ç°¡åã«æ¸ãã MXã¬ã³ã¼ããDNSã¬ã³ã¼ããï¼èªï¼ã¨ã ã¨ãã¯ã¹ã¬ã³ã¼ããè±ï¼MX recordï¼ã¨ã¯ 権å¨DNSãµã¼ãããï¼èªåã®ç®¡çãã¦ããæ å ±ãæãã¦ãããã®ãä»äºã®DNSãµã¼ãï¼ããä»äºã§ä½¿ããã¿å¸³ï¼ã¾ã¼ã³ãã¡ã¤ã«ï¼ã®ä¸èº« ã§ãã ãã®ãã¡ã¤ã³å®ã®ã¡ã¼ã«ã®é éå ã¡ã¼ã«ãµã¼ãï¼ã¡ã¼ã«ã«é¢ããæ©è½ãæä¾ãã¦ãããã³ã³ãã¥ã¼ã¿ï¼ãæ¸ããã¦ããè¡ã®ã㨠ã§ãã æåã«çæäºé ã§ãã ãã®ãã¼ã¸ã®èª¬æ㯠ã»DNS ã»DNSãµã¼ã ã»æ¨©å¨DNSãµã¼ã ã»ã¾ã¼ã³ãã¡ã¤ã« ã®æå³ã¨é¢ä¿æ§ãç解ãã¦ããåæã§æ¸ãã¾ãã ç°¡åã«è£è¶³ã¯ãã¾ããã©ãã ã§ããã°ä¸è¨ã®ç¨èªã®æå³ãç解ãã¦ããç¶ããã覧ãã ããã ããã§ã¯é çªã«è¦ã¦ããã¾ãããã DNSãµã¼ãã«ã¯ ï¼ï¼ãã«ãµã¼ãã¹ãªã¾ã«ãï¼DNSãã£ãã·ã¥ãµã¼ãï¼ ï¼ï¼æ¨©å¨DNSãµã¼ãï¼DNSã³ã³ãã³ããµã¼ãï¼ ã®2種é¡ããã¾ãã ä¸è¬çã«ã¯ããã½ã³ã³ããã
ãã®è¨äºã¯ ã»DNS Advent Calendar 2015 - Qiitaã®11æ¥ç® ã»ConoHa Advent Calendar 2015 - Qiitaã®11æ¥ç® ã®è¨äºã§ãã ConoHa(æ§)ã®é ããã®ã¦ã¼ã¶ãªããã«ãã£ã¼ã¸ãä½ãã¾ãã£ã¦ããã®ã« ConoHa(ç¾)ã®ã¢ã«ã¦ã³ããä½ã£ã¦ã¿ã¾ãããããããå¤ãã£ã¦ãã ã¨ãããããã°ã¤ã³ãã¦ã¿ã¾ãã æ¸ æ¥ãããããã®ã¯ã¡ããã«å¾é ãªã®ã§ãè¨èªã¯ããã®ã¯ãã«ãã¦ä½¿ã£ã¦ãã¾ãã ãã£ããDNSè¨å®ãã¦ã¿ã¾ãããã å·¦å´ã®ãDNSãã¢ã¤ã³ã³ãã¯ãªãã¯ãã¾ãã ï¼ãã¡ã¤ã³ã¨ãããã¿ã³ãã¯ãªãã¯ãã¦ãã¡ã¤ã³ã追å ãã¾ãã ã¡ãªã¿ã«GeoDNSã¨ããã®ã¯ããããæ©è½ã®ããã§ãã ãªãã ãã ãã¶ãAWSããã¯ãªVPSãµã¼ãã¹ã«ãªã£ã¦ãã¾ãããã ã¡ãªã¿ã«AWSã®Route53ã¯å½ç¶ãªããææãµã¼ãã¹ãªã®ã§ãã ãªãã¨ConoHaã®DNSãµã¼ã
