Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Domain Name System HISTORY File hosts (the size of Internet became more than 1000.

Slides:

Advertisements

Similar presentations

Sergei Komarov. DNS  Mechanism for IP hostname resolution  Globally distributed database  Hierarchical structure  Comprised of three components.

Advertisements

Web Server Administration

Web Server Administration Chapter 4 Name Resolution.

Domain Name System. DNS is a client/server protocol which provides Name to IP Address Resolution.

Spring 2006CS 3321 Name Service (DNS) Outline Terminology Domain Naming System.

DNS Session 4: Delegation and reverse DNS Joe Abley AfNOG 2006 workshop.

Guide to TCP/IP, Second Edition1 Guide To TCP/IP, Second Edition Chapter 7 Domain Name System.

1 Guide To TCP/IP Domain Name System. 2 DNS – TCP/IP Application Protocol Name resolution protocol - robust, reliable & stable Distributed database technology.

DNS Domain name server – a server to translate IP aliases to addresses As you know, IP (internet protocol) works by providing every Internet machine with.

DNS. DNS is a network service that enables clients to resolve names to IP address and vice-versa. Allows machines to be logically grouped by domain names.

1 DNS. 2 BIND DNS –Resolve names to IP address –Resolve IP address to names (reverse DNS) BIND –Berkeley Internet Name Domain system Version 4 is still.

The Domain Name System. CeylonLinux DNS concepts using BIND 2 Hostnames IP Addresses are great for computers –IP address includes information used for.

McGraw-Hill©The McGraw-Hill Companies, Inc., Chapter 25 Domain Name System.

Domain Name System (DNS) Network Information Center (NIC) : HOSTS.TXT.

MCTS Guide to Microsoft Windows Server 2008 Network Infrastructure Configuration Chapter 5 Introduction to DNS in Windows Server 2008.

Domain Name System ( DNS )  DNS is the system that provides name to address mapping for the internet.

Module 12: Domain Name System (DNS)

The Domain Name System (DNS)

DNS Domain Name Service References: Wikipedia 1.

Reverse DNS. Overview Principles Creating reverse zones Setting up nameservers Reverse delegation procedures.

Domain Name Services Oakton Community College CIS 238.

Host Name Resolution. Overview Name resolution Name resolution Addressing a host Addressing a host Host names Host names Host name resolution Host name.

DNS. Introduction What is DNS? –Hierarchy or Tree –Dot used as a separator.

1 Domain Name System (DNS). 2 DNS: Domain Name System Internet hosts: – IP address (32 bit) - used for addressing datagrams – “name”, e.g.,

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Internet Control Message Protocol ICMP author -- J. Postel, September The purpose.

1 Network Administration Module 6 Domain Name Service (DNS)

Name Resolution Domain Name System.

TELE 301 Lecture 11: DNS 1 Overview Last Lecture –Scheduled tasks and log management This Lecture –DNS Next Lecture –Address assignment (DHCP)

Chapter 16 – DNS. DNS Domain Name Service This service allows client machines to resolve computer names (domain names) to IP addresses DNS works at the.

CS640 Introduction to Computer Networks DNS Dec 1 st, 1999 Prof. Lawrence H. Landweber Prof. Jun Murai.

CN2140 Server II Kemtis Kunanuraksapong MSIS with Distinction MCT, MCITP, MCTS, MCDST, MCP, A+

DNS and C# SWE 344 Internet Protocols & Client Server Programming.

DNS: Domain Name System

14 DNS : The Domain Name System. 14 Introduction - Problem Computers are used to work with numbers Humans are used to work with names ==> IP addresses.

McGraw-Hill©The McGraw-Hill Companies, Inc., 2000 Network Protocols Chapter 25 (Data Communication & Networking Book): Domain Name System (DNS) 1.

Chapter 17 Domain Name System

Chapter 29 Domain Name System (DNS) Allows users to reference computer names via symbolic names translates symbolic host names into associated IP addresses.

