SlideShare une entreprise Scribd logo
1  sur  29
Télécharger pour lire hors ligne
Chapter 25
Domain Name System
25.1 Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.
Figure 25.1 Example of using the DNS service
25.2
25
25-
-1 NAME SPACE
1 NAME SPACE
T
T b
b bi
bi th
th i d
i d t
t hi
hi
To
To be
be unambiguous,
unambiguous, the
the names
names assigned
assigned to
to machines
machines
must
must be
be carefully
carefully selected
selected from
from a
a name
name space
space with
with
l t
l t t l
t l th
th bi di
bi di b t
b t th
th
complete
complete control
control over
over the
the binding
binding between
between the
the names
names
and
and IP
IP addresses
addresses.
.
Flat Name Space
Topics discussed in this section:
Topics discussed in this section:
Hierarchical Name Space
25.3
25
25-
-2
2 DOMAIN NAME SPACE
DOMAIN NAME SPACE
T
T h
h hi hi l
hi hi l d i
d i
To
To have
have a
a hierarchical
hierarchical name
name space,
space, a
a domain
domain name
name
space
space was
was designed
designed.
. In
In this
this design
design the
the names
names are
are
d fi d
d fi d i
i i d
i d i h
i h h
h
defined
defined in
in an
an inverted
inverted-
-tree
tree structure
structure with
with the
the root
root at
at
the
the top
top.
. The
The tree
tree can
can have
have only
only 128
128 levels
levels:
: level
level 0
0
( )
( ) l l
l l 127
127
(root)
(root) to
to level
level 127
127.
.
Label
Topics discussed in this section:
Topics discussed in this section:
be
Domain Name
Domain
25.4
Figure 25.2 Domain name space
25.5
Figure 25.3 Domain names and labels
25.6
Figure 25.4 FQDN and PQDN
25.7
Figure 25.5 Domains
25.8
25
25-
-3
3 DISTRIBUTION OF NAME SPACE
DISTRIBUTION OF NAME SPACE
The
The information
information contained
contained in
in the
the domain
domain name
name space
space
The
The information
information contained
contained in
in the
the domain
domain name
name space
space
must
must be
be stored
stored.
. However,
However, it
it is
is very
very inefficient
inefficient and
and also
also
unreliable
unreliable to
to have
have just
just one
one computer
computer store
store such
such a
a huge
huge
unreliable
unreliable to
to have
have just
just one
one computer
computer store
store such
such a
a huge
huge
amount
amount of
of information
information.
. In
In this
this section,
section, we
we discuss
discuss the
the
distribution
distribution of
of the
the domain
domain name
name space
space
distribution
distribution of
of the
the domain
domain name
name space
space.
.
Hierarchy of Name Servers
Topics discussed in this section:
Topics discussed in this section:
Zone
Root Server
Primary and Secondary Servers
25.9
Primary and Secondary Servers
Figure 25.6 Hierarchy of name servers
25.10
Figure 25.7 Zones and domains
25.11
Note
A primary server loads all information
from the disk file; the secondary server
loads all information from
the primary server.
When the secondary downloads
i f ti f th i it i ll d
information from the primary, it is called
zone transfer.
25.12
25
25-
-4
4 DNS IN THE INTERNET
DNS IN THE INTERNET
DNS
DNS is
is a
a protocol
protocol that
that can
can be
be used
used in
in different
different
DNS
DNS is
is a
a protocol
protocol that
that can
can be
be used
used in
in different
different
platforms
platforms.
. In
In the
the Internet,
Internet, the
the domain
domain name
name space
space
(tree)
(tree) is
is divided
divided into
into three
three different
different sections
sections:
: generic
generic
(tree)
(tree) is
is divided
divided into
into three
three different
different sections
sections:
: generic
generic
domains,
domains, country
country domains,
domains, and
and the
the inverse
inverse domain
domain.
.
Generic Domains
Topics discussed in this section:
Topics discussed in this section:
Country Domains
Inverse Domain
25.13
Figure 25.8 DNS IN THE INTERNET
25.14
Figure 25.9 Generic domains
25.15
Table 25.1 Generic domain labels
25.16
Figure 25.10 Country domains
25.17
Figure 25.11 Inverse domain
25.18
25
25-
-5
5 RESOLUTION
RESOLUTION
Mapping
Mapping a
a name
name to
to an
an address
address or
or an
an address
address to
to a
a
name
name is
is called
called name
name-
-address
address resolution
resolution.
.
Topics discussed in this section
Topics discussed in this section
Resolver
Mapping Names to Addresses
Topics discussed in this section:
Topics discussed in this section:
Mapping Names to Addresses
Mapping Addresses to Names
Recursive Resolution
Caching
25.19
Figure 25.12 Recursive resolution
25.20
Figure 25.13 Iterative resolution
25.21
25
25-
-6
6 DNS MESSAGES
DNS MESSAGES
