Module 3 DNS Types.

Slides:

Advertisements

Similar presentations

Sergei Komarov. DNS  Mechanism for IP hostname resolution  Globally distributed database  Hierarchical structure  Comprised of three components.

Advertisements

School of Electrical Engineering and Computer Science, 2004 Slide 1 Autonomic DNS Experiment Architecture, Symptom and Fault Identification.

2.1 Installing the DNS Server Role Overview of the Domain Name System Role Overview of the DNS Namespace DNS Improvements for Windows Server 2008 Considerations.

Domain Name System. DNS is a client/server protocol which provides Name to IP Address Resolution.

DNS Security Extension (DNSSEC). Why DNSSEC? DNS is not secure –Applications depend on DNS ►Known vulnerabilities DNSSEC protects against data spoofing.

DNS. DNS is a network service that enables clients to resolve names to IP address and vice-versa. Allows machines to be logically grouped by domain names.

The Domain Name System Overview Introduction DNS overview How DNS helps us? Summary.

DNS的配置和排错刘道军老师主讲 Module 1 如有疑问请与我联系： D

Domain Name System (DNS) Network Information Center (NIC) : HOSTS.TXT.

Hands-On Microsoft Windows Server 2003 Networking Chapter 6 Domain Name System.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 8: Managing and Troubleshooting DNS.

MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration Chapter 5 Introduction to DNS in Windows Server 2008.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 7: Planning a DNS Strategy.

Module 12: Domain Name System (DNS)

Domain Name Services Oakton Community College CIS 238.

Windows Server 2008 Chapter 8 Last Update

Lecturer : Ms.Trần Thị Ngọc Hoa Chapter 2 Methods Configuring Name Resolution Methods.

Peter Janssen, EURid.eu Ljubljana, RIPE 64, 2012 Peter Janssen, EURid.eu Ljubljana, RIPE 64, April

11.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 11: Introducing WINS, DNS,

Module 10 Advanced Topics. DNS and DHCP DHCP can be configured to auto- update (using DDNS) the forward and reverse map zones Can be secured using allow-update.

DNS. Introduction What is DNS? –Hierarchy or Tree –Dot used as a separator.

Basic DNS Course Lecturer: Ron Aitchison. Module 1 DNS Theory.

Advanced Module 3 Stealth Configurations.

© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.

TELE 301 Lecture 11: DNS 1 Overview Last Lecture –Scheduled tasks and log management This Lecture –DNS Next Lecture –Address assignment (DHCP)

Chapter 16 – DNS. DNS Domain Name Service This service allows client machines to resolve computer names (domain names) to IP addresses DNS works at the.

1 Objectives Discuss the basics of the Domain Name System (DNS) and its terminology Configure DNS clients Install a standard DNS server on Server 2008.

Microsoft Windows Server 2003 TCP/IP Protocols and Services Technical Reference Slide: 1 Lesson 17 Domain Name System (DNS)

70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network Chapter 7: Domain Name System.

Paper Presentation – CAP Page 2 Outline Review - DNS Proposed Solution Simulation Results / Evaluation Discussion.

Configuring Global Server Load Balancing (GSLB)

Chapter 13 Microsoft DNS Server n DNS server: A Microsoft service that resolves computer names to IP addresses, such as resolving the computer name Brown.

Zone Properties. Zone Properties Continued Aging allows zone to remove “stale” or “old” records for clients who have not updated within a certain period.

October 8, 2015 University of Tulsa - Center for Information Security Microsoft Windows 2000 DNS October 8, 2015.

Module 5 BIND Configuration. named.conf – controls operational features Located - Linux: /etc/named.conf /etc/bind/named.conf Located- BSD: /usr/local/etc/named.conf.

Fully Qualified Domain Names FQDNs. DNS Database A distributed, hierarchical database Resolves Fully Qualified Domain Names (FQDNs) to IP addresses –

Module 8 DNS Tools & Diagnostics. Objectives Understand dig and nslookup Understand BIND toolset Understand BIND logs Understand wire level messages.

1 Week 7 – DNS and ADDS Integration Review of DNS Concepts, Components, and Processes Install and Configure DNS in an AD DS Domain AD DS, DNS, and Windows.

Objectives Discuss the basics of the Domain Name System (DNS) and its terminology Configure DNS clients Install a standard DNS server on Server 2008 Create.

Module 2 Zone Files. Objective Understand the idea of a zone and how it relates to a domain name understand zone file structure Understand the major Resource.

Configuring and Troubleshooting Domain Name System

Configuring Name Resolution and Additional Services Lesson 12.

Windows Server 2003 DNS 安裝設定與管理維護林寶森

Domain Name System (DNS). DNS Server Service Overview of Domain Name System What Is a Domain Namespace? Standards for DNS Naming.

1 Internet Network Services. 2 Module - Internet Network Services ♦ Overview This module focuses on configuring and customizing the servers on the network.

Lab 11 Overview Windows Server Last Labs Lab 12  Cisco Firewall.

Module 8 DNS Tools & Diagnostics. Dig always available with BIND (*nix) and windows Nslookup available on windows and *nix Dig on windows – unpack zip,

DNS DNS overview DNS operation DNS zones. DNS Overview Name to IP address lookup service based on Domain Names Some DNS servers hold name and address.

