AWS · Advanced Networking Specialty

网络课程笔记

Lecture 195 · 7 张幻灯片

幻灯片、双语总结及 Transcript · 图片已内嵌,可离线阅读。

原文默认收起
lecture-195.md

Lecture 195: Route 53 Overview

  • 课程:[NEW] AWS Certified Advanced Networking Specialty 2026
  • 视频时长:06:18
  • 来源:Udemy Lecture 28556379
  • Slide 数量:7
  • 画面切换:01:17、02:23、02:44、03:16、03:31、04:51

扫描说明

逐条读取了 Udemy 页面中的 147 条英文 Transcript cue,并按时间轴扫描全长约 06:18 的视频。依据 Route 53 服务定位、Record 字段、A/AAAA、CNAME 与 Zone Apex、NS、Hosted Zone 类型与费用、Public/Private Resolution 对比划分为 7 个小节。截图均在 Transcript 侧栏关闭、播放器控件隐藏后复核,统一为 1364×770。

Transcript 来自 Udemy 页面自带的英文自动字幕,没有使用 ASR。下面保留页面原文,包括其中的语法或识别错误。

1. 高可用、托管、Authoritative DNS 与 Domain Registrar

时间范围:00:00–01:17

Amazon Route 53 authoritative DNS mapping a domain to an EC2 public IP

总结 / Summary

中文

Amazon Route 53 是 Highly Available、Scalable、Fully Managed 的 Authoritative DNS;Authoritative 表示客户能直接创建和更新 DNS Record。它也提供 Domain Registration 与 Resource Health Check。课程强调 Route 53 是 AWS 中提供 100% Availability SLA 的服务,名称中的 53 来自 DNS 使用的传统 Port 53。

English

Amazon Route 53 is a highly available, scalable, fully managed authoritative DNS service; authoritative means customers directly create and update DNS records. It also provides domain registration and resource health checks. The course highlights its 100% availability SLA, and the number 53 refers to the traditional DNS port.

Transcript

00:00 So now that we know what is a DNS,

00:02 let's have a look at Amazon Route 53.

00:05 So this is a highly available, scalable,

00:07 and fully managed and authoritative DNS.

00:10 What does authoritative means?

00:12 That means that the customer you can update the DNS records,

00:15 so you have full control over this DNS.

00:18 So the idea is that you have your clients

00:19 and they want to access your EC2 Instance @example.com

00:23 but right now your EC2 Instance only has a public IP.

00:27 Therefore what's going to happen

00:28 is that we're going to write some DNS records

00:30 into Amazon Route 53, into a hosted zone,

00:33 and when the client is asking for example.com,

00:36 then the Route 53 service will be able to say,

00:38 "Hey, you're looking for this IP 54.22.33.44,"

00:43 and then the clients will be able to connect directly

00:45 into our EC2 Instance.

00:47 So Route 53 is also a domain registrar,

00:49 so it will be able to register our own domain names there

00:52 such as example.com, and we'll be doing this

00:54 in the hands-on to allow us to get started

00:56 with this service.

00:58 So we have the ability to check also the health

01:00 of the resources within Route 53,

01:02 we'll see this in the section.

01:03 And this is the only service in AWS

01:05 that will provide 100% availability SLA.

01:08 Finally, why is it called Route 53?

01:11 Well, 53 is a reference to the traditional DNS port

01:14 used by DNS services, hence the name.

2. 每条 Record 包含名称、类型、值、Routing Policy 与 TTL

时间范围:01:17–02:23

Route 53 record fields including name type value routing policy and TTL

总结 / Summary

中文

Route 53 Record 定义如何为 Domain 或 Subdomain 路由流量。核心字段包括 Name、Record Type(如 A/AAAA)、Value、Routing Policy,以及 TTL(Time To Live),后者控制 DNS Resolver 的缓存时间。考试重点 Record Type 是 A、AAAA、CNAME 和 NS;其他高级类型按题目上下文识别即可。

English

A Route 53 record defines how traffic is routed for a domain or subdomain. Its core fields are name, record type such as A or AAAA, value, routing policy, and TTL (time to live), which controls resolver caching. The exam-focused record types are A, AAAA, CNAME, and NS; other advanced types are usually interpreted from context.

Transcript

01:17 So in Route 53 you're going to define a bunch of DNS records

01:21 and the records define how you want to route traffic

01:25 to a specific domain.

01:27 So each record is going to contain a lot of information

01:29 such as the domain or the subdomain names

01:31 such as example.com.

01:33 The record type, and we'll see what types of record

01:36 we have available to us, for example it could be A or AAAA.

01:40 Then the value, so the value of the record,

01:42 for example, 12.34.56.78

01:46 The routing policy,

01:47 which is how a Route 53 will respond to queries.

