Kunyaka ophelileyo besithethile apha kwibhlog malunga nePowerDNS eyimithombo evulekileyo yomncedisi we-DNS kwaye lolukhetho olufanelekileyo lokuthathela ingqalelo ukusukela oko ngumncedisi we-DNS onesiseko sedatha (ngaphakathi ixhasa iintlobo ngeentlobo zolwazi, kubandakanya i-MySQL, i-PostgreSQL, i-SQLite3, i-Oracle kunye ne-Microsoft SQL Server, kunye ne-LDAP) kunye neefayile zombhalo ocacileyo kwifomathi ye-BIND, njenge-backend ukwenza kube lula ukulawula inani elikhulu lokungena kwe-DNS.
Ngoku ngeli xesha siza kwabelana ngeendaba zeprojekthi ephuhliswe kwisiseko esinye kwaye kutshanje sifumene ingxelo entsha ethi "Isikhombisi sePowerDNS".
Malunga noMbuyeleli wePowerDNS
Le inoxanduva lokuguqula amagama kwakhona y isekwe kwisiseko esinye se khowudi loo seva IPowerDNS, Kodwa ngomahluko ophuhlisiweyo njengenxalenye yemijikelo yophuhliso eyahlukeneyo kwaye ikhutshwa njengeemveliso ezahlukeneyo.
Isikhombisi sePowerDNS (pdns_recursor) sisisombululo seDNS, esithi isebenza njengenkqubo eyahlukileyo.
Eli candelo lePowerDNS litshatile, kodwa kubhaliwe kwathiwa kunemisonto emininzi, ngokusebenzisa i-Boost kunye nethala leencwadi leMTasker, elithala leencwadi elinentsebenziswano kwimisebenzi emininzi. Ikwafumaneka njengephakheji ezimeleyo.
Umncedisi ibonelela ngezixhobo zokuqokelela amanani, Ixhasa ukuqala kwakhona kwangoko, ine-injini eyakhelwe-ngaphakathi yokuqhagamshela abaqhubi beelwimi zeLua, ixhasa ngokupheleleyo i-DNSSEC, i-DNS64, i-RPZ (iMimandla yoMgaqo-nkqubo weMpendulo), ikuvumela ukuba uqhagamshele kuluhlu lwabamnyama.
ngaphandle koko ikuvumela ukuba urekhode iziphumo zesisombululo ngohlobo lweefayile zommandla we-BIND. Ukuqinisekisa ukusebenza okuphezulu, iindlela zonxibelelaniso zale mihla zisetyenziswa kwiFreeBSD, iLinux, kunye neSolaris (ikqueue, i-epoll, / i-dev / i-poll), kunye neperser ephezulu yokusebenza kweepakethi ze-DNS ezinokuphatha amashumi amawaka ezicelo ezifanayo .
Ukuba ufuna ukwazi ngakumbi ngayo, unokujonga iimpawu zayo kule khonkco.
Yintoni entsha kwi-PowerDNS Recursor 4.3
Kule nguqulo intsha, abaphuhlisi basebenze ukuthintela ukuvuza kolwazi malunga nedomain eceliweyo kunye nokwandisa imfihlo, indlela yokunciphisa ye I-QNAME (RFC-7816), esebenza kwi «phumla«, Inikwe amandla ngokungagqibekanga.
Umongo Oomatshini Isolver ayilikhankanyi igama elipheleleyo lenginginya kwimibuzo yakho yeseva ephezulu.
Kwelinye icala amandla okungena kwizicelo eziphumayo aphunyezwa kwiseva egunyazisiweyo kunye neempendulo kubo kwifomathi ye-dnstap (Ukusetyenziswa, indibano ene- enable-dnstap ukhetho iyafuneka.
Ukuqhutywa ngaxeshanye kwezicelo ezininzi ezingenayo ezidluliselwe kunxibelelwano lweTCP kunikezelwa kwaye iziphumo zibuyiselwa kwakamsinya nje ukuba zilungile kwaye hayi ngokulandelelana kwezicelo emgceni. Umda wezicelo ezihambelanayo umiselwa yi «max-concurrent-application-per-tcp-uqhagamshelo«.
Inkqubo esandula ukuqatshelwa yokulandelwa kwesizinda sele yenziwe (NOD) oko inokusetyenziselwa ukuqaphela imimandla ekrokrisayo okanye imimandla enxulumene nemisebenzi enobungozi, enjengokusasazeka kwe-malware, ukuthatha inxaxheba kubuqhophololo, kunye nokusetyenziselwa ukulawula iibhotile.
Le ndlela isekwe ekuchongeni imimandla ezingafumanekiyo ngaphambili kwaye uhlalutye le mimandla mitsha. Endaweni yokukhasa imimandla emitsha ngokuchasene nayo yonke idathabheyisi yayo yonke imimandla ejongiweyo, efuna izixhobo ezibalulekileyo, I-NOD isebenzisa ulwakhiwo olunokwenzeka lwe-SBF (Icebo lokucoca ulwelo oluzinzileyo) ukunciphisa inkumbulo kunye nokusetyenziswa kweCPU. Ukuyenza, kufuneka ukhankanye «entsha-yokulandela umkhondo = ewe»Kwiseto.
ngaphandle koko xa kuqhutywa kwinkqubo, inkqubo Phinda Ubuyele ukusuka kwiPowerDNS ngoku isebenza njengomsebenzisi ongenanto pdns-ephindayo endaweni yengcambu. Kwiinkqubo ngaphandle kwenkqubo kunye nangaphandle kwe-chroot, isikhombisi esingagqibekanga / var / run / pdns-phinda-phinda Ngoku isetyenziselwa ukugcina isokhethi yolawulo kunye nefayile ye-pid.
Okokugqibela, kwabo banomdla wokuzama, banokujongana neenkcukacha zokufakwa kwayo kwi eli khonkco.