DNS
DNS has
has two
two types
types of
of messages
messages:
: query
query and
and response
response
DNS
DNS has
has two
two types
types of
of messages
messages:
: query
query and
and response
response.
.
Both
Both types
types have
have the
the same
same format
format.
. The
The query
query message
message
consists
consists of
of a
a header
header and
and question
question records
records;
; the
the
consists
consists of
of a
a header
header and
and question
question records
records;
; the
the
response
response message
message consists
consists of
of a
a header,
header, question
question
records
records answer
answer records
records authoritative
authoritative records
records and
and
records,
records, answer
answer records,
records, authoritative
authoritative records,
records, and
and
additional
additional records
records.
.
Header
Topics discussed in this section:
Topics discussed in this section:
25.22
Figure 25.14 Query and response messages
25.23
Figure 25.15 Header format
25.24
25
25-
-7
7 TYPES OF RECORDS
TYPES OF RECORDS
A
A i
i S ti
S ti 25
25 6
6 t
t t
t f
f d
d
As
As we
we saw
saw in
in Section
Section 25
25.
.6
6,
, two
two types
types of
of records
records are
are
used
used in
in DNS
DNS.
. The
The question
question records
records are
are used
used in
in the
the
ti
ti ti
ti f
f th
th d
d
question
question section
section of
of the
the query
query and
and response
response messages
messages.
.
The
The resource
resource records
records are
are used
used in
in the
the answer,
answer,
th it ti
th it ti d
d dditi l
dditi l i f ti
i f ti ti
ti f
f
authoritative,
authoritative, and
and additional
additional information
information sections
sections of
of
the
the response
response message
message.
.
Q ti R d
Topics discussed in this section:
Topics discussed in this section:
Question Record
Resource Record
25.25
25
25-
-8
8 REGISTRARS
REGISTRARS
How
How are
are new
new domains
domains added
added to
to DNS?
DNS? This
This is
is done
done
How
How are
are new
new domains
domains added
added to
to DNS?
DNS? This
This is
is done
done
through
through a
a registrar,
registrar, a
a commercial
commercial entity
entity accredited
accredited by
by
ICANN
ICANN A
A registrar
registrar first
first verifies
verifies that
that the
the requested
requested
ICANN
ICANN.
. A
A registrar
registrar first
first verifies
verifies that
that the
the requested
requested
domain
domain name
name is
is unique
unique and
and then
then enters
enters it
it into
into the
the
DNS
DNS database
database A
A fee
fee is
is charged
charged
DNS
DNS database
database.
. A
A fee
fee is
is charged
charged.
.
25.26
25
25-
-9
9 DYNAMIC DOMAIN NAME
DYNAMIC DOMAIN NAME
SYSTEM (DDNS)
SYSTEM (DDNS)
The
The DNS
DNS master
master file
file must
must be
be updated
updated dynamically
dynamically.
.
The
The Dynamic
Dynamic Domain
Domain Name
Name System
System (DDNS)
(DDNS)
therefore
therefore was
was devised
devised to
to respond
respond to
to this
this need
need.
. In
In
DDNS,
DDNS, when
when a
a binding
binding between
between a
a name
name and
and an
an
address
address is
is determined,
determined, the
the information
information is
is sent,
sent, usually
usually
by
by DHCP
DHCP to
to a
a primary
primary DNS
DNS server
server.
. The
The primary
primary server
server
updates
updates the
the zone
zone.
. The
The secondary
secondary servers
servers are
are notified
notified
either
either actively
actively or
or passively
passively.
.
25.27
25
25-
-10
10 ENCAPSULATION
ENCAPSULATION
DNS
DNS can
can use
use either
either UDP
UDP or
or TCP
TCP In
In both
both cases
cases the
the
DNS
DNS can
can use
use either
either UDP
UDP or
or TCP
TCP.
. In
In both
both cases
cases the
the
well
well-
-known
known port
port used
used by
by the
the server
server is
is port
port 53
53.
. UDP
UDP is
is
used
used when
when the
the size
size of
of the
the response
response message
message is
is less
less than
than
used
used when
when the
the size
size of
of the
the response
response message
message is
is less
less than
than
512
512 bytes
bytes because
because most
most UDP
UDP packages
packages have
have a
a 512
512-
-byte
byte
packet
packet size
size limit
limit If
If the
the size
size of
of the
the response
response message
message is
is
packet
packet size
size limit
limit.
. If
If the
the size
size of
of the
the response
response message
message is
is
more
more than
than 512
512 bytes,
bytes, a
a TCP
TCP connection
connection is
is used
used.
.
25.28
Note
DNS can use the services of UDP or TCP
i th ll k t 53
using the well-known port 53.
25.29

