AWS · Advanced Networking Specialty

网络课程笔记

Lecture 213 · 5 张幻灯片

幻灯片、双语总结及 Transcript · 图片已内嵌,可离线阅读。

原文默认收起
lecture-213.md

Lecture 213: DNS Migration in Route 53

  • 课程:[NEW] AWS Certified Advanced Networking Specialty 2026
  • 视频时长:02:36
  • 来源:Udemy Lecture 33170636
  • Slide 数量:5
  • 画面切换:00:36、00:58、01:29、02:05

扫描说明

逐条读取了 Udemy 页面中的 55 条英文 Transcript cue,并按时间轴扫描全长约 02:36 的视频。依据盘点现有 DNS、在 Route 53 重建 Zone、降低 NS TTL 并等待传播、切换 NS 与监控、恢复 TTL 及可选转移注册划分为 5 个小节。截图均在 Transcript 侧栏关闭、播放器控件隐藏后复核,统一为 1364×770。

Transcript 来自 Udemy 页面自带的英文自动字幕,没有使用 ASR。下面保留页面原文,包括其中的语法或识别错误。

1. 迁移前先完整盘点当前 DNS Configuration

时间范围:00:00–00:36

Route 53 DNS migration slide starting with current DNS configuration inventory

总结 / Summary

中文

题目目标是把一个正在被用户访问的域名迁移到 Route 53,同时尽量避免离线。第一步是从现有 DNS Provider 获取完整配置,盘点所有需要复制的 Record;遗漏任何业务 Record,都可能在切换权威 Name Server 后造成部分服务不可达。

English

The goal is to move an actively used domain to Route 53 with minimal disruption. First obtain the complete configuration from the existing DNS provider and inventory every record that must be copied. Missing a production record can make part of the service unreachable after the authoritative name servers are switched.

Transcript

00:00 So here is a short lecture

00:01 on a question that can come up in the exam,

00:03 which is how to migrate the DNS service

00:07 for a domain that is already in use,

00:10 so that means that users are already accessing it,

00:12 without making the domain offline

00:15 and to do it as fast as possible?

00:17 So it should make sense to you,

00:18 but it's still good to know the steps.

00:20 So first of all,

00:21 the DNS service is hosted somewhere else than Route 53.

00:25 And so we need to get the current DNS configuration.

00:28 That basically means we want to have all the DNS records.

00:31 We need to duplicate and copy over to Route 53.

2. 创建 Public Hosted Zone 并复制全部 Record

时间范围:00:36–00:58

Migration checklist adding a Route 53 public hosted zone and all DNS records

总结 / Summary

中文

在 Route 53 创建对应域名的 Public Hosted Zone,再把现有 DNS Record 全部重建到新 Zone 中;也可以利用 Route 53 的 Import 功能。此时流量仍由外部 DNS Service 应答,因为 Registrar 上的 NS 委派尚未改变,所以可以在不影响用户的情况下准备新环境。

English

Create a public hosted zone for the domain in Route 53 and recreate every existing DNS record there, optionally using Route 53's import feature. Traffic is still answered by the external DNS service because the registrar's NS delegation has not changed, allowing the new environment to be prepared without affecting users.

Transcript

00:36 Then you're going to create a public hosted zone in Route 53

00:40 and then you're going to recreate all these records

00:44 in the newly created zone.

00:45 So there is an import feature in Route 53

00:48 you can also use as well.

00:50 Then the reason why the DNS service is currently external

00:54 is that the name servers are pointing

00:56 to an external DNS service.

3. 先把旧 NS TTL 降到 15 分钟,再等待原 TTL 完全过期

时间范围:00:58–01:29

Migration checklist lowering the external NS record TTL to fifteen minutes

总结 / Summary

中文

切换前,在旧 DNS Service 上把 NS Record 的 TTL 降至 15 分钟,以便出错时能快速回滚。若原 TTL 是常见的两天,必须再等待完整两天,让所有 Resolver 中仍缓存旧 TTL 的记录自然过期;只有这样,新获取的 NS 缓存才会采用 15 分钟 TTL。

English

Before the cutover, lower the NS record TTL on the old DNS service to 15 minutes so rollback can take effect quickly. If the previous TTL was the common two days, wait the full two days for old resolver caches to expire. Newly fetched NS entries will then use the 15-minute TTL.

