1. 1 K. Salah Module 2.2: Domain Name System IP assigns 32-bit addresses to hosts (interfaces) –Binary addresses easy for computers to manage –All applications use IP addresses through the TCP/IP protocol software –Difficult for humans to remember: % telnet 134.82.11.70 The Domain Name System (DNS) provides translation between symbolic names and IP addresses DNS runs over UDP and uses port 53 of messages less than 512 bytes; otherwise, it uses TCP port 53

2. 2 K. Salah Structure of DNS names Each name consists of a sequence of alphanumeric components separated by periods Examples: www.eg.bucknell.edu www.netbook.cs.purdue.edu charcoal.eg.bucknell.edu Names are hierarchical, with most-significant component on the right Left-most component is computer name

3. 3 K. Salah DNS naming structure Top level domains (right-most components; also known as TLDs) defined by global authority com Commercial organization edu Educational institution gov Government organization mil Military organization Organizations apply for names in a top-level domain: kfupm.edu macdonalds.com Organizations determine own internal structure ccse.kfupm.edu cs.purdue.edu

4. 4 K. Salah Geographic structure Top-level domains are US-centric Geographic TLDs used for organizations in other countries: Countries define their own internal hierarchy: ac.uk and.edu.au are used for academic organizations in the United Kingdom and Australia. In SA, it is edu.sa.

5. 5 K. Salah Domain names within an organization Organizations can create any internal DNS hierarchy Uniqueness of TLD and organization name guarantee uniqueness of any internal name (much like file names in your directories) All but the left-most component of a domain name is called the domain for that name: Authority for creating new subdomains is delegated to each domain Administrator of kfupm.edu has authority to create eg.kfupm.edu and need not contact any central naming authority DNS domains are logical concepts and need not correspond to physical location of organizations DNS domain for an organization can span multiple networks

6. 6 K. Salah Domain name space Names are defined in an inverted-tree structure with the root at the top. Can have 128 levels: level 0 (root) to level 127. Label: –Each node in the tree has a level –Maximum of 63 characters. –Root label is a null string (empty string). –Children of a node have different labels.

7. 7 K. Salah Domain names and labels Full domain name is a sequence of labels separated by dots. Domain names are always read from the node up to the root. Last label is the label of root (null). So, full domain name always ends in a null label [means dot].

8. 8 K. Salah FQDN and PQDN Fully Qualified Domain Name (FQDN) or Absolute Domain Name –Label is terminated by a null string. –Contains the full name of a host. Partially Qualified Domain Name (PQDN) or Relative Domain Name –Not terminated by a null string. –Used when the name to be resolved belongs to the same site as the client. –Resolver supplies the missing part called as suffix. Why Absolute and Relative? Convenience.

9. 9 K. Salah Domains Domain: –Subtree of the domain name space. –Name of the domain is the domain name of the node at the top of the subtree. –A domain can be divided into subdomains.

10. 10 K. Salah DNS and client-server computing DNS names are managed by a hierarchy of DNS servers Root server at top of tree knows about next level servers. Next level servers, in turn, know about lower level servers Some Jargon –Each DNS server is the authoritative server for the names it manages –What a server is responsible for or has authority over is called a zone. A domain can span multiple servers. –Primary server is also called authoritative server –Second server has a copy

11. 11 K. Salah Root Name Servers b USC-ISI Marina del Rey, CA l ICANN Marina del Rey, CA e NASA Mt View, CA f Internet Software C. Palo Alto, CA i NORDUnet Stockholm k RIPE London m WIDE Tokyo a NSI Herndon, VA c PSInet Herndon, VA d U Maryland College Park, MD g DISA Vienna, VA h ARL Aberdeen, MD j NSI (TBD) Herndon, VA 13 root name servers worldwide, according to www.dnso.org 2005 Root Server

12. 12 K. Salah Choosing DNS server architecture Small organizations can use a single server –Easy to administer –Inexpensive Large organizations often use multiple servers –Reliability through redundancy –Improved response time through load-sharing –Delegation of naming authority Locality of reference applies - users will most often look up names of computers within same organization All DNS servers are linked together to form a unified system. Each server knows how to reach a root server and how to reach servers that are authorities for names further down the hierarchy.