CITA 310 Section 1 Name Resolution (Textbook Chapter 4)

Deploying a Web Application Presented By: Muhammad Naveed Date:

Chapter 16 – The Domain Name System (DNS) Presented by Shari Holstege Tuesday, June 18, 2002.

Netprog: DNS and name lookups1 Address Conversion Functions and The Domain Name System Refs: Chapter 9 RFC 1034 RFC 1035.

Internet and Intranet Protocols and Applications Lecture 5 Application Protocols: DNS February 20, 2002 Joseph Conron Computer Science Department New York.

Module 2 Zone Files. Objective Understand the idea of a zone and how it relates to a domain name understand zone file structure Understand the major Resource.

1 Kyung Hee University Chapter 18 Domain Name System.

Domain Name System Refs: Chapter 9 RFC 1034 RFC 1035.

CPSC 441: DNS 1. DNS: Domain Name System Internet hosts: m IP address (32 bit) - used for addressing datagrams m “name”, e.g., - used by.

Configuring Name Resolution and Additional Services Lesson 12.

Domain Name System (DNS). DNS Server Service Overview of Domain Name System What Is a Domain Namespace? Standards for DNS Naming.

1 Domain Name System (DNS). 2 3 How DNS Works Application Transport Internet Network Application Transport Internet Network DNS Resolver Name Server.

1 Internet Network Services. 2 Module - Internet Network Services ♦ Overview This module focuses on configuring and customizing the servers on the network.

DNS DNS overview DNS operation DNS zones. DNS Overview Name to IP address lookup service based on Domain Names Some DNS servers hold name and address.

Linux Operations and Administration

Web Server Administration Chapter 4 Name Resolution.

1 CMPT 471 Networking II DNS © Janice Regan,

OPTION section It is the first section of the named.conf User can use only one option statement and many option-value pair under the section. Syntax is.

2/26/2003 Lecture 4 Computer System Administration Lecture 4 Networking Startup/DNS.

TCP/IP Protocol Suite 1 Chapter 17 Upon completion you will be able to: Domain Name System: DNS Understand how the DNS is organized Know the domains in.

COMP 431 Internet Services & Protocols

WHAT IS DNS??????????.

Domain Name System DPNM Lab. Seongho Cho

KAPLAN SCHOOL OF INFORMATION SYSTEMS AND TECHNOLOGY IT375 Window Enterprise Administration Course Name – IT Introduction to Network Security Instructor.

AfNOG-2003 Domain Name System (DNS) Ayitey Bulley Setting up an Authoritative Name Server.

1 Internet Service DNS & BIND OPS335 Seneca College of Applied Technology.

DNS Domain name server a server to translate IP aliases to addresses

Domain Name System (DNS)

IMPLEMENTING NAME RESOLUTION USING DNS

A New Approach to DNS Security (DNSSEC)

Domain Name System Refs: Chapter 9 RFC 1034 RFC 1035.

Presentation transcript:

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Domain Name System HISTORY File hosts (the size of Internet became more than 1000 hosts in 1984), manually update, errors, impossible to scale DNS is also called BIND (Berkeley Internet Name Domain) Distributed database (delegation to lower level) DNS Translates Resource Records (RR)  hostnames to IP addresses  mail exchanger  host information Name Servers hold the DNS data and know how to find the answer Fully Qualified Domain Name (FQDN) - Each dot separates a subdomain Each subdomain may have a Name Server associated with it nslookup Rev /

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Query of girigiri.gbrmpa.gov.au

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES DNS and OSI RM APPLICATION PRESENTATION SESSION TRANSPORT NETWORK DATA LINK PHYSICAL Layer 7 Layer 6 Layer 5 Layer 4 Layer 3 Layer 2 Layer 1 DNS TCP IP Physical TCP/IPOSI/RM

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Inverse query 1.Name-to-Address is easy procedure due to indexing by name field in database. 2.Address-to-Name (authorization checks, understanding logs) is not trivial: to implement an exhaustive search or to establish the whole domain in-addr.arpa with IP addresses noted in it (example: IP address corresponds to in-addr.arpa).