Transcript

00:58 And so therefore, we want to change the name servers record,

01:02 but before we do so,

01:03 to make it as effective and as quick as possible,

01:06 we want to lower the TTL setting of the NS record

01:09 on the external DNS service to 15 minutes

01:13 to be able to quickly roll back just in case.

01:16 And then because the default time

01:18 usually for an NS record is two days,

01:20 we need to wait two days to ensure that every new client

01:24 will have the new NS record TTL of 15 minutes.

4. 把 NS 指向 Route 53,并持续监控 Query 是否成功

时间范围:01:29–02:05

Migration checklist switching NS records to Route 53 name servers

总结 / Summary

中文

等待期结束后,把域名的 NS Record 更新为 Route 53 Hosted Zone 分配的 Name Server。此后新的 DNS Query 会逐步由 Route 53 应答。切换期间应监控域名流量、Route 53 Query 与解析成功率,确认全部 Record 正确且应用访问正常;低 TTL 为必要时快速恢复旧委派保留了窗口。

English

After the wait period, update the domain's NS records to the name servers assigned by the Route 53 hosted zone. New DNS queries will progressively be answered by Route 53. Monitor domain traffic, Route 53 queries, and resolution success to confirm every record and application path works; the low TTL preserves a fast rollback window.

Transcript

01:29 So two days later, we're going to come back

01:32 and then we're going to update the NS record

01:35 to point to the Route 53 name servers.

01:39 And so now the domain is pointing

01:42 to the Route 53 DNS service.

01:45 That means that all the DNS queries

01:47 are now going to be originating,

01:50 being served by Route 53.

01:53 So therefore, we need to monitor traffic for the domain,

01:55 making sure that everything is working as expected,

01:58 making sure we have the correct queries done on Route 53

02:03 and that they succeed.

5. 验证稳定后恢复较高 TTL;Registrar 转移属于可选动作

时间范围:02:05–02:36

Complete Route 53 migration checklist including monitoring TTL restoration and optional registration transfer

总结 / Summary

中文

确认迁移稳定后,在 Route 53 把 NS TTL 调回较高值,例如两天,以减少重复查询并恢复常规缓存策略。把域名注册本身从外部 Registrar 转移到 Amazon Route 53 是独立且可选的后续动作,不是 DNS 托管迁移成功的前提。

English

Once the migration is stable, raise the NS TTL in Route 53 to a normal value such as two days, reducing repeated lookups and restoring the standard caching policy. Transferring the domain registration from the external registrar to Amazon Route 53 is a separate optional step, not a requirement for DNS-hosting migration.

Transcript

02:05 Then once everything is done and working,

02:08 we must change the NS record TTL on Route 53 this time

02:13 to a higher value, for example, two days,

02:15 so back to the default.

02:17 And then in your own time,

02:19 you can optionally transfer the domain registration

02:22 from your external service onto Amazon Route 53.

02:27 So that's it, it should make sense to you,

02:29 but now you know how you would see the steps

02:32 in case it comes up in the exam.

02:33 I hope you liked it and I will see you in the next lecture.

整讲总结 / Overall Summary

中文

在线域名迁移到 Route 53 的安全顺序是:盘点并复制全部 Record,创建 Public Hosted Zone,先降低旧 NS TTL 并等待原 TTL 传播周期结束,再切换 NS、监控解析,确认稳定后恢复较高 TTL。域名注册转移是可选项,与 DNS Service 迁移相互独立。

English

A safe live-domain migration to Route 53 inventories and copies all records, creates a public hosted zone, lowers the old NS TTL and waits for the previous TTL window, switches the delegation, monitors resolution, and finally restores a higher TTL. Moving the domain registration itself is optional and independent of the DNS-service migration.

返回顶部 ↑