01:51 The TTL, which is the amount of time

01:53 the record is going to be cached at the DNS resolvers,

01:56 also called time to live.

01:58 And then we have a lot of different supported

02:01 DNS report types in Route 53.

02:04 So we have, the ones you must know is A, quadruple A,

02:08 CNAME, and NS, so we'll have a look at those

02:10 in the hands-on.

02:11 And the advanced records that you can set,

02:13 but we don't need to know from an exam perspective,

02:15 are all the ones I just wrote right here.

02:18 So let's learn about the important record types

02:21 we need to know from an exam perspective.

3. A 映射 IPv4,AAAA 映射 IPv6

时间范围:02:23–02:44

Route 53 A and AAAA records mapping hostnames to IPv4 and IPv6

总结 / Summary

中文

A Record 把 Hostname 映射为 IPv4 Address,例如 example.com → 1.2.3.4。AAAA(Quadruple A)执行相同逻辑,但 Value 是 IPv6 Address。选择类型必须与目标地址族一致;Dualstack 场景通常同时发布 A 与 AAAA 供客户端选择。

English

An A record maps a hostname to an IPv4 address, such as example.com to 1.2.3.4. An AAAA record performs the same function with an IPv6 value. The type must match the target address family; dualstack services normally publish both A and AAAA records for clients to choose from.

Transcript

02:23 So the A record is very simple,

02:25 it's to map a host name into an IPv4 IP.

02:29 So this is when you have, for example, example.com

02:31 that will be directed into 1.2.3.4.

02:35 Okay, great.

02:36 Then we have quadruple A.

02:38 So this is the same idea as A,

02:39 but this time we're going to match our host name

02:41 into an IPv6 address.

4. CNAME 指向另一个 Hostname,但不能用于 Zone Apex

时间范围:02:44–03:16

CNAME record mapping one hostname to another with a zone-apex restriction

总结 / Summary

中文

CNAME 把一个 Hostname 映射到另一个 Hostname,目标名称最终再通过 A 或 AAAA 获得地址。DNS 规范不允许在 Namespace 顶部(Zone Apex)创建 CNAME,因此不能给 example.com 配 CNAME,但可以给 www.example.com 配。Route 53 Alias Record 将用于解决 Apex 指向 AWS Resource 的需求。

English

A CNAME maps one hostname to another, whose address is eventually obtained through an A or AAAA record. DNS does not allow a CNAME at the top of the namespace, or zone apex, so example.com cannot be a CNAME while www.example.com can. Route 53 alias records address the need to point an apex to an AWS resource.

Transcript

02:44 Then we have a CNAME, which is used to map a host name

02:46 into another host name.

02:49 And then the target host name of course may be an A

02:52 or a quadruple A record.

02:54 You can not create CNAMES in Route 53

02:57 for the top nodes of a DNS namespace or the Zone Apex,

03:00 and we'll see this in a future lecture as well

03:03 to understand how that works.

03:04 For example, you can not create a CNAME for example.com,

03:08 but you can create a CNAME record for www.example.com.

03:12 So we'll see how we can deal with this in a future lecture.

5. NS Record 指定 Hosted Zone 的权威 Name Server

时间范围:03:16–03:31

NS records defining the name servers for a Route 53 hosted zone

总结 / Summary

中文

NS Record 保存 Hosted Zone 的 Name Server DNS Name 或地址,指明哪些 Server 能对该 Zone 的 Query 给出权威答案。上级 DNS 通过 NS Delegation 把请求交给这些 Server,因此 NS 设置直接控制 Domain 流量由哪组权威 DNS 解析。

English

NS records contain the DNS names or addresses of a hosted zone's name servers, identifying which servers can answer authoritatively for that zone. Parent DNS zones delegate queries through these NS records, so they determine which authoritative servers control resolution for the domain.

Transcript

03:16 And then finally, NS is for name servers of the hosted zone.

03:19 They are the DNS names or IP addresses of the servers

03:23 that can respond to the DNS queries for your hosted zone,

03:28 and this will control how traffic is routed to a domain.

6. Public Hosted Zone 与 Private Hosted Zone

时间范围:03:31–04:51

Route 53 hosted zones containing public and private DNS records

总结 / Summary

中文

Hosted Zone 是保存 Domain 及其 Subdomain Record 的 Container。Public Hosted Zone 响应 Internet 上对公共名称的查询;Private Hosted Zone 只在关联 VPC 内解析 company.internal 等私有名称。课程给出的费用是每个 Hosted Zone 每月 0.50 美元,注册 Domain 至少约每年 12 美元,因此 Hands-on 并非完全免费。

English

A hosted zone is a container for records covering a domain and its subdomains. A public hosted zone answers Internet queries for public names, while a private hosted zone resolves private names such as company.internal only inside associated VPCs. The course cites $0.50 per hosted zone per month and domain registration starting around $12 per year, so the hands-on is not entirely free.

