1. Domain Name System (DNS) Name resolution for both small and large networks Host names IP Addresses Like a phone book, but stores more information Older Windows OSes used WINS and NetBIOS, Windows Server 2008 depends on DNS Active Directory uses DNS

2. DNS Details de facto standard for name resolution on the Internet DNS is based on domains –e.g..com,.net,.org – Top level domains (TLD) – umb.edu, name.tld – Second level domains Top level domains are tracked by Internet Consortium of Assigned Names and Numbers (ICANN) Businesses can apply for a second level domain (e.g. thru godaddy.com)

3. DNS Details (cont’d) Properties of DNS –Hierarchical name space divided into zones –Zones contain IP addresses, services, computers –Zones typically corresponding to domains, but they don’t have to –Zone files distributed over a collection of DNS servers Authoritative DNS server contains a readable and writeable copy of the zone file Secondary DNS servers contain a read-only copy of the zone file –Two types of zones: Forward lookup: Host names -> IP addresses Reverse lookup: IP addresses -> Host names

4. 13 root servers (see http://www.root-servers.org/)http://www.root-servers.org/ Labeled A through M DNS Root Servers B USC-ISI Marina del Rey, CA L ICANN Los Angeles, CA E NASA Mt View, CA F Internet Software C. Palo Alto, CA (and 17 other locations) I Autonomica, Stockholm (plus 3 other locations) m WIDE Tokyo A Verisign, Dulles, VA C Cogent, Herndon, VA (also Los Angeles) D U Maryland College Park, MD G US DoD Vienna, VA H ARL Aberdeen, MD J Verisign, ( 11 locations) K RIPE London (also Amsterdam, Frankfurt)

5. Domain Name System comeduorgac uk zw arpa unnamed root for reverse lookup bar westeast foomy ac cam usr in- addr 12 34 56 generic domainscountry domains my.east.bar.edu usr.cam.ac.uk 12.34.56.0/24

6. Zones versus Domains Multiple DNS Zones in 1 domain e.g. 1 zone for cs.umb.edu 1 zone for math.umb.edu Different administrator for each zone since he/she knows the layout of computers in that zone better

7. Delegate Name Resolution Recursive query –Ask server to get answer for you –e.g. request 2 and response 9 in the next diagram Iterative query –Ask server who to ask next –e.g. all other request-response pairs

8. DNS Resolver and Local DNS Server Application DNS resolver Local DNS server 1 10 DNS cache DNS query 2 DNS response 9 Root server 3 4 Top-level domain server 5 6 Second-level domain server 7 8 Caching based on a time-to-live (TTL) assigned by the local DNS server responsible for the host name to reduce latency in DNS translation. Delegate name resolution

9. DNS Caching Performing all these queries take time –And all this before the actual communication takes place –e.g., 1-second latency before starting Web download Caching can substantially reduce overhead –The top-level servers very rarely change –Popular sites (e.g., www.cnn.com) visited often –Local DNS server often has the information cached How DNS caching works –DNS servers cache responses to queries –Responses include a “time to live” (TTL) field –Server deletes the cached entry after TTL expires

10. Negative Caching Remember things that don’t work –Misspellings like www.cnn.comm and www.cnnn.comwww.cnn.comm www.cnnn.com –These can take a long time to fail the first time –Good to remember that they don’t work –… so the failure takes less time the next time around

11. Zone file example $ORIGIN example.com. $TTL 86400 @ SOA dns1.example.com. hostmaster.example.com. ( 2001062501 ; serial 21600 ; refresh after 6 hours 3600 ; retry after 1 hour 604800 ; expire after 1 week 86400 ) ; minimum TTL of 1 day ; NS dns1.example.com. NS dns2.example.com. dns1 A 10.0.1.1 AAAA aaaa:bbbb::1 dns2 A 10.0.1.2 AAAA aaaa:bbbb::2 ; @ MX 10 mail.example.com. MX 20 mail2.example.com. mail A 10.0.1.5 AAAA aaaa:bbbb::5 mail2 A 10.0.1.6 AAAA aaaa:bbbb::6 ; ; This sample zone file illustrates sharing the same IP addresses for multiple services: ; services A 10.0.1.10 AAAA aaaa:bbbb::10 A 10.0.1.11 AAAA aaaa:bbbb::11 ftp CNAME services.example.com. www CNAME services.example.com. ; ;

12. Resource Records Host(A) records – map a hostname to its IP address www.cs.umb.edu A 192.168.0.10 Load-balancing using round-robin DNS www.cs.umb.edu A 192.168.0.10 www.cs.umb.edu A 192.168.0.11 www.cs.umb.edu A 192.168.0.12 If the machines are on different subnets, DNS will return one that is “closest” to the requester.

13. Canonical Name(CNAME) Records Allow you to give multiple hostnames to one IP address One machine answers 1 IP address, but listens to multiple hostnames For example: ftp CNAME collosus.hasselltech.net

14. Mail Exchanger(MX) Records Identify the mail server(s)for a specific zone or domain Instruct the connecting computers to send all mail destined for a certain domain to a specific machine Multiple MX records can have different preference numbers. The lowest one has the highest priority e.g @ MX 10 mail.hassellltech.net @ MX 100 queue.perigee.net

15. Nameserver(NS) Records Defines the nameservers that can answer queries for a specific domain e.g. @ NS colossus.hasselltech.net. @ NS ns2.hasselltech.net.

16. Start of Authority (SOA) Records Specifies the primary nameservers that are authoritative for a particular zone Also controls how long a non-authoritative nameserver can keep the information it retrieved from the authoritative one –Refresh interval: how long before it needs to refresh –Retry interval: how long to wait before it is allowed to contact the authoritative one –Minimum TTL: how long they can use the information

17. Example of SOA Records @ IN SOA collossus.hasselltech.net. admin.hasselltech.net. ( 200509171203; serial number 100; refresh 50; retry 86400; expire 3600 ); default TTL

18. Pointer (PTR) Records Similar to A records Perform the mapping of IP addresses to hostnames e.g. 61.130.98.66.in-addr.arpa IN PTR alpha.abc.com Internet

19. Service (SRV) Records Indicate the range and availability of services in a zone Also have a preference number e.g _kerbos._tcp._sites.dc._msdcs 600 SRV 100 88 colossus.hasselltch.net service TTL preference port server

20. Using Primary and Secondary Nameservers DNS has built-in redundancy for primary and secondary nameservers Each has a copy of the zone file Each zone has one primary nameserver, but with many secondary nameservers Secondary nameservers have read-only copies of the zone file