å½ãµã¼ãã¹ã«ã¦è¨å®å¯è½ãªDNSã¬ã³ã¼ãã«ã¯ã以ä¸ã®ãããªãã®ãããã¾ãã Aã¬ã³ã¼ã å 容ã«ãIP ã¢ãã¬ã¹ããå ¥åãã¦ãã ããã AAAAã¬ã³ã¼ã å 容ã«ãIPv6 ã¢ãã¬ã¹ããå ¥åãã¦ãã ããã CNAMEã¬ã³ã¼ã å 容ã«ããã¹ãåããæå®ãã¦ãã ãããIP ã¢ãã¬ã¹ã¯ç»é²ã§ãã¾ããã ããã¹ãåãã¨åä¸åã®ã³ã³ãã³ããè¨å®ãããã¨ã¯ã§ãã¾ããã åä¸ããã¹ãåãã«CNAMEã¬ã³ã¼ãã¨Aã¬ã³ã¼ããAAAAã¬ã³ã¼ããMXã¬ã³ã¼ãã¯ä½µãã¦ç»é²ã§ãã¾ããã MXã¬ã³ã¼ã(åªå 度ããããã¦è¨å®) å 容ã«ããã¹ãåããæå®ãã¦ãã ãããIPã¢ãã¬ã¹ã¯ç»é²ã§ãã¾ããã åªå 度ã¯å¤ãå°ããã»ã©åªå é ä½ãé«ããªãã¾ãã ç»é²ããã¦ããMX ã¬ã³ã¼ãã¨ãåããã¹ãåã»åãåªå 度ãã®ã¬ã³ã¼ãã¯è¿½å ã§ãã¾ããã ã©ã¡ãããç°ãªãã°è¿½å ã§ãã¾ãã TXTã¬ã³ã¼ã TXTï¼Textï¼ã¬ã³ã¼ãã¯ããã¹ãã®æ å ±ãè¨
ãµã¼ã移転ã¨ãã¡ã¤ã³ç§»ç®¡ã«ã¤ãã¦ãä»å¾ã®ããã«ã¡ã¢ã£ã¦ããã¾ããã¤ãã§ã«WordPressã®è¨ç½®ã«ã¤ãã¦ãã¡ã¢ã DNSã¬ã³ã¼ãã£ã¦ãªãã ï¼ 2014å¹´2æ19æ¥ â æ´æ°ï¼2016å¹´7æ16æ¥ ãã¹ã¿ã¼ãã¡ã¤ã³ç®¡çã®ããããï¼ããã¼ã ãµã¼ãã®ç¢ºèªã»å¤æ´ãï¼ããæ軽è¨å®ãï¼ããããã¼ãããé¸ãã å ´åãDNSã¬ã³ã¼ãã¯èªåçã«è¨å®ãããã®ã§ãç¹ã«ä½ãããå¿ è¦ã¯ããã¾ããããã®ãã¼ã¸ã¯ãã¨ãããã調ã¹ããã¨ãã¡ã¢ã£ã¦ãããã¼ã¸ã§ãã ã§ãã®ã§ãããæ軽è¨å®ãï¼ããããã¼ãããé¸ãã å ´åã¯ã ããããã£é£ã°ãã¦ãã6.æ§ãµã¼ãã¹ã®è§£ç´ãã¸è¡ã£ã¦OKã§ãã ãDNSã¬ã³ã¼ããã¨ã¯ DNSï¼ãã¡ã¤ã³ãã¼ã ã·ã¹ãã ï¼ã¯ãããã¡ã¤ã³åï¼äººéç¨ï¼ãã¨ãIPã¢ãã¬ã¹ï¼ã³ã³ãã¥ã¼ã¿ç¨ï¼ããã»ããã«ããï¼ã³ã³ãã¥ã¼ã¿ã«åãã ã¨èªèãã¦ãããï¼ä»çµã¿ã§ãã 詳ããã¯ã4.ã¾ããã¡ã¤ã³ç§»ç®¡âããã ã£ãã®ãï¼ ãã¡ã¤ã³
VALUE DOMAIN ã®DNSè¨å®ã§ããµããã¡ã¤ã³ãå¥ãµã¼ãã¼ã«è¨å®ããæ¹æ³ã®è¦æ¸ã§ãã ãµã¼ãã¼ã¯ãCORESERVERãå©ç¨ãã¦ãã¾ãããXREAã§ãããªã¥ã¼ãµã¼ãã¼ã§ãåæ§ã ã¨æãã¾ãã ãªãããç´æã§ãããä½æ¥ã¯èªå·±è²¬ä»»ã§ãé¡ããã¾ããDNSè¨å®ã¯ãããªã±ã¼ããªã®ã§ãããã¾ã§ãæ éã«ã ããã§ã¯ãæ¬é¡ã«ã ä»åãå®ç¾ããããã¨ã¯ãé常ãã¡ã¤ã³ã¨ãµããã¡ã¤ã³ãå¥ãµã¼ãã¼ã«æ¯ãåãã¦éç¨ãè¡ããã¨ã§ãã ãå ·ä½ä¾ã â ãé常ãã¡ã¤ã³ï¼ãexample.comãã»ã»ã»ãx111.coreserver.jp â ããµããã¡ã¤ã³ï¼ãblog.example.comãã»ã»ã»ãx222.coreserver.jp ãã®ããã«ããµããã¡ã¤ã³ãé常ãã¡ã¤ã³ã¨ã¯ç°ãªããµã¼ãã¼ã§éç¨ããããã®æ¹æ³ã§ãã ãã®ããã«ã¯ãVALUE DOMAINã®ãDNSæ å ±å¤æ´ããã¼ã¸ã«ã¦è¨å®ãè¡ãã¾ãããªããä»åã¯ã
ç§ãä¿æãã¦ãã unifas.net ã®ãã¡ããµããã¡ã¤ã³ã® pct.unifas.net ã®ã¿ãå¥ãµã¼ãã¼ã§éç¨ããå¿ è¦ãåºã¦ãã¾ããã éç¨ç°å¢ã¯ãã ã¼ã ã¼ãã¡ã¤ã³ ã§ç¬èªãã¡ã¤ã³ã管çãã使ç¨ãµã¼ãã¼ã¯ã¨ãã¯ã¹ãµã¼ãã¼ ã¨ããç¶æ ã§ãã ãããä¸ã§æ å ±åéãããã®ã§ããããã ã¼ã ã¼DNSã®ã«ã¹ã¿ã è¨å®ã使ç¨ãã¦ä¸ãããã¨ãããã®ã°ããã§ãããå®ã¯ãã® unifas.net ã«ã¯ã10æ°å以ä¸ã®ãµããã¡ã¤ã³ãæ¢ã«è¨å®ããéå¶ãã¦ãã¾ããã¡ã¼ã«ã¢ãã¬ã¹ãæ°åç»é²ãã¦ãã¾ããä»æ´ããã ã¼ã ã¼DNSã®ã«ã¹ã¿ã è¨å®ãã¨è¨ããã¦ãã以ä¸ã®ãããªã¬ã³ã¼ãè¨å®ãããªããã°ãªãããä¸ã¤ã§ãééããããµã¤ãã表示ãããªããªã£ãããã¡ã¼ã«ãå±ããªããªãå±éºããããåãæ¿ãã¯ç¡çã§ããã ããã§è¾¿ãçããã®ã以ä¸ã«è¨è¼ããæ¹æ³ã§ãããã ããå¥ãµã¼ãã¼ã¨ãã¦è¨å®åºæ¥ããµã¼ãã¼ã¯ãç§ã確èªããéãããããã®ã¬
ããªãã ãã¤ãã¿ã¼ã§ãç¹å®ã®ãµããã¡ã¤ã³ã ããããµã¼ãã¼ã§éç¨ãããã®ã«ããããµã¼ãã¼ã¯ãµããã¡ã¤ã³ã ããæå®ã§ããªãããå ¬éã§ããªããã¨ããå 容ã®ãã¤ã¼ããè¦ããã¾ãã¦ãããæ ¹æ¬çãªééãããã¦ãããããªããããï¼ãªã©ã¨æã£ããã§ãããå¤åå ¬éã§ããã¨æãã¾ãã èããããæ¹æ³ã¯ï¼éãããã¾ãã ãµããã¡ã¤ã³ãªãã®ã¡ã¤ã³ãã¡ã¤ã³ãã¨ç»é²ãã¦è¨å®ãã ç¹å®ã®ãµããã¡ã¤ã³ãã¡ã¤ã³ãã¡ã¤ã³ã¨ãã¦ç»é²ãè¨å®ãã ãµããã¡ã¤ã³ãªãã®ã¡ã¤ã³ãã¡ã¤ã³ãã¨ç»é²ãã¦è¨å®ãã