NS 记录更改 4 天后，任未生效， dig +trace 可查询到更改后的值,这是缓存的问题么

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

DNS 参考资料

› List of DNS Record Types

› dig 使用说明

› djbdns

› DNS Parameters

› dnslib for Python

这是一个创建于 2626 天前的主题，其中的信息可能已经有所发展或是发生改变。

NS 记录由 CloudFlare 更改为百度云加速后，NS 记录始终不生效，dig +trace 可查询到更改后的值

[root@local-66 ~]# dig kmlvip.com ns

; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7_3.1 <<>> kmlvip.com ns
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38188
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;kmlvip.com.                    IN      NS

;; ANSWER SECTION:
kmlvip.com.             8154    IN      NS      kate.ns.cloudflare.com.
kmlvip.com.             8154    IN      NS      derek.ns.cloudflare.com.

;; Query time: 27 msec
;; SERVER: 223.5.5.5#53(223.5.5.5)
;; WHEN: Wed Aug 30 14:45:11 CST 2017
;; MSG SIZE  rcvd: 81

[root@local-66 ~]# dig +trace kmlvip.com ns

; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7_3.1 <<>> +trace kmlvip.com ns
;; global options: +cmd
.                       277507  IN      NS      i.root-servers.net.
.                       277507  IN      NS      k.root-servers.net.
.                       277507  IN      NS      m.root-servers.net.
.                       277507  IN      NS      l.root-servers.net.
.                       277507  IN      NS      f.root-servers.net.
.                       277507  IN      NS      h.root-servers.net.
.                       277507  IN      NS      j.root-servers.net.
.                       277507  IN      NS      d.root-servers.net.
.                       277507  IN      NS      a.root-servers.net.
.                       277507  IN      NS      g.root-servers.net.
.                       277507  IN      NS      e.root-servers.net.
.                       277507  IN      NS      c.root-servers.net.
.                       277507  IN      NS      b.root-servers.net.
;; Received 228 bytes from 223.5.5.5#53(223.5.5.5) in 29 ms

com.                    172800  IN      NS      d.gtld-servers.net.
com.                    172800  IN      NS      m.gtld-servers.net.
com.                    172800  IN      NS      l.gtld-servers.net.
com.                    172800  IN      NS      g.gtld-servers.net.
com.                    172800  IN      NS      a.gtld-servers.net.
com.                    172800  IN      NS      f.gtld-servers.net.
com.                    172800  IN      NS      j.gtld-servers.net.
com.                    172800  IN      NS      h.gtld-servers.net.
com.                    172800  IN      NS      k.gtld-servers.net.
com.                    172800  IN      NS      b.gtld-servers.net.
com.                    172800  IN      NS      c.gtld-servers.net.
com.                    172800  IN      NS      e.gtld-servers.net.
com.                    172800  IN      NS      i.gtld-servers.net.
com.                    86400   IN      DS      30909 8 2 E2D3C916F6DEEAC73294E8                                                         268FB5885044A833FC5459588F4A9184CF C41A5766
com.                    86400   IN      RRSIG   DS 8 1 86400 20170912050000 2017                                                         0830040000 15768 . H2LpCL6a5fnWzmo4oxLb7x37E6IiJ9raame5VOqtO8++sbDG1y4tP5jo lK2U                                                         Wsuphr+KtDVQ9oJ+bU6Jb4Q/CefRhNdqeHYB/18DPjISxWyvlg0D EP3p2cdwWp8LfvQsHDqvgFVZMiW                                                         mAWb4MiTNKr52Ya8PtbKz03nbTS2Q JDHJHotiIdDBQGIAMsizXqsVT695udkJodfpvEU2f2JMQn1nvj                                                         KKNBkE JgfMKB3KmndfrZwt93PvJebaPxX2aj2duwHczrvx/LTz31k8vZV1RGgM a7jkIMRY8NIXeNBM                                                         kAABuedopQCo5mCPgW1DAvbA4rvgGOlv+eUNAhgz XehKYw==
;; Received 1170 bytes from 199.7.91.13#53(d.root-servers.net) in 257 ms