Contenu connexe

Similaire à Dns

25-Domain Name System.ppt
25-Domain Name System.ppt25-Domain Name System.ppt
25-Domain Name System.pptthiru17270
 
02 configuring and-troubleshooting-dns
02 configuring and-troubleshooting-dns02 configuring and-troubleshooting-dns
02 configuring and-troubleshooting-dnsapshirame
 
Network and System Administration chapter 2
Network and System Administration chapter 2Network and System Administration chapter 2
Network and System Administration chapter 2IgguuMuude
 
Domain name system presentation
Domain name system presentationDomain name system presentation
Domain name system presentationAnchit Dhingra
 
DNS(Domain Name System)
DNS(Domain Name System)DNS(Domain Name System)
DNS(Domain Name System)Vishal Mittal
 
Windows server 2008 step by-step guide for dns in small networks
Windows server 2008 step by-step guide for dns in small networksWindows server 2008 step by-step guide for dns in small networks
Windows server 2008 step by-step guide for dns in small networksOchiroo Dorj
 
Question 1 Refer to the graphic above to answer the following .docx
Question 1 Refer to the graphic above to answer the following .docxQuestion 1 Refer to the graphic above to answer the following .docx
Question 1 Refer to the graphic above to answer the following .docxIRESH3
 
Dns Configuration
Dns ConfigurationDns Configuration
Dns ConfigurationLohit Ahuja
 
Pmw2 k3ni 1-2b
Pmw2 k3ni 1-2bPmw2 k3ni 1-2b
Pmw2 k3ni 1-2bhariclant1
 
Pmw2 k3ni 1-3a
Pmw2 k3ni 1-3aPmw2 k3ni 1-3a
Pmw2 k3ni 1-3ahariclant1
 
DNSandDNSSecurity (1).pptx
DNSandDNSSecurity (1).pptxDNSandDNSSecurity (1).pptx
DNSandDNSSecurity (1).pptxAisha Siddiqui
 

Similaire à Dns (20)

ch25.ppt
ch25.pptch25.ppt
ch25.ppt
 
25-Domain Name System.ppt
25-Domain Name System.ppt25-Domain Name System.ppt
25-Domain Name System.ppt
 
02 configuring and-troubleshooting-dns
02 configuring and-troubleshooting-dns02 configuring and-troubleshooting-dns
02 configuring and-troubleshooting-dns
 
Network and System Administration chapter 2
Network and System Administration chapter 2Network and System Administration chapter 2
Network and System Administration chapter 2
 
What is dns
What is dnsWhat is dns
What is dns
 
Domain name system presentation
Domain name system presentationDomain name system presentation
Domain name system presentation
 
6425 b 10
6425 b 106425 b 10
6425 b 10
 
Application Layer.pptx
Application Layer.pptxApplication Layer.pptx
Application Layer.pptx
 
DNS(Domain Name System)
DNS(Domain Name System)DNS(Domain Name System)
DNS(Domain Name System)
 
Dns
DnsDns
Dns
 
Windows server 2008 step by-step guide for dns in small networks
Windows server 2008 step by-step guide for dns in small networksWindows server 2008 step by-step guide for dns in small networks
Windows server 2008 step by-step guide for dns in small networks
 
Question 1 Refer to the graphic above to answer the following .docx
Question 1 Refer to the graphic above to answer the following .docxQuestion 1 Refer to the graphic above to answer the following .docx
Question 1 Refer to the graphic above to answer the following .docx
 
