A shekarar da ta gabata munyi magana a nan akan blog game da PowerDNS wanda shine tushen tushen sabar DNS kuma wanda shine kyakkyawan zaɓi don la'akari tunda asali wannan uwar garken DNS ne tare da bayanai (a cikin abin da yake tallafawa ɗakunan bayanai da yawa, gami da MySQL, PostgreSQL, SQLite3, Oracle da Microsoft SQL Server, haka kuma a cikin LDAP) kuma a bayyane fayilolin rubutu a tsarin BIND, azaman baya sauƙaƙa don sarrafa adadi mai yawa na shigarwar DNS.
Yanzu wannan lokacin zamu raba labarin wani aikin da aka haɓaka daga tushe ɗaya kuma wanda kwanan nan ya karɓi sabon sigar wanda shine "PowerDNS Recursor".
Game da Maimaitawar PowerDNS
Wannan yana da alhakin sake fassarar sunaye y dogara ne a kan wannan tushen na lambar wannan sabar PowerDNS, amma tare da bambancin cewa an haɓaka su a matsayin ɓangare na hawan keke daban-daban kuma an sake su azaman samfura daban.
Mai karɓar PowerDNS (pdns_recursor) shine mai warware DNS, wanda yana gudana azaman tsari daban.
Wannan ɓangaren PowerDNS yana da zare ɗaya, amma an rubuta shi yana da zaren da yawa, ta amfani da Boost da MTasker laburare, wanda shine ɗakunan karatu mai haɗin gwiwa mai sauƙin aiki da yawa. Hakanan ana samunsa azaman keɓaɓɓen fakiti.
Sabar yana ba da kayan aiki don tarin ƙididdigar nesa, Yana goyan bayan sake yi nan take, yana da ginannen injin don haɗa direbobin yaren Lua, yana tallafawa DNSSEC, DNS64, RPZ (Yankunan Manufofin Yanayi), yana baka damar haɗa jerin sunayen baƙi.
Bayan haka ba ka damar yin rikodin sakamakon ƙuduri a cikin hanyar fayilolin ɗaure yankin. Don tabbatar da babban aiki, ana amfani da hanyoyin haɗa abubuwa da yawa na zamani a cikin FreeBSD, Linux, da Solaris (kqueue, epoll, / dev / poll), da kuma mai zurfin dubawa ga fakiti na DNS waɗanda zasu iya ɗaukar dubunnan buƙatun layi ɗaya.
Idan kana son karin bayani game da shi, zaka iya bincika halayen sa a cikin wannan haɗin.
Menene sabo a Maimaitawar PowerDNS 4.3
A cikin wannan sabon sigar, masu haɓakawa sunyi aiki don hana ɓarkewar bayanai game da yankin da aka nema da kuma kara sirri, tsarin rage girman na QNAMES (RFC-7816), wanda ke aiki a cikin «annashuwa«, An kunna ta tsohuwa.
Jigon na inji shine cewa mai warwarewa baya ambaci cikakken sunan mai masauki a cikin tambayoyin uwar garkenku na sama.
A gefe guda ikon aiwatar da buƙatun mai fita an aiwatar dashi a kan sabar da aka ba da izini da kuma martani a gare su a cikin tsarin dnstap (Don amfani, ana buƙatar taro tare da zaɓin -enable-dnstap.
Ana samar da aiki tare na buƙatu masu shigowa da yawa da aka watsa ta hanyar haɗin TCP kuma ana dawo da sakamakon da zaran sun shirya ba cikin tsari na buƙatun cikin layin ba. An ƙayyade iyakar buƙatun lokaci guda ta wurin «max-lokaci-lokaci-request-per-tcp-dangane".
An aiwatar da dabarar bin diddigin yanki kwanan nan (NOD) cewa za a iya amfani da su don gano m yankuna ko yankuna masu alaƙa da ayyukan ɓarnar, kamar yaduwar malware, sa hannu a cikin leƙen asirri, da kuma amfani da su don sarrafa botnets.
Hanyar ta dogara ne akan gano yankuna ba a sami damar yin hakan ba a baya kuma bincika waɗannan sababbin yankuna. Maimakon yin amfani da sababbin yankuna akan dukkanin bayanan duk yankuna da aka gani, wanda ke buƙatar manyan albarkatu, NOD yana amfani da tsarin yiwuwa SBF (Tace Bloom Tace) don rage girman ƙwaƙwalwar ajiya da amfani da CPU. Don ba ta damar, dole ne ka saka «sabon yanki-bin layi = ee»A cikin saitunan.
Bayan haka lokacin da kake aiki a cikin tsari, aiwatarwa Mai maimaitawa daga PowerDNS yanzu yana gudana azaman mai amfani mara gata pdns-maimaitawa maimakon tushe. Ga tsarin ba tare da tsari ba kuma ba tare da chroot ba, kundin adireshin tsoho / var / run / pdns-maimaitawa yanzu ana amfani dashi don adana soket na sarrafawa da fayil ɗin pid.
A ƙarshe, ga waɗanda ke da sha'awar gwada shi, za su iya tuntuɓar cikakkun bayanan yadda aka girke shi a ciki wannan mahadar