google Workspace MX\u914d\u7f6e\r\nexample.com.    IN    MX    1     aspmx.l.google.com.\r\nexample.com.    IN    MX    5     alt1.aspmx.l.google.com.\r\nexample.com.    IN    MX    10    alt2.aspmx.l.google.com.\r\n<\/code><\/pre>\n
SPF\u8a18\u9304 – \u5bc4\u4ef6\u8005\u653f\u7b56\u6846\u67b6<\/h3>\n
SPF\u8a18\u9304\u901a\u904e\u6307\u5b9a\u6388\u6b0a\u7684\u90f5\u4ef6\u4f3a\u670d\u5668\u4f86\u5e6b\u52a9\u9632\u6b62\u96fb\u5b50\u90f5\u4ef6\u8a50\u9a19\u3002\u4ee5\u4e0b\u662f\u5982\u4f55\u5be6\u65bd\u5404\u7a2eSPF\u653f\u7b56\uff1a<\/p>\n
\r\n# \u57fa\u672cSPF\u8a18\u9304\r\nexample.com.    IN    TXT    \"v=spf1 ip4:192.0.2.0\/24 include:_spf.google.com ~all\"\r\n\r\n# \u56b4\u683cSPF\u914d\u7f6e\r\nexample.com.    IN    TXT    \"v=spf1 mx ip4:203.0.113.0\/24 -all\"\r\n\r\n# \u591a\u670d\u52d9SPF\r\nexample.com.    IN    TXT    \"v=spf1 include:spf.protection.outlook.com include:_spf.google.com ip4:203.0.113.0\/24 -all\"\r\n<\/code><\/pre>\n
\u9032\u968eDNS\u7ba1\u7406\u8a18\u9304<\/strong><\/h2>\n
\u9019\u4e9b\u8a18\u9304\u5b9a\u7fa9\u4e86DNS\u5340\u57df\u7684\u57fa\u672c\u7d50\u69cb\u548c\u6b0a\u9650\u3002\u5c0d\u65bc\u7ba1\u7406\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u7684\u7cfb\u7d71\u7ba1\u7406\u54e1\u4f86\u8aaa\uff0c\u7406\u89e3\u9019\u4e9b\u8a18\u9304\u5c0d\u65bc\u7dad\u8b77DNS\u7a69\u5b9a\u6027\u81f3\u95dc\u91cd\u8981\u3002<\/p>\n
NS\u8a18\u9304 – \u57df\u540d\u4f3a\u670d\u5668<\/h3>\n
NS\u8a18\u9304\u59d4\u6d3eDNS\u5340\u57df\u7684\u6b0a\u9650\u3002\u4ee5\u4e0b\u662f\u5197\u9918\u57df\u540d\u4f3a\u670d\u5668\u7684\u5178\u578b\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u4e3b\u8981\u548c\u6b21\u8981NS\u8a18\u9304\r\nexample.com.    IN    NS    ns1.nameserver.com.\r\nexample.com.    IN    NS    ns2.nameserver.com.\r\n\r\n# \u5b50\u57df\u59d4\u6d3e\r\nsub.example.com.    IN    NS    ns1.other-provider.com.\r\nsub.example.com.    IN    NS    ns2.other-provider.com.\r\n<\/code><\/pre>\n
SOA\u8a18\u9304 – \u6b0a\u5a01\u8a18\u9304\u8d77\u59cb<\/h3>\n
SOA\u8a18\u9304\u5305\u542b\u6709\u95dc\u60a8\u7684DNS\u5340\u57df\u7684\u57fa\u672c\u8cc7\u8a0a\u3002\u8b93\u6211\u5011\u5206\u89e3\u4e00\u500b\u5178\u578b\u7684SOA\u8a18\u9304\uff1a<\/p>\n
\r\n# SOA\u8a18\u9304\u7d50\u69cb\r\nexample.com.    IN    SOA    ns1.nameserver.com. admin.example.com. (\r\n                            2024030301  ; \u5e8f\u865f (YYYYMMDDNN)\r\n                            7200        ; \u66f4\u65b0\u6642\u9593 (2\u5c0f\u6642)\r\n                            3600        ; \u91cd\u8a66\u6642\u9593 (1\u5c0f\u6642)\r\n                            1209600     ; \u904e\u671f\u6642\u9593 (2\u9031)\r\n                            3600        ; \u6700\u5c0fTTL (1\u5c0f\u6642)\r\n                            )\r\n<\/code><\/pre>\n