Configuring Dns
Configuring DnsConfiguring Dns
Configuring Dns
 
Dns Configuration
Dns ConfigurationDns Configuration
Dns Configuration
 
Dns 2
Dns 2Dns 2
Dns 2
 
Pmw2 k3ni 1-2b
Pmw2 k3ni 1-2bPmw2 k3ni 1-2b
Pmw2 k3ni 1-2b
 
Introduction
IntroductionIntroduction
Introduction
 
Pmw2 k3ni 1-3a
Pmw2 k3ni 1-3aPmw2 k3ni 1-3a
Pmw2 k3ni 1-3a
 
DNSandDNSSecurity (1).pptx
DNSandDNSSecurity (1).pptxDNSandDNSSecurity (1).pptx
DNSandDNSSecurity (1).pptx
 
Dns
DnsDns
Dns
 

Dernier

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodJuan lago vázquez
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProduct Anonymous
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationSafe Software
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businesspanagenda
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesBoston Institute of Analytics
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century educationjfdjdjcjdnsjd
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MIND CTI
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CVKhem
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...apidays
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoffsammart93
 

Dernier (20)

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 

Dns

  • 1. Chapter 25 Domain Name System 25.1 Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.
  • 2. Figure 25.1 Example of using the DNS service 25.2
  • 3. 25 25- -1 NAME SPACE 1 NAME SPACE T T b b bi bi th th i d i d t t hi hi To To be be unambiguous, unambiguous, the the names names assigned assigned to to machines machines must must be be carefully carefully selected selected from from a a name name space space with with l t l t t l t l th th bi di bi di b t b t th th complete complete control control over over the the binding binding between between the the names names and and IP IP addresses addresses. . Flat Name Space Topics discussed in this section: Topics discussed in this section: Hierarchical Name Space 25.3
  • 4. 25 25- -2 2 DOMAIN NAME SPACE DOMAIN NAME SPACE T T h h hi hi l hi hi l d i d i To To have have a a hierarchical hierarchical name name space, space, a a domain domain name name space space was was designed designed. . In In this this design design the the names names are are d fi d d fi d i i i d i d i h i h h h defined defined in in an an inverted inverted- -tree tree structure structure with with the the root root at at the the top top. . The The tree tree can can have have only only 128 128 levels levels: : level level 0 0 ( ) ( ) l l l l 127 127 (root) (root) to to level level 127 127. . Label Topics discussed in this section: Topics discussed in this section: be Domain Name Domain 25.4
  • 5. Figure 25.2 Domain name space 25.5
  • 6. Figure 25.3 Domain names and labels 25.6
  • 7. Figure 25.4 FQDN and PQDN 25.7
  • 9. 25 25- -3 3 DISTRIBUTION OF NAME SPACE DISTRIBUTION OF NAME SPACE The The information information contained contained in in the the domain domain name name space space The The information information contained contained in in the the domain domain name name space space must must be be stored stored. . However, However, it it is is very very inefficient inefficient and and also also unreliable unreliable to to have have just just one one computer computer store store such such a a huge huge unreliable unreliable to to have have just just one one computer computer store store such such a a huge huge amount amount of of information information. . In In this this section, section, we we discuss discuss the the distribution distribution of of the the domain domain name name space space distribution distribution of of the the domain domain name name space space. . Hierarchy of Name Servers Topics discussed in this section: Topics discussed in this section: Zone Root Server Primary and Secondary Servers 25.9 Primary and Secondary Servers
  • 10. Figure 25.6 Hierarchy of name servers 25.10
  • 11. Figure 25.7 Zones and domains 25.11
  • 12. Note A primary server loads all information from the disk file; the secondary server loads all information from the primary server. When the secondary downloads i f ti f th i it i ll d information from the primary, it is called zone transfer. 25.12
  • 13. 25 25- -4 4 DNS IN THE INTERNET DNS IN THE INTERNET DNS DNS is is a a protocol protocol that that can can be be used used in in different different DNS DNS is is a a protocol protocol that that can can be be used used in in different different platforms platforms. . In In the the Internet, Internet, the the domain domain name name space space (tree) (tree) is is divided divided into into three three different different sections sections: : generic generic (tree) (tree) is is divided divided into into three three different different sections sections: : generic generic domains, domains, country country domains, domains, and and the the inverse inverse domain domain. . Generic Domains Topics discussed in this section: Topics discussed in this section: Country Domains Inverse Domain 25.13
  • 14. Figure 25.8 DNS IN THE INTERNET 25.14
  • 15. Figure 25.9 Generic domains 25.15
  • 16. Table 25.1 Generic domain labels 25.16
  • 17. Figure 25.10 Country domains 25.17
  • 18. Figure 25.11 Inverse domain 25.18