13. 13 K. Salah Name Resolution requesting host surf.eurecom.fr gaia.cs.umass.edu root name server local name server dns.eurecom.fr 1 2 3 4 5 6 authoritative name server dns.cs.umass.edu intermediate name server dns.umass.edu 7 8 host surf.eurecom.fr wants IP address of gaia.cs.umass.edu 1. contacts its local DNS server, dns.eurecom.fr 2. dns.eurecom.fr contacts root name server, if necessary 3. root name server eventually contacts authoritative name server, dns.cs.umass.edu, if necessary This is called “Recursive Resolution”

14. 14 K. Salah Types of Queries recursive query: puts burden of name resolution on contacted name server heavy load? iterated query: contacted server replies with name of server to contact “I don’t know this name, but ask the following server(s)” Gives more control to client requesting host surf.eurecom.fr gaia.cs.umass.edu root name server local name server dns.eurecom.fr 1 2 3 4 5 6 authoritative name server dns.cs.umass.edu 7 8 iterated query

15. 15 K. Salah DNS caching DNS resolution can be very inefficient Every host referenced by name triggers a DNS request Every DNS request for the address of a host in a different organization goes through the root server Servers and hosts use caching to reduce the number of DNS requests Cache is a list of recently resolved names and IP addresses Authoritative server include time-to-live with each reply DDNS (Dynamic Domain Name System) When a new node is added/deleted authoritative DNS server is updated accordingly. When a new domain is added, update message is sent to upper servers Servers query other servers periodically for latest changes r update/notify mechanisms under design by IETF m RFC 2136 m http://www.ietf.org/html.charters/dnsind-charter.html

16. 16 K. Salah DNS records DNS: distributed db storing resource records (RR) Type=NS –name is domain (e.g. foo.com) –value is IP address of authoritative name server for this domain RR format: (name, TTL, class, type, value) Type=A –name is hostname –value is IP address Type=CNAME –name is alias name for some “cannonical” (the real) name www.ibm.com is really servereast.backup2.ibm.com –value is cannonical name Type=MX –value is name of mailserver associated with name Class is typically “IN” information, and TTL is in seconds

17. 17 K. Salah DNS protocol, messages DNS protocol : query and reply messages, both with same message format msg header identification: 16 bit # for query, reply to query uses same # flags: –query or reply –recursion desired –recursion available –reply is authoritative

18. 18 K. Salah DNS protocol, messages Name, type fields for a query RRs in reponse to query records for authoritative servers additional “helpful” info that may be used

19. 19 K. Salah Example using “dig” The number next to MX is the preference value in case you get multiple replies.

20. 20 K. Salah Content distribution networks (CDNs) A different business model than web caching The content providers(CNN, Yahoo, Lycos, Google, etc) are the CDN customers. Content replication CDN company (e.g. Akamai.com) installs hundreds of CDN servers throughout Internet –in lower-tier ISPs, close to users CDN replicates its customers’ content in CDN servers. When provider updates content, CDN updates servers But how it works? origin server in North America CDN distribution node CDN server in S. America CDN server in Europe CDN server in Asia

21. 21 K. Salah CDN example Origin server www.foo.com Distributes only GIF files to CDN In each HTML page, it replaces: http://www.foo.com/sports.ruth.gif with http://www.cdn.com/www.foo.com/sports/ruth.gif HTTP request for www.foo.com/sports/sports.html DNS query for www.cdn.com HTTP request for www.cdn.com/www.foo.com/sports/ruth.gif 1 2 3 Origin server CDNs authoritative DNS server Nearby CDN server CDN company cdn.com distributes gif files uses its authoritative DNS server to return the IP of the nearby CDN server Note: No changes is required to DNS, HTTP, or browser to implement this.

22. 22 K. Salah More about CDNs routing requests CDN creates a “map”, indicating distances from leaf ISPs and CDN nodes when query arrives at authoritative DNS server: – server determines ISP from which query originates –uses “map” to determine best CDN server  shortest distance  Least loaded not just Web pages streaming stored audio/video streaming real-time audio/video