\u5b89\u5168\u5f37\u5316\u578bDNS\u8a18\u9304<\/strong><\/h2>\n
\u73fe\u4ee3DNS\u914d\u7f6e\u9700\u8981\u5f37\u5927\u7684\u5b89\u5168\u63aa\u65bd\u3002\u9019\u4e9b\u8a18\u9304\u6709\u52a9\u65bc\u4fdd\u8b77\u60a8\u7684\u57df\u540d\u548c\u670d\u52d9\u514d\u53d7\u5404\u7a2e\u5a01\u8105\u3002<\/p>\n
DNSKEY\u548cRRSIG\u8a18\u9304<\/h3>\n
DNSSEC\u5be6\u65bd\u9700\u8981\u6b63\u78ba\u7684\u91d1\u9470\u7ba1\u7406\u3002\u4ee5\u4e0b\u662fDNSKEY\u914d\u7f6e\u7bc4\u4f8b\uff1a<\/p>\n
\r\n# \u5340\u57df\u7c3d\u7f72\u91d1\u9470 (ZSK)\r\nexample.com.    IN    DNSKEY    256 3 13 (\r\n                                mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+\r\n                                KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==\r\n                                )\r\n\r\n# \u91d1\u9470\u7c3d\u7f72\u91d1\u9470 (KSK)\r\nexample.com.    IN    DNSKEY    257 3 13 (\r\n                                qZM60MUJp95oGr\/24np7w1GMRLGwstm1L6zGKbJGMZ\/ICnhUirYgx8Wu\r\n                                kh7rnvAVjRYLA9FrYGpZ6qQJHyQkR3w==\r\n                                )\r\n<\/code><\/pre>\n
CAA\u8a18\u9304 – \u6191\u8b49\u9812\u767c\u6a5f\u69cb\u6388\u6b0a<\/h3>\n
CAA\u8a18\u9304\u6307\u5b9a\u54ea\u4e9b\u6191\u8b49\u9812\u767c\u6a5f\u69cb\u53ef\u4ee5\u70ba\u60a8\u7684\u57df\u540d\u9812\u767cSSL\u6191\u8b49\uff1a<\/p>\n
\r\n# \u56b4\u683cCAA\u914d\u7f6e\r\nexample.com.    IN    CAA    0 issue \"letsencrypt.org\"\r\nexample.com.    IN    CAA    0 issuewild \";\"\r\nexample.com.    IN    CAA    0 iodef \"mailto:security@example.com\"\r\n\r\n# \u591aCA\u6388\u6b0a\r\nexample.com.    IN    CAA    0 issue \"digicert.com\"\r\nexample.com.    IN    CAA    0 issue \"sectigo.com\"\r\n<\/code><\/pre>\n
\u670d\u52d9\u548c\u6587\u5b57\u8a18\u9304<\/strong><\/h2>\n
\u9019\u4e9b\u591a\u529f\u80fd\u8a18\u9304\u985e\u578b\u652f\u63f4\u5728\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u5e38\u7528\u7684\u5404\u7a2e\u670d\u52d9\u914d\u7f6e\u548c\u57df\u540d\u9a57\u8b49\u8981\u6c42\u3002<\/p>\n
SRV\u8a18\u9304 – \u670d\u52d9\u4f4d\u7f6e<\/h3>\n
SRV\u8a18\u9304\u6307\u5b9a\u7279\u5b9a\u670d\u52d9\u7684\u4f4d\u7f6e\u3002\u5b83\u5011\u5c0dVoIP\u548cActive Directory\u7b49\u670d\u52d9\u81f3\u95dc\u91cd\u8981\uff1a<\/p>\n
\r\n# \u683c\u5f0f\uff1a_\u670d\u52d9._\u5354\u5b9a.\u540d\u7a31. TTL\u985e\u5225 SRV \u512a\u5148\u7d1a \u6b0a\u91cd \u9023\u63a5\u57e0 \u76ee\u6a19\r\n\r\n# XMPP\u4f3a\u670d\u5668\u914d\u7f6e\r\n_xmpp-server._tcp.example.com.    IN    SRV    10 20 5269    xmpp.example.com.\r\n_xmpp-client._tcp.example.com.    IN    SRV    10 20 5222    xmpp.example.com.\r\n\r\n# Microsoft 365 SIP\u914d\u7f6e\r\n_sip._tls.example.com.           IN    SRV    100 1 443    sipdir.online.lync.com.\r\n_sipfederationtls._tcp.example.com. IN SRV    100 1 5061   sipfed.online.lync.com.\r\n<\/code><\/pre>\n
