watchA/www.ana.co.jpについて、ここに記述してください。

CNAME chain をたどるだけでも十分に手間なのだが、

1. start

$ dnsq a www.ana.co.jp a.dns.jp
1 www.ana.co.jp:
163 bytes, 1+0+6+0 records, response, noerror
query: 1 www.ana.co.jp
authority: ana.co.jp 86400 NS a22-66.akam.net
authority: ana.co.jp 86400 NS a6-64.akam.net
authority: ana.co.jp 86400 NS a20-65.akam.net
authority: ana.co.jp 86400 NS a11-64.akam.net
authority: ana.co.jp 86400 NS a3-67.akam.net
authority: ana.co.jp 86400 NS a1-189.akam.net

ana.co.jp NS を見つけた。

2. akam.net に問い合わせる

$ dnsq a www.ana.co.jp a1-189.akam.net
1 www.ana.co.jp:
70 bytes, 1+1+0+0 records, response, authoritative, noerror
query: 1 www.ana.co.jp
answer: www.ana.co.jp 86400 CNAME www.ana.co.jp.edgekey.net


3. www.ana.co.jp.edgekey.net

edgekey.net にzone cutを検出したところから、

$ dnsq a www.ana.co.jp.edgekey.net a.gtld-servers.net
1 www.ana.co.jp.edgekey.net:
500 bytes, 1+0+13+10 records, response, noerror
query: 1 www.ana.co.jp.edgekey.net
authority: edgekey.net 172800 NS ns1-66.akam.net
authority: edgekey.net 172800 NS usw6.akam.net
authority: edgekey.net 172800 NS adns1.akam.net
authority: edgekey.net 172800 NS ns4-66.akam.net
authority: edgekey.net 172800 NS ns7-65.akam.net
authority: edgekey.net 172800 NS ns5-66.akam.net
authority: edgekey.net 172800 NS a6-65.akam.net
authority: edgekey.net 172800 NS a12-65.akam.net
authority: edgekey.net 172800 NS a5-65.akam.net
authority: edgekey.net 172800 NS a16-65.akam.net
authority: edgekey.net 172800 NS a18-65.akam.net
authority: edgekey.net 172800 NS a28-65.akam.net
authority: edgekey.net 172800 NS a13-65.akam.net
....

qname minimisationではzone cut(NS)だけを探索する。

$ dnsq ns co.jp.edgekey.net.globalredir.akadns.net a1-128.akadns.net 
2 co.jp.edgekey.net.globalredir.akadns.net:
85 bytes, 1+1+0+0 records, response, authoritative, noerror
query: 2 co.jp.edgekey.net.globalredir.akadns.net
answer: co.jp.edgekey.net.globalredir.akadns.net 300 CNAME a23.g.akamai.net

$ dnsq ns ana.co.jp.edgekey.net.globalredir.akadns.net a1-128.akadns.net
2 ana.co.jp.edgekey.net.globalredir.akadns.net:
89 bytes, 1+1+0+0 records, response, authoritative, noerror
query: 2 ana.co.jp.edgekey.net.globalredir.akadns.net
answer: ana.co.jp.edgekey.net.globalredir.akadns.net 300 CNAME a23.g.akamai.net

つまり、ここのCNAMEは無視されて、

$ dnsq a www.ana.co.jp.edgekey.net ns1-66.akam.net
1 www.ana.co.jp.edgekey.net:
102 bytes, 1+1+0+0 records, response, authoritative, noerror
query: 1 www.ana.co.jp.edgekey.net
answer: www.ana.co.jp.edgekey.net 21600 CNAME www.ana.co.jp.edgekey.net.globalredir.akadns.net

このCNAMEの先を探すことになる。

4. www.ana.co.jp.edgekey.net.globalredir.akadns.net

$ dnsq a www.ana.co.jp.edgekey.net.globalredir.akadns.net a.gtld-servers.net
1 www.ana.co.jp.edgekey.net.globalredir.akadns.net:
371 bytes, 1+0+10+5 records, response, noerror
query: 1 www.ana.co.jp.edgekey.net.globalredir.akadns.net
authority: akadns.net 172800 NS a3-129.akadns.net
authority: akadns.net 172800 NS a7-131.akadns.net
authority: akadns.net 172800 NS a11-129.akadns.net
authority: akadns.net 172800 NS a1-128.akadns.net
authority: akadns.net 172800 NS a9-128.akadns.net
authority: akadns.net 172800 NS a5-130.akadns.org
authority: akadns.net 172800 NS a13-130.akadns.org
authority: akadns.net 172800 NS a28-129.akadns.org
authority: akadns.net 172800 NS a12-131.akadns.org
authority: akadns.net 172800 NS a18-128.akadns.org
additional: a3-129.akadns.net 172800 A 96.7.49.129
additional: a7-131.akadns.net 172800 A 23.61.199.131
additional: a11-129.akadns.net 172800 A 84.53.139.129
additional: a1-128.akadns.net 172800 A 193.108.88.128
additional: a9-128.akadns.net 172800 A 184.85.248.128

$ dnsq a www.ana.co.jp.edgekey.net.globalredir.akadns.net a1-128.akadns.net
1 www.ana.co.jp.edgekey.net.globalredir.akadns.net:
99 bytes, 1+1+0+0 records, response, authoritative, noerror
query: 1 www.ana.co.jp.edgekey.net.globalredir.akadns.net
answer: www.ana.co.jp.edgekey.net.globalredir.akadns.net 3600 CNAME e1883.b.akamaiedge.net

/つづき

MoinQ: watchNS/co.jp/ana.co.jp (last edited 2022-04-01 09:24:52 by ToshinoriMaeno)