kmlvip.com.             172800  IN      NS      n88.ns.yunjiasu.com.
kmlvip.com.             172800  IN      NS      n3350.ns.yunjiasu.com.
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM
CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG NSEC3 8 2 86400 20170906044734 20170830033734 5528 com. dkZqXkacaGfiiw6V55cfhasvBbU32IMqsIE4cfbIzdSWctjXrOBg6NgA uz0WHde/vNfaGDYkQfqZMxOWM0pATXR0Uis4J9hZP4q7LyQ+2ZhRVlzR w6PJYZ1Mbud/Tb2S801GtZwKFArYWDxlf3u03UHAmI3+3PMKnxLb02Gt rck=
2G28FIR9AUJDRU6JAG5FLT8B055B03DC.com. 86400 IN NSEC3 1 1 0 - 2G2BK4MSDCII7ADMPIMSJ18HVEB5G68C NS DS RRSIG
2G28FIR9AUJDRU6JAG5FLT8B055B03DC.com. 86400 IN RRSIG NSEC3 8 2 86400 20170906043031 20170830032031 5528 com. IpE7G6NImtnnzHIg67EDe6Tm/0NM7HugmWaJ03HFoVI6MjfCB8tv4Fbi Nhjny65PaE/NORrU4eeZnT//S6r2igkbF4qqZVtbVYwq3zSeWezboY5Y 81nucui45QCVwGqU2yXsrFfTl6fanhRQzSB+P7fT5JLqJKBudP9Pa8vt e3g=
;; Received 726 bytes from 192.31.80.30#53(d.gtld-servers.net) in 30143 ms

dig

rrsig

223.5.5.5

7 条回复 • 2017-09-02 11:51:30 +08:00

hgc81538

2017-08-30 15:51:02 +08:00

因為 n88.ns.yunjiasu.com. 回答 NS 是 cloudflare.

dig ns kmlvip.com @n88.ns.yunjiasu.com.

alex8

2017-08-30 17:15:22 +08:00

@hgc81538
请问用哪种命令或方法可以直观看到 n88.ns.yunjiasu.com 回答的 NS 是 cloudflare.
我使用了你给的命令行，没有请求回应
```base
[centos@ip-172-31-15-252 ~]$ dig ns kmlvip.com @n88.ns.yunjiasu.com.

; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7_3.1 <<>> ns kmlvip.com @n88.ns.yunjiasu.com.
;; global options: +cmd
;; connection timed out; no servers could be reached
[centos@ip-172-31-15-252 ~]$ dig ns kmlvip.com @n88.ns.yunjiasu.com

; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7_3.1 <<>> ns kmlvip.com @n88.ns.yunjiasu.com
;; global options: +cmd
;; connection timed out; no servers could be reached
[centos@ip-172-31-15-252 ~]$
```

Showfom

2017-08-30 17:17:49 +08:00

@sunweiqiang8 不要带 @ 带 @ 是给递归 DNS 服务器去查询

C:\Users\Showfom>dig ns kmlvip.com n88.ns.yunjiasu.com

; <<>> DiG 9.11.2 <<>> ns kmlvip.com n88.ns.yunjiasu.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59696
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1252
;; QUESTION SECTION:
;kmlvip.com. IN NS

;; ANSWER SECTION:
kmlvip.com. 86317 IN NS kate.ns.cloudflare.com.
kmlvip.com. 86317 IN NS derek.ns.cloudflare.com.

所以，去怼百度云加速的客服吧

alex8

2017-08-30 17:35:42 +08:00

@Showfom
谢谢

mytsing520

2017-08-30 21:20:49 +08:00

然而实际操作显示不带 at 符号，dig 不生效。 @Showfom

hawhaw

2017-08-31 12:00:53 +08:00

汗。修改 ns 的纪录光改本域的数据是不行的。需要在你注册域名的那里修改！我刚干过这事情，具体过程： http://ming.theyan.gs/2017/08/How-to-migrate-your-own-NS-servers/
好大的坑这里

LanFomalhaut

2017-09-02 11:51:30 +08:00

@hawhaw LZ 使用的第三方权威 NS 服务非自己域名的子域名作为权威 NS 所以跟你这个情况不一样的