ç¶æ³ã¨ãã¦æ¬¡ã®å ´åãæ³å®ãã¾ãã ãã¡ã¤ã³ç®¡çã¯æ ªå¼ä¼ç¤¾Aãã¡ã¤ã³ ãµããã¡ã¤ã³ãªãã® example.com ã¯ã¬ã³ã¿ã«ãµã¼ãã¼B ãµããã¡ã¤ã³ããã® hoge.example.com ã¯ã¬ã³ã¿ã«ãµã¼ãã¼C æ ªå¼ä¼ç¤¾Aãã¡ã¤ã³ã®DNSï¼ãã¼ã ãµã¼ãã¼ï¼ã§ example.com ã®è¨å®ãæ£ããåºæ¥ã¦ããå ´åããã©ã¦ã¶ã« http:/
(2011-11-07 06:22:59) ãµã¼ããµã¼ãã¹ã¯ã¯ã³ã»ãããä¾¿å© é常ãããã¤ãã®ãã¹ãã£ã³ã°ã¯Webãµã¼ããMailãµã¼ããFtpãµã¼ããªã©ã¤ã³ã¿ã¼ãããã®ãµã¼ããµã¼ãã¹ã«å¿ è¦ãªãµã¼ãã¹ã¯ã¯ã³ã»ããã§ä»ãã¦ãããã¯ã³ã»ããã«ãªã£ã¦ããæ¹ã便å©ã ãããããã®ãµã¼ããµã¼ãã¹ãåããçç±ããªãã 大è¦æ¨¡ãµã¤ããªãè² è·åæ£ã®ãã㫠大è¦æ¨¡ãªãµã¤ãã§ã¯ã¢ã¯ã»ã¹æ°ãå¤ããã¦è² è·åæ£ã®ããã«Webãµã¼ãã¨Mailãµã¼ããåãããããããããWebãµã¼ããå¤éåãã¦ã©ã¦ã³ãããã³ã§åãããã§ã å®ä¾¡ãªãã¹ãã£ã³ã°ãµã¼ãã¹ãã³ãã¼ãªãã1ã¤ã®ç©çPCã§æ°åãã¡ã¤ã³ãã100ãã¡ã¤ã³ãã©ããããã¨200ãã¡ã¤ã³ã300ãã¡ã¤ã³ããã¹ãã£ã³ã°ãã¦ããã¨ãããããã§ãã¢ã¯ã»ã¹ã®ã¬ã¹ãã³ã¹ã¿ã¤ã ã¯ã ãããåé¡ãªãã Webã¨Mailãå¥ãµã¼ãåããã¦ã³å¯¾çã«æå©ãã Webãµã¼ãã¨Mailãµã¼ããåã
åªè¯ä¸å¤ãã¡ã¤ã³ åªè¯ä¸å¤ãã¡ã¤ã³ã®ãªã¼ã¯ã·ã§ã³/äºç´ãµã¼ãã¹ é客å¹çåä¸ãè¦è¾¼ããä¸å¤ãã¡ã¤ã³ããæ¤ç´¢ã¨ã³ã¸ã³è©ä¾¡ãããæååã®åããããããã«åªãããã¡ã¤ã³ãè¦ã¤ããã¾ãã
ãã®ã¨ãããWebãµã¼ãã§âwwwâã®ä»ããªããµã¤ããå¢ãã¦ãã¾ãããããã¨åããã¨ãããã«ã¯ã©ã®ããã«ãããããã®ã§ãããããã¾ããâwwwâãä»ãã¦ãä»ããªãã¦ãåããµã¼ãã«ã¢ã¯ã»ã¹ã§ããããã«ããããã®æ¹æ³ãè¨å®ä¾ãç¨ãã¦èª¬æãã¾ãã ã¾ããâwwwâã®ä»ããã«ãåå¾ãããã¡ã¤ã³åã§Webãµã¼ããéç¨ããæ¹æ³ã§ãããDNSã§ã¯ãã¹ã¦ã®ååã«IPã¢ãã¬ã¹ï¼Aã¬ã³ã¼ããAAAAã¬ã³ã¼ãï¼ãè¨å®ãããã¨ãã§ãã¾ãã®ã§ããã®æ¹æ³ã使ç¨ãããã¨ã§å®ç¾ã§ãã¾ããã¾ããå¾è