TXT\u8a18\u9304 – \u591a\u7528\u9014\u6587\u5b57\u8a18\u9304<\/h3>\n
TXT\u8a18\u9304\u670d\u52d9\u65bc\u591a\u7a2e\u7528\u9014\uff0c\u5f9e\u57df\u540d\u9a57\u8b49\u5230\u5b89\u5168\u653f\u7b56\u3002\u4ee5\u4e0b\u662f\u57fa\u672c\u5be6\u65bd\uff1a<\/p>\n
\r\n# Google\u7db2\u7ad9\u9a57\u8b49\r\nexample.com.    IN    TXT    \"google-site-verification=randomstring123\"\r\n\r\n# Microsoft 365\u9a57\u8b49\r\nexample.com.    IN    TXT    \"MS=msverify.randomstring123\"\r\n\r\n# DMARC\u653f\u7b56\r\n_dmarc.example.com.    IN    TXT    \"v=DMARC1; p=reject; rua=mailto:dmarc@example.com\"\r\n<\/code><\/pre>\n
DNS\u8a18\u9304\u7ba1\u7406\u6700\u4f73\u5be6\u52d9<\/strong><\/h2>\n
\u5be6\u65bd\u9069\u7576\u7684DNS\u7ba1\u7406\u653f\u7b56\u5c0d\u65bc\u7dad\u8b77\u53ef\u9760\u7684\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u95dc\u9375\u8003\u616e\u56e0\u7d20\uff1a<\/p>\n
TTL\u6700\u4f73\u5316<\/h3>\n
\r\n# \u6a19\u6e96TTL\u8a2d\u5b9a\r\n$TTL 3600    ; \u9810\u8a2dTTL\u70ba1\u5c0f\u6642\r\n\r\n# \u8a08\u5283\u8b8a\u66f4\u6642\u7684\u4f4eTTL\r\nwww.example.com.    60    IN    A    203.0.113.10\r\n\r\n# \u7a69\u5b9a\u8a18\u9304\u7684\u9ad8TTL\r\nstatic.example.com.    86400    IN    A    203.0.113.20\r\n<\/code><\/pre>\n
\u5c0d\u65bc\u95dc\u9375\u57fa\u790e\u8a2d\u65bd\u8b8a\u66f4\uff0c\u5be6\u65bdTTL\u8abf\u6574\u653f\u7b56\uff1a<\/p>\n
1. \u5728\u8a08\u5283\u8b8a\u66f4\u524d24-48\u5c0f\u6642\u964d\u4f4eTTL\u503c
\n2. \u9032\u884c\u5fc5\u8981\u7684DNS\u66f4\u65b0
\n3. \u78ba\u8a8d\u7a69\u5b9a\u6027\u5f8c\u6062\u5fa9\u6a19\u6e96TTL\u503c<\/p>\n
\u5197\u9918\u898f\u5283<\/h3>\n
\u5be6\u65bd\u5197\u9918DNS\u914d\u7f6e\u4ee5\u78ba\u4fdd\u9ad8\u53ef\u7528\u6027\uff1a<\/p>\n
\r\n# \u5730\u7406DNS\u5206\u4f48\r\nexample.com.    IN    NS    ns1.us-east.example.net.    ; \u7f8e\u570b\u6771\u6d77\u5cb8\r\nexample.com.    IN    NS    ns1.us-west.example.net.    ; \u7f8e\u570b\u897f\u6d77\u5cb8\r\nexample.com.    IN    NS    ns1.eu-central.example.net. ; \u6b50\u6d32\r\n<\/code><\/pre>\n
\u6545\u969c\u6392\u9664\u548c\u9a57\u8b49<\/strong><\/h2>\n
\u6709\u6548\u7684DNS\u6545\u969c\u6392\u9664\u9700\u8981\u7406\u89e3\u5de5\u5177\u548c\u65b9\u6cd5\u3002\u4ee5\u4e0b\u662fDNS\u9a57\u8b49\u7684\u5be6\u7528\u65b9\u6cd5\uff1a<\/p>\n
\u547d\u4ee4\u5217DNS\u67e5\u8a62<\/h3>\n
\u4f7f\u7528\u9019\u4e9b\u547d\u4ee4\u9a57\u8b49\u60a8\u7684DNS\u914d\u7f6e\uff1a<\/p>\n
