DNS解析过程追踪

国内网络确实很奇葩,运营商XX!!

追踪一下某个域名的解析过程

nslookup

iamcxl@iamcxl-ThinkPad-Txxx:~$ nslookup www.jd.com
Server:     127.0.1.1
Address:    127.0.1.1#53

Non-authoritative answer:
www.jd.com  canonical name = www.jdcdn.com.
Name:   www.jdcdn.com
Address: 182.131.4.1

• 1. Address: 怎么会是127.0.1.1??
• 1. canonical name这个别名哪里来的?

dig跟踪一下DNS解析过程

iamcxl@iamcxl-ThinkPad-Txxx:~$ dig +trace www.jd.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> +trace www.jd.com
;; global options: +cmd
;; Received 17 bytes from 127.0.1.1#53(127.0.1.1) in 6 ms

iamcxl@iamcxl-ThinkPad-Txxx:~$

怎么没有从根域开始追踪???*
因为用的局域网的WiFi.

把Ubuntu的网络连接到手机分享的WiFi上试试

再dig一次!!

iamcxl@iamcxl-ThinkPad-Txxx:~$ dig +trace www.jd.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> +trace www.jd.com
;; global options: +cmd
.           50482   IN  NS  a.root-servers.net.
.           50482   IN  NS  c.root-servers.net.
.           50482   IN  NS  j.root-servers.net.
.           50482   IN  NS  l.root-servers.net.
.           50482   IN  NS  d.root-servers.net.
.           50482   IN  NS  f.root-servers.net.
.           50482   IN  NS  i.root-servers.net.
.           50482   IN  NS  b.root-servers.net.
.           50482   IN  NS  k.root-servers.net.
.           50482   IN  NS  e.root-servers.net.
.           50482   IN  NS  g.root-servers.net.
.           50482   IN  NS  m.root-servers.net.
.           50482   IN  NS  h.root-servers.net.
.           50482   IN  RRSIG   NS 8 0 518400 20170312170000 20170227160000 61045 . iqk4z3W6lGfSgvbPGl4JPVDca+21mXayctqY0FO1a9YhCSxLQGsV/0eK IfYOGHMCBr2szIactoznQgFybjNG/I5bKo+EU4U0tNNVwrUHWTMsAraQ yIS/efPZyKAHSzKZjlcRVOFbFPA/DWp6JzMhfXaBYMLcsA8ZT/CwCnxF a7wInMupWskMwXXhTgGci+PJVKm+TK5hEtYYnb3Ny2lxoWtTPJuZufM9 1xg2YXs6njo1gKzj3zaTwpndeBbYN78ZfETmPsjyr7X144v9qe7qygCO dTjy+cly1JG1prI9yHaU5zJk3X9VcvWWRR3ACQOFfzthFqyEoHjQmEBe XQHCRg==
;; Received 525 bytes from 127.0.1.1#53(127.0.1.1) in 118 ms

com.            172800  IN  NS  k.gtld-servers.net.
com.            172800  IN  NS  l.gtld-servers.net.
com.            172800  IN  NS  h.gtld-servers.net.
com.            172800  IN  NS  g.gtld-servers.net.
com.            172800  IN  NS  j.gtld-servers.net.
com.            172800  IN  NS  e.gtld-servers.net.
com.            172800  IN  NS  b.gtld-servers.net.
com.            172800  IN  NS  c.gtld-servers.net.
com.            172800  IN  NS  i.gtld-servers.net.
com.            172800  IN  NS  a.gtld-servers.net.
com.            172800  IN  NS  m.gtld-servers.net.
com.            172800  IN  NS  d.gtld-servers.net.
com.            172800  IN  NS  f.gtld-servers.net.
com.            86400   IN  DS  30909 8 2 E2D3C916F6DEEAC73294E8268FB5885044A833FC5459588F4A9184CF C41A5766
com.            86400   IN  RRSIG   DS 8 1 86400 20170312170000 20170227160000 61045 . KrUOs54J4QNuyF+pRk28+fpLepU/xLxbId4iXg4C3/inC4XfgExTlCZP oefCEgaNkXfcBIVEiBQhtfFgD87Iu1o4kx2h7747YhFfaDRC5WgZsThs N6THA3510Fh0CWQM9DtGL2/wnuUxUaaMFOpAFhOjR+ZPqqekO2B+t+NZ 2zY4Ug96gYkYyuF+jWw8b25owxPobLG0pWGQsx7kZAt/acCI7PjI1cBZ QrRZXWX89UjDXp/AdJTT5Xess9Tq0twpoxExFw02IyZqWOaz08dsbttD ClwRI/ZW/5ZqyBCu5hKinOn0WdOwdsCZtFqmnZqSnqax2amOa7/4NDGf p/qF+A==
;; Received 862 bytes from 192.33.4.12#53(c.root-servers.net) in 3651 ms

jd.com.         172800  IN  NS  ns1.jdcache.com.
jd.com.         172800  IN  NS  ns2.jdcache.com.
jd.com.         172800  IN  NS  ns3.jdcache.com.
jd.com.         172800  IN  NS  ns4.jdcache.com.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400 20170306054755 20170227043755 31697 com. HR4ZLV6E0lsGvYO24zq7qQvQT3rZAQBs45E3DLsFOdNrSlBR7Cmb3u0o fGXPVUratFwQPLN8Cqr+kFg1+n3k09NCL88tsd6MIMFkjkOH2gP5rKWI qFvNXQ18snt5rXHWhlCsdIbhxa4Leu7jqSrPF6SiOlgQM8/+L6RZv7WZ RKc=
VCN4UQA8GANKH88T0N6V7U63DP247R1N.com. 86400 IN NSEC3 1 1 0 - VCN77CSSQ0F81UJ2JQ85RQR2AF15I71Q NS DS RRSIG
VCN4UQA8GANKH88T0N6V7U63DP247R1N.com. 86400 IN RRSIG NSEC3 8 2 86400 20170304054400 20170225043400 31697 com. BgbrLjR7pCb9vW7C9BiRIAFbpFA1F1gPGL/l1VknSrhiKBJmNp+GSZdZ wqh+AntuHj1iMo20jBxXas3lMLos8GHca7A0hSsZ0/gGE/RJkfQKD0mn 1p1zfclgKFJCIhi1/SvfPBvkOrFF/4t6wL6pkfsC6JybE4KtxY07+x08 OYI=
;; Received 668 bytes from 192.55.83.30#53(m.gtld-servers.net) in 323 ms

www.jd.com.     120 IN  CNAME   www.jdcdn.com.
www.jdcdn.com.      60  IN  A   182.131.4.1
jdcdn.com.      720 IN  NS  ns2.jd.com.
jdcdn.com.      720 IN  NS  ns1.jd.com.
jdcdn.com.      720 IN  NS  ns3.jd.com.
jdcdn.com.      720 IN  NS  ns4.jd.com.
;; Received 215 bytes from 120.52.149.254#53(ns3.jdcache.com) in 156 ms

上面就是一个常规的DNS解析过程了.

---

DNS Server的地址为什么是127.0.1.1?

Ubuntu本地有一个DNS服务被network manager托管.

iamcxl@iamcxl-ThinkPad-Txxx:~$ ps -ef |grep dnsmasq

dig后SOA RRSIG DNSKEY NSEC3PARAM 相关内容的解释:

https://www.internet2.edu/presentations/jt2012summer/20120715-Sinatra-Combined_DNS-DNSSEC_tutorial.pdf
https://www.huque.com/talks/2013-11-dnssec-tutorial-huque.pdf