domain-name-system – 在DNS中,IN NS可以指向CNAME吗?

前端之家收集整理的这篇文章主要介绍了domain-name-system – 在DNS中,IN NS可以指向CNAME吗?前端之家小编觉得挺不错的,现在分享给大家,也给大家做个参考。
是否允许NS记录为CNAME?例如.:
subdomain.example.com.       IN NS  ns1.example.com.
ns1.example.com.             CNAME  foo.example.com.
foo.example.com.             IN A   10.1.1.1

这似乎不适用于绑定虽然这(当然)这样做:

subdomain.example.com.       IN NS  foo.example.com.
foo.example.com.             IN A   10.1.1.1

任何指向RFC的指针都会受到欢迎.

解决方法

定义NS RR( RFC1035)的实际RFC只是说它是一个域名而没有指定目标的RR类型(尽管它确实表明它不能是IP).它确实在 RFC1912中得到了具体提及,但第2.4节:

Having NS records pointing to a CNAME is bad and may conflict badly
with current BIND servers. In fact,current BIND implementations
will ignore such records,possibly leading to a lame delegation.
There is a certain amount of security checking done in BIND to
prevent spoofing DNS NS records. Also,older BIND servers reportedly
will get caught in an infinite query loop trying to figure out the
address for the aliased nameserver,causing a continuous stream of
DNS requests to be sent.

不一定不是,但它肯定适合你所看到的行为

猜你在找的HTML相关文章