© F5 Networks, Inc. 1 How Does DNS Work? A user browses to A user browses to

CIS 192B – Lesson 2 Domain Name System. CIS 192B – Lesson 2 Types of Services Infrastructure –DHCP, DNS, NIS, AD, TIME Intranet –SSH, NFS, SAMBA Internet.

Linux Operations and Administration

Sample DNS configurations. Example 1: Master 'master' DNS and is authoritative for this zone for example.com provides 'caching' services for all other.

DNS/Proxy Babu Ram Dawadi. Introduction - DNS Domain Name Server Domain Name Server –programs that store information about the domain name space –largest.

DNS Security 1. Fundamental Problems of Network Security Internet was designed without security in mind –Initial design focused more on how to make it.

DNS - BIND9 Přednášející Vaše jméno. Master and caching name server options { directory "/var/named"; allow-transfer {“none”;}; }; zone "." { type hint;

11.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 11: Introducing WINS, DNS,

Web Server Administration Chapter 4 Name Resolution.

ITU ccTLD Workshop March 3, 2003 A Survey of ccTLD DNS Vulnerabilities.

WHAT IS DNS??????????.

Basics of the Domain Name System (DNS) By : AMMY- DRISS Mohamed Amine KADDARI Zakaria MAHMOUDI Soufiane Oujda Med I University National College of Applied.

Open DNS resolvers have to be closed ● Open resolvers respond to recursive queries from any host on the Internet ● Amplification DNS attack 2.

KAPLAN SCHOOL OF INFORMATION SYSTEMS AND TECHNOLOGY IT375 Window Enterprise Administration Course Name – IT Introduction to Network Security Instructor.

AfNOG-2003 Domain Name System (DNS) Ayitey Bulley Setting up an Authoritative Name Server.

Using Digital Signature with DNS. DNS structure Virtually every application uses the Domain Name System (DNS). DNS database maps: –Name to IP address.

MAN-IN-THE-MIDDLE ATTACK STEGANOGRAPHY Lab# MAC Addresses and ARP  32-bit IP address:  network-layer address  used to get datagram to destination.

1 Internet Service DNS & BIND OPS335 Seneca College of Applied Technology.

Module 5: Resolving Host Names by Using Domain Name System (DNS)

IMPLEMENTING NAME RESOLUTION USING DNS

Configuring and Troubleshooting DNS

Presentation transcript:

Module 3 DNS Types

DNS - Types Master Slave Caching (resolver) Forwarding (Proxy) Stealth (DMZ) Authoritative Only

DNS – TYPES Best practice – single function per DNS Larger Sites – absolute rule Smaller sites DNS functions may be mixed in single name server BIND has fine control of type functionality Windows DNS – less flexible

DNS - Types DNS servers can support multiple domains Legitimate to mix master and slaves support even in larger sites on single server

DNS - Master Answers authoritatively for the domain May be one or more domains Reads zone file from local filesystem Multi-master Master-Slave Hidden Master

DNS Master

DNS - Slave Answers Authoritatively for the zone Loads zone file from a Master via network Checks Master On refresh time from SOA On receipt of NOTIFY Reads SOA RR from Master and if lower initiates transfer Uses AXFR or IXFR to transfer domain

DNS - Slave

DNS - Master - Slave Master may be visible in parents NS RRs Master may be hidden (not visible in parents NS RRs) Requirement is for two or more public DNS that answer authoritatively

DNS – Hidden Master

Primary and Secondary Old Terminology – implies priority of access DNS systems defined in NS RRs are ALL accessed typically based on a performance algorithm New terminology Master – Slave

DNS - Caching Acts for one or more clients Located where sensible PC stub-resolvers or other DNS Located where sensible In ISP, local network, Local PC Caches all results Is recursive – follows referrals Cache lost on reload Uses TTL to keep RRs in cache Needs hints zone file (root-servers)

DNS Recursive (Caching)

Caching - Open and Closed Caching Servers need to allow recursive services for internal clients Many also allow recursive services for external clients (OPEN) Approx 50% (4.5m) DNS are thought to be open Open DNS can be used in DDoS attacks Open DNS is vulnerable to cache poisoning Recursive Services should be limited to defined clients (CLOSED)

DNS – Open Resolver DDoS

DNS – Forwarding (Proxy) Forwards all queries to a recursive DNS Caches results Single request to recursive server gets single result Used where links are slow, congested or expensive Does not need hints zone file

DNS - Forwarding

DNS – Stealth (DMZ) Organization needs public access – web, ftp etc. Organization wants to keep many hosts invisible externally Separate DNS servers with different zone files for same domain BIND provides capability to provide both using a concept called views with IP based selection

DNS – Stealth (DMZ)

DNS – Stealth (DMZ) Still some weaknesses when internal DNS systems issue queries – DNS IP(s) are visible Firewalls typically configured not to allow such traffic

DNS – Stealth (DMZ)

DNS – Authoritative-only Only a Master or Slave Server may support many 100s or 1,000s of zones Does not cache (no hints zone file) Public DNS in a Stealth configuration High performance servers Root-servers gTLD, ccTLD

Types – Quick Quiz How does slave know when to transfer zone? Does a caching server need a hints zone file? Does a Forwarding DNS support recursive queries? Does an Authoritative-only DNS need a hints file? Why is an OPEN caching server bad?