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Database entities RFC 1035 AHost Address NSAuthoritative Nameserver CNAMECanonical Name SOAMarks Start of Zone of Authority PTRDomain Name Pointer (Reverse Host Record ) HINFOHost Information MXMail Exchange...

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES SOA record mydomain.com. IN SOA ns1.mydomain.com. root.mail.mydomain.com. ( h 2h 4w 4d) The first line indicates first the zone, then the type of record — Internet SOA — then the primary name server for the zone, and then a contact address for the zone. Note that the address uses a period (dot) in place of and that all of these domain names must end with a dot. updated serial number YYYYMMDDVV check updates by secondary NS retry after fail expire data if no update minimal TTL

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES NS, A, CNAME records NS (Name Server) records provide a list of name servers authoritative for the zone: mydomain.com. IN NS ns1.mydomain.com. mydomain.com. IN NS ns2.mydomain.com. The real data itself. mail.mydomain.com. IN A ns1.mydomain.com. IN A ns2.mydomain.com. IN A cheesebox.mydomain.com. IN A lester.mydomain.com. IN A CNAME (Canonical name) records allow aliases. IN CNAME mydomain.com. wwww.mydomain.com. IN CNAME mydomain.com. ww.mydomain.com. IN CNAME mydomain.com. cb.mydomain.com. IN CNAME cheesebox.mydomain.com.

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES MX record MX (Mail Exchange) records provide a list of mail servers that accepts for the specified domain. Three parts: domain name, the name of the machine that will accept mail for the domain, and a preference value (lowest is preferred). Mailers look for MX records before A records - should define MX records for mail systems

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Sample zone ( ; serial number (update) 43200; refresh 2x per day 7200; retry every 2 hour (if fail) ; expire after 1 month 86400; TTL is 24 hours ;(minimum in cache) ) INMX10Cello.Opusl.COM. INMX10Viola.Opusl.COM. INMX15Tennis.Opusl.COM. INNSns.Opusl.COM. INNSArizona.EDU. INA INA INHINFO"DEC-VAXCLUSTER" "OPENVMS" ; WWWCNAMECello.Opusl.COM. NewsINA Tennis INTXT"Game, set and match" INA ; 100 Mbps line INHINFO"DEC-VAXSTATION" "OPENVMS" INMX10Mail.Opusl.COM. INMX20Mail.TheRiver.COM. for secondary servers

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Reverse mapping zone file ; Authoritative data for in-addr.arpa jatz.aarnet.edu.au. mit.jatz.aarnet.edu.au. ( ; Serial ; Refresh - 3 hours 1800 ; Retry - 30 minutes ; Expire hours ) ; Minimum - 12 hours INNS jatz.aarnet.edu.au. INNS anu.anu.edu.au. ; 4.204INPTR jatz.aarnet.edu.au INPTR scotch-finger.aarnet.edu.au INPTR nico.aarnet.edu.au.

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES DNS message format (UDP 53) IdentificationFlags Number of questionsNumber of answer RRs Number of authority RRsNumber of additional RRs Questions Answers (variable number of RRs) Authority (variable number of RRs) Additional information (variable number of RRs)

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES RR portion of DNS response Domain name TypeClass Time-to-live Resource data length Resource data

Petrozavodsk State University, Alex Moschevikin, 2003NET TECHNOLOGIES Problems with DNS  Inverse queries for local ISP.  DNS supports both TCP and UDP, but primarily uses UDP. TCP is slow and denial of service, UDP is vulnerable to response spoofing.  Lack of competition in domain name registering.  Confusion of trademarks and domains.  NS records contain hostnames, not addresses. Redundancy.