\r\n# \u9a57\u8b49A\u8a18\u9304\r\ndig +short A example.com\r\n\r\n# \u6aa2\u67e5DNSSEC\r\ndig +dnssec example.com DNSKEY\r\n\r\n# \u5b8c\u6574DNS\u89e3\u6790\u8def\u5f91\r\ndig +trace example.com\r\n\r\n# \u53cd\u5411DNS\u67e5\u8a62\r\ndig -x 203.0.113.10\r\n<\/code><\/pre>\n
DNS\u50b3\u64ad\u6e2c\u8a66<\/h3>\n
\u4f7f\u7528\u591a\u500bDNS\u89e3\u6790\u5668\u76e3\u63a7\u4e0d\u540c\u5730\u7406\u4f4d\u7f6e\u7684DNS\u50b3\u64ad\uff1a<\/p>\n
\r\n# \u91dd\u5c0dGoogle DNS\u6e2c\u8a66\r\ndig @8.8.8.8 example.com\r\n\r\n# \u91dd\u5c0dCloudflare DNS\u6e2c\u8a66\r\ndig @1.1.1.1 example.com\r\n\r\n# \u91dd\u5c0d\u672c\u5730ISP\u6e2c\u8a66\r\ndig @local.isp.resolver example.com\r\n<\/code><\/pre>\n
DNS\u914d\u7f6e\u7684\u672a\u4f86\u5c55\u671b<\/strong><\/h2>\n
\u7dad\u8b77\u5f37\u5927\u7684DNS\u57fa\u790e\u8a2d\u65bd\u9700\u8981\u8207\u65b0\u8208\u6a19\u6e96\u548c\u5b89\u5168\u5be6\u52d9\u4fdd\u6301\u540c\u6b65\u3002\u8003\u616e\u5be6\u65bd\uff1a<\/p>\n
\n
DANE\uff08\u57fa\u65bcDNS\u7684\u547d\u540d\u5be6\u9ad4\u8a8d\u8b49\uff09\u4ee5\u589e\u5f37\u5b89\u5168\u6027<\/li>\n
DoT\uff08DNS over TLS\uff09\u548cDoH\uff08DNS over HTTPS\uff09\u652f\u63f4<\/li>\n
\u64f4\u5c55DNS\u76e3\u63a7\u548c\u5206\u6790<\/li>\n
\u901a\u904eAPI\u5be6\u73feDNS\u81ea\u52d5\u5316\u7ba1\u7406<\/li>\n<\/ul>\n
\u7d50\u8ad6<\/strong><\/h2>\n
\u638c\u63e1DNS\u8a18\u9304\u985e\u578b\u5c0d\u65bc\u6709\u6548\u7ba1\u7406\u7f8e\u570b\u4f3a\u670d\u5668\u79df\u7528\u57fa\u790e\u8a2d\u65bd\u81f3\u95dc\u91cd\u8981\u3002\u5f9e\u57fa\u672c\u7684A\u8a18\u9304\u5230\u9032\u968e\u5b89\u5168\u914d\u7f6e\uff0c\u9069\u7576\u7684DNS\u7ba1\u7406\u78ba\u4fdd\u53ef\u9760\u7684\u670d\u52d9\u4ea4\u4ed8\u548c\u5f37\u5927\u7684\u5b89\u5168\u6027\u3002\u5728\u4fdd\u6301\u5411\u5f8c\u76f8\u5bb9\u6027\u7684\u540c\u6642\uff0c\u4f7f\u60a8\u7684DNS\u914d\u7f6e\u8207\u65b0\u8208\u6a19\u6e96\u4fdd\u6301\u540c\u6b65\uff0c\u4ee5\u7372\u5f97\u6700\u4f73\u6548\u80fd\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5c0d\u65bc\u4efb\u4f55\u7ba1\u7406\u7f8e\u570bDNS\u4f3a\u670d\u5668\u4e0a\u7684\u7db2\u8def\u57fa\u790e\u8a2d\u65bd\u7684\u4eba\u4f86\u8aaa\uff0c\u7406\u89e3DNS\u8a18\u9304\u985e\u578b\u81f3\u95dc\u91cd\u8981\u3002\u7121\u8ad6\u60a8\u662f\u5728\u914d\u7f6e\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883 […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":20240,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4815],"tags":[5172,5173,5174,3570,1892],"class_list":["post-20251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-america-dedicated-server-tc","tag-us-dns-servers-tc","tag-dns-management-tc","tag-dns-records-tc","tag-dns-configuration-tc","tag-server-hosting-tc"],"acf":[],"yoast_head":"\n