DNSとインフラ

DNS解決、レコードの種類、ネームサーバー、ドメイン名検索を支えるプロトコルについて説明します。

DNS(ドメインネームシステム)

Hierarchical naming system that translates domain names into IP addresses.

ネームサーバー

Server that stores DNS records and responds to DNS queries for a domain zone.

Aレコード

DNS record mapping a domain name to an IPv4 address.

AAAAレコード

DNS record mapping a domain name to an IPv6 address.

CNAMEレコード

DNS record that creates an alias from one domain name to another canonical name.

MXレコード

DNS record specifying the mail server responsible for receiving email for a domain.

TXTレコード

DNS record holding arbitrary text data, commonly used for email authentication and domain verification.

NSレコード

DNS record that delegates a DNS zone to an authoritative nameserver.

DNSリゾルバー

Software or service that performs recursive DNS lookups on behalf of clients.

DNSキャッシュ(TTL)

Temporary storage of DNS query results with a Time-To-Live expiration.

権威DNSサーバー

Server that holds the original DNS records for a zone and provides definitive answers.

DNSゾーンファイル

Text file describing a DNS zone with records for all domains in that zone.

SOAレコード

Start of Authority record containing administrative information about a DNS zone.

サブドメイン

Domain that is part of a larger domain, created by prepending a label (e.g., blog.example.com).

IPアドレス

Numerical label (IPv4 or IPv6) assigned to each device connected to a computer network.

再帰DNSリゾルバ

Server that performs the full DNS resolution chain on behalf of clients and caches results.

DNSルートサーバー

Top-level nameservers that direct resolvers to the correct TLD nameservers.

DNSゾーン

Administrative partition of the DNS namespace managed by a single authoritative authority.

PTRレコード(逆引きDNS)

DNS record that maps an IP address back to a hostname for reverse DNS lookups.

DNSデリゲーション

Transfer of DNS authority for a child zone to designated nameservers via NS records.

DNSラウンドロビン

Load-balancing technique using multiple IP addresses on a single hostname to distribute traffic.

DNSシンクホール

DNS configuration that redirects malicious domains to a controlled IP to block or analyze threats.

EDNS(DNSの拡張メカニズム)

RFC 6891 extension to the DNS protocol enabling larger messages, DNSSEC, and new option codes.

DNS増幅攻撃

DDoS technique exploiting open DNS resolvers to flood a victim with amplified response traffic.

ネガティブキャッシュ(NXDOMAIN)

Caching of NXDOMAIN and NODATA DNS responses to prevent repeated queries for non-existent names.