  • 19. 25 25- -5 5 RESOLUTION RESOLUTION Mapping Mapping a a name name to to an an address address or or an an address address to to a a name name is is called called name name- -address address resolution resolution. . Topics discussed in this section Topics discussed in this section Resolver Mapping Names to Addresses Topics discussed in this section: Topics discussed in this section: Mapping Names to Addresses Mapping Addresses to Names Recursive Resolution Caching 25.19
  • 20. Figure 25.12 Recursive resolution 25.20
  • 21. Figure 25.13 Iterative resolution 25.21
  • 22. 25 25- -6 6 DNS MESSAGES DNS MESSAGES DNS DNS has has two two types types of of messages messages: : query query and and response response DNS DNS has has two two types types of of messages messages: : query query and and response response. . Both Both types types have have the the same same format format. . The The query query message message consists consists of of a a header header and and question question records records; ; the the consists consists of of a a header header and and question question records records; ; the the response response message message consists consists of of a a header, header, question question records records answer answer records records authoritative authoritative records records and and records, records, answer answer records, records, authoritative authoritative records, records, and and additional additional records records. . Header Topics discussed in this section: Topics discussed in this section: 25.22
  • 23. Figure 25.14 Query and response messages 25.23
  • 24. Figure 25.15 Header format 25.24
  • 25. 25 25- -7 7 TYPES OF RECORDS TYPES OF RECORDS A A i i S ti S ti 25 25 6 6 t t t t f f d d As As we we saw saw in in Section Section 25 25. .6 6, , two two types types of of records records are are used used in in DNS DNS. . The The question question records records are are used used in in the the ti ti ti ti f f th th d d question question section section of of the the query query and and response response messages messages. . The The resource resource records records are are used used in in the the answer, answer, th it ti th it ti d d dditi l dditi l i f ti i f ti ti ti f f authoritative, authoritative, and and additional additional information information sections sections of of the the response response message message. . Q ti R d Topics discussed in this section: Topics discussed in this section: Question Record Resource Record 25.25
  • 26. 25 25- -8 8 REGISTRARS REGISTRARS How How are are new new domains domains added added to to DNS? DNS? This This is is done done How How are are new new domains domains added added to to DNS? DNS? This This is is done done through through a a registrar, registrar, a a commercial commercial entity entity accredited accredited by by ICANN ICANN A A registrar registrar first first verifies verifies that that the the requested requested ICANN ICANN. . A A registrar registrar first first verifies verifies that that the the requested requested domain domain name name is is unique unique and and then then enters enters it it into into the the DNS DNS database database A A fee fee is is charged charged DNS DNS database database. . A A fee fee is is charged charged. . 25.26
  • 27. 25 25- -9 9 DYNAMIC DOMAIN NAME DYNAMIC DOMAIN NAME SYSTEM (DDNS) SYSTEM (DDNS) The The DNS DNS master master file file must must be be updated updated dynamically dynamically. . The The Dynamic Dynamic Domain Domain Name Name System System (DDNS) (DDNS) therefore therefore was was devised devised to to respond respond to to this this need need. . In In DDNS, DDNS, when when a a binding binding between between a a name name and and an an address address is is determined, determined, the the information information is is sent, sent, usually usually by by DHCP DHCP to to a a primary primary DNS DNS server server. . The The primary primary server server updates updates the the zone zone. . The The secondary secondary servers servers are are notified notified either either actively actively or or passively passively. . 25.27
  • 28. 25 25- -10 10 ENCAPSULATION ENCAPSULATION DNS DNS can can use use either either UDP UDP or or TCP TCP In In both both cases cases the the DNS DNS can can use use either either UDP UDP or or TCP TCP. . In In both both cases cases the the well well- -known known port port used used by by the the server server is is port port 53 53. . UDP UDP is is used used when when the the size size of of the the response response message message is is less less than than used used when when the the size size of of the the response response message message is is less less than than 512 512 bytes bytes because because most most UDP UDP packages packages have have a a 512 512- -byte byte packet packet size size limit limit If If the the size size of of the the response response message message is is packet packet size size limit limit. . If If the the size size of of the the response response message message is is more more than than 512 512 bytes, bytes, a a TCP TCP connection connection is is used used. . 25.28
  • 29. Note DNS can use the services of UDP or TCP i th ll k t 53 using the well-known port 53. 25.29