ã«ã¤ãã¦ã¯ããã¡ã¤ã³åã«è¨å®ããIPã¢ãã¬ã¹ã¨ãã¡ã¤ã³åã«wwwãä»ãããã¹ãåã®ä¸¡æ¹ã«åãIPã¢ãã¬ã¹ãè¨å®ãããã¨ã§å®ç¾ã§ãã¾ãã ãã¡ã¤ã³åã«IPã¢ãã¬ã¹ãè¨å®ããå ´åããwwwãä»ããã¹ãåã«IPã¢ãã¬ã¹ãè¨å®ããå ´åããå§ä»»ãåãã¾ã¼ã³ã管çãããã¼ã ãµã¼ãï¼ã³ã³ãã³ããµã¼ãï¼ã§è¨å®ããå¿ è¦ãããã¾ãã $ORIGIN
ã¯ããã« å æ¥åãã¦ããã°ãã¤ã³ã¿ã¼ãããä¸ã«å ¬éãã¾ããã ãã®éãURLã«ãã¡ã¤ã³ããWebãã¼ã¸ãè¦ããããã«ããã®ã«è¦å´ããã®ã§ãè©°ã¾ã£ãç¹ãä¸å¿ã«æ¸ãã¦ããã¾ãã ãåå.com ã§å¥½ããªãã¡ã¤ã³ãåã£ã¦ãã ããã ç»é¢ã«å¾ãã°ã§ããã¯ã ConoHaã§ãµã¼ããåãã ConoHaã®ãµã¤ããã好ããªãµã¼ãããã¬ã³ã¿ã«ãã¦ãWordPressä»ã®Linuxãã¤ã³ã¹ãã¼ã«ããã ããã ããã¦ãhttpã®éä¿¡ã許å¯ãã¦ããã¦ãã ãã ããã¾ã§ã¯åé¡ãªãã¨æãã¾ãã ã°ãã¼ãã«IPãå©ç¨ãã¦ãµã¼ãã«æ¥ç¶ã§ãããã¨ã¯ç¢ºèªãã¦ããã¦ãã ããã ConoHaã³ã³ããã¼ã«ããã«ã®è¨å® 1ï¼ãµã¼ãâãã¼ã ã¿ã°ãã¯ãªãã¯ãã ãããã¯ã¼ã¯æ å ±ã§IPã¢ãã¬ã¹ã確èªãã¦ããã¾ãã 2ï¼DNSã«ãåå.comã§åå¾ãããã¡ã¤ã³ã追å ããå ã»ã©ã®IPã¢ãã¬ã¹ãã¿ã¤ãAã§è¨å®ãã¾ãã NSã®å¤ã¯å¾ã§ä½¿ãã®ã§æ§
1. ã¯ããã« wwwãªãã®ãã¡ã¤ã³ï¼ããããããã¤ããããã¡ã¤ã³ãï¼ãæ£è¦ã®URLã¨ãã¦ãwwwããã®ãã¡ã¤ã³ã¸ã®ã¢ã¯ã»ã¹ã wwwãªãã®ãã¡ã¤ã³ã« 301ãªãã¤ã¬ã¯ã転éãããã£ãã®ã§ãããæ¹ã調ã¹ã¦ã¿ã¾ããã ããããä½æ ã301ãªãã¤ã¬ã¯ãã§æ£è¦ã® URLã«è»¢éããªããã°ãªããªããã«ã¤ãã¦ã¯ã以ä¸ã® Google ã®ãã«ãã«è©³ããæ¸ããã¦ãã¾ãã è¦ããã«ãæ¤ç´¢ã¨ã³ã¸ã³ã wwwãªãã®ãã¡ã¤ã³ã¨ wwwããã®ãã¡ã¤ã³ã®ä¸¡æ¹ã®ã³ã³ãã³ããéè¤ãã¦ã¤ã³ããã¯ã¹ãã¦ãã¾ãï¼å¥ã ã®ã³ã³ãã³ãã¨è¦ãªããã¦ãã¾ãï¼ã®ã§ãã©ã¡ãããããä¸æ¹ã¸ãªãã¤ã¬ã¯ããããã¨ã§åé¿ãã¾ããããã¨ãããã¨ã§ããã ä»å㯠Googleãã«ãã«æ¸ããã¦ããæ½çã®ä¸ã§ã æ£è¦ä»¥å¤ã® URL ã«ã¯ 301 ãªãã¤ã¬ã¯ãã使ç¨ãã 次ã®ããã«ãåããã¼ã¸ã«è¤æ°ã®æ¹æ³ã§ã¢ã¯ã»ã¹ã§ããããã«ãªã£ã¦ããå ´åã¯ã https:
--------------------------------------------------------------------- â æè¡è§£èª¬ï¼ãDNS Reflector Attacksï¼DNSãªãã¬ã¯ã¿ã¼æ»æï¼ãã«ã¤ãã¦ æ ªå¼ä¼ç¤¾æ¥æ¬ã¬ã¸ã¹ããªãµã¼ãã¹ï¼JPRSï¼ åçä½æ 2013/04/18ï¼Thuï¼ --------------------------------------------------------------------- â¼ã¯ããã« 2013å¹´3æ16æ¥ï¼åå®ä¸çæï¼[CISCO2013]ãã3æä¸æ¬ã«ãããè¿·æã¡ã¼ã« 対çã®æ´»åãé²ãã¦ããå½éçµç¹The Spamhaus Projectã«å¯¾ããæ»æã«ç«¯ã çºããã大è¦æ¨¡ãã¤é·æéã«ãããåæ£ãµã¼ãã¹ä¸è½ï¼DDoSï¼æ»æãçºçã ã¾ããã ä»åã®æ»æã§ã¯ããã¾ã§ã§æ大è¦æ¨¡ã¨ãªã300Gbps以ä¸ã®ãã©ãã£
ä»å¹´ï¼2013å¹´ï¼ã®3æã«ãã¹ãã 対ççµç¹ã®Spamhaus Projectãããã³åçµç¹ãæ¯æ´ããç±³Cloudflare社ã®2ã¤ãæ»æç®æ¨ã¨ãã大è¦æ¨¡ãªDDoSæ»æãçºçãããä»åãæ±äº¬ç§èåã§éå¬ããããInternet Week 2013ãã®ããã°ã©ã ãDNS DAYãã«ããã¦ãã®å¯¾çã«ã¤ãã¦ã®å ±åããã£ããã¨ãããããã«ä»åã®DDoSæ»æææ³ã¨ãã®å¯¾çã«ã¤ãã¦ããããã¦è§£èª¬ããã ããã¼ã¯ãã©ãã£ãã¯300Gbpsè¶ ãã®å¤§è¦æ¨¡DDoSæ»æ ãDDoSãã¨ã¯Distributed Denial of Serviceã®ç¥ã§ãå¤ãã®å ´æï¼æ©å¨ï¼ããç¸æã®ãµã¼ãã¼ããããã¯ã¼ã¯ã«é大ãªè² è·ãããããµã¼ãã¹ä¸è½ã®ç¶æ ã«è¿½ãè¾¼ãæ»æææ³ã ãDDoSæ»æã¯ããã¾ã§ã«ã幾度ã¨ãªãè¡ããã¦ãããããã®è¦æ¨¡ï¼ãã©ãã£ãã¯éï¼ã¯å¤§ããã¦ãæ°ç¾Mbpsããæ°åGbpsç¨åº¦ã«ã¨ã©ã¾ã£ã¦ããã100Gbpsã
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}