Transcript

03:31 So let's have a look at what are hosted zones.

03:34 So hosted zones are a container of records,

03:37 and they will define how to route traffic

03:38 to a domain and its subdomain.

03:40 So we have two types of hosted zone,

03:41 we have the public of zones and the private hosted zones.

03:45 So whenever you buy a public domain name,

03:47 for example mypublicdomain.com, this is a public domain name

03:50 and therefore we can create a public hosted zone

03:53 and these public zone can answer the query,

03:56 "Hey, what's is the IP, underlying IP of the domain name

04:01 application1.mypublicdomainname.com?"

04:04 But we also have private hosted zones.

04:06 And these are for domain names that you,

04:08 they are not publicly available, they're privates,

04:11 and only you within your own virtual private cloud or VPC

04:15 can resolve this URL.

04:16 For example, application1.company.internal.

04:19 You may have seen this if you're working

04:21 for a private company, they sometimes have URLs

04:23 that you can only access from within your corporate network,

04:26 that's because this is a private URL, this is a private

04:29 and behind the scenes there is a private DNS record.

04:32 So for any hosted zones you're going to create an AWS

04:35 you're going to pay 50 cents per month,

04:38 so this is not free to use Route 53.

04:40 And if you are to register a domain name,

04:42 just like I will in the hands-on,

04:44 this will cost you a minimum of a $12 per year.

04:47 So just so you know, this section is not free.

7. Public 面向全网,Private 在 VPC 内把服务名解析为私网 IP

时间范围:04:51–06:18

Public and private hosted-zone resolution for AWS resources and VPC services

总结 / Summary

中文

Public Hosted Zone 可把 example.com 指向 S3、CloudFront、Public EC2 或 ALB,任何 Internet Client 都能查询。Private Hosted Zone 让 VPC Workload 使用 webapp.example.internal、api.example.internal、database.example.internal 等稳定名称,并返回 10.x Private IP;解析与连接都限定在私网可达范围。

English

A public hosted zone can point example.com to S3, CloudFront, a public EC2 address, or an ALB, and any Internet client may query it. A private hosted zone gives VPC workloads stable names such as webapp.example.internal, api.example.internal, and database.example.internal that resolve to 10.x private IPs within private reachability.

Transcript

04:51 So public versus private hosted zones, just to understand.

04:54 So public hosted zone can be answered,

04:57 can answer queries from public clients.

04:59 So when you web browser, for example, and say,

05:00 "Hey, give me example.com," and then it returns an IP.

05:04 And on the other end we have the private hosted zone.

05:07 So this is from within your VPC they live.

05:09 And so they allow you to identify private resources

05:12 with private domain names.

05:14 So for example, we have one EC2 Instance

05:16 that we want to identify with webapp.example.internal,

05:20 we have another EC2 Instance that we want to identify

05:22 with api.example.internal, and then we have a database

05:25 we want to identify with database.example.internal.

05:29 In which case we're going to register a private hosted zone,

05:32 and then in case the first EC2 Instance

05:34 is requesting for api.example.internal,

05:37 then the private hosted zone has an answer for it,

05:39 which is the private IP 10.0.0.10.

05:42 Then the EC2 Instance will connect

05:43 to the second EC2 Instance,

05:45 which may need to connect to database.

05:46 So it will say, "Hey, what's database.example.internal?"

05:49 And the private hosted zone will say,

05:51 "Well, this is this private IP."

05:52 And then the EC2 Instance can connect directly

05:54 into the database.

05:56 So the public hosted zone and the private hosted zone

05:58 work the exact same way, but just the public hosted zone

06:00 allows anyone from the internet to query your records,

06:03 so this is for your public records,

06:05 whereas a private hosted zone is only queried

06:07 from within your private resources, for example your VPC.

06:11 So that's it for the theory,

06:12 now let's go into the next lecture to register a domain

06:15 and then create some records.

06:16 So I will see you in the next lecture.

整讲总结 / Overall Summary

中文

Route 53 同时提供 Authoritative DNS、Domain Registration、Health Check 与多种 Routing Policy。A/AAAA 对应 IPv4/IPv6,CNAME 指向另一名称但不能放在 Zone Apex,NS 负责 Zone Delegation。Public Hosted Zone 对 Internet 开放,Private Hosted Zone 只在关联 VPC 内返回私网资源地址。

English

Route 53 provides authoritative DNS, domain registration, health checks, and multiple routing policies. A and AAAA map to IPv4 and IPv6, CNAME points to another name but cannot sit at the zone apex, and NS delegates the zone. Public hosted zones answer Internet queries, while private hosted zones return private-resource addresses only within associated VPCs.

返回顶部 ↑