3. 25.3
25-1 NAME SPACE
To be unambiguous, the names assigned to machines
must be carefully selected from a name space with
complete control over the binding between the names
and IP addresses.
Flat Name Space: hard to manage for large-scale system
Hierarchical Name Space: name has several parts
Topics discussed in this section:
4. 25.4
25-2 DOMAIN NAME SPACE
To have a hierarchical name space, a domain name
space was designed. In this design the names are
defined in an inverted-tree structure with the root at
the top. The tree can have only 128 levels: level 0
(root) to level 127.
Label
Domain Name
Domain
Topics discussed in this section:
8. 25.8
25-3 DISTRIBUTION OF NAME SPACE
The information contained in the domain name space
must be stored. However, it is very inefficient and also
unreliable to have just one computer store such a huge
amount of information. In this section, we discuss the
distribution of the domain name space.
Hierarchy of Name Servers
Zone
Root Server
Primary and Secondary Servers
Topics discussed in this section:
10. DNS: Root name servers
b USC-ISI Marina del Rey, CA
l ICANN Los Angeles, CA
e NASA Mt View, CA
f Internet Software C. Palo Alto, CA
(and 17 other locations)
i Autonomica, Stockholm (plus 3 other
locations)
k RIPE London (also Amsterdam, Frankfurt)
m WIDE Tokyo
a Verisign, Dulles, VA
c Cogent, Herndon, VA (also Los Angeles)
d U Maryland College Park, MD
g US DoD Vienna, VA
h ARL Aberdeen, MD
j Verisign, ( 11 locations)
13 root name
servers
worldwide
11. TLD and Authoritative Servers
Top-level domain (TLD) servers: responsible for
com, org, net, edu, etc, and all top-level country
domains uk, fr, ca, jp.
Network solutions maintains servers for com TLD
Educause for edu TLD
Authoritative DNS servers: organization’s DNS
servers, providing authoritative hostname to IP
mappings for organization’s servers (e.g., Web
and mail).
Can be maintained by organization or service
provider (paid by the organization)
13. 25.13
Two types of DNS server: A primary server
loads all information from the disk file; the
secondary server loads all information from
the primary server. Reason: redundancy
When the secondary downloads
information from the primary, it is called zone
transfer.
Note
14. 25.14
25-4 DNS IN THE INTERNET
DNS is a protocol that can be used in different
platforms. In the Internet, the domain name space
(tree) is divided into three different sections: generic
domains, country domains, and the inverse domain.
Generic Domains
Country Domains
Inverse Domain
Topics discussed in this section:
20. 25.20
25-5 RESOLUTION
Mapping a name to an address or an address to a
name is called name-address resolution.
Resolver
Mapping Names to Addresses
Mapping Addresses to Names
Recursive Resolution
Caching
Topics discussed in this section:
23. 25.23
Caching: Main Reason for the Efficiency of DNS
All DNS servers cache prior query results
Normal DNS query will not go through the
full steps of recursive/iterative resolution
24. 25.24
25-6 DNS MESSAGES
DNS has two types of messages: query and response.
Both types have the same format. The query message
consists of a header and question records; the
response message consists of a header, question
records, answer records, authoritative records, and
additional records.
Header
Topics discussed in this section:
27. 25.27
25-7 TYPES OF RECORDS
As we saw in Section 25.6, two types of records are
used in DNS. The question records are used in the
question section of the query and response messages.
The resource records are used in the answer,
authoritative, and additional information sections of
the response message.
Question Record
Resource Record
Topics discussed in this section:
28. DNS records
DNS: distributed db storing Resource Records (RR)
Type=NS
name is domain (e.g.
foo.com)
value is name of
authoritative DNS server
for this domain
RR format: (name, value, type, ttl)
Type=A
name is hostname
value is IP address
Type=CNAME
name is alias name for some
“canonical” (the real) name
www.ibm.com is really
servereast.backup2.ibm.com
value is canonical name
Type=MX
value is name of mailserver
associated with name
25.28
29. DNS protocol, messages
DNS protocol : query and reply messages, both with
same message format
msg header
identification: 16 bit # for
query, reply to query
uses same #
flags:
query or reply
recursion desired
recursion available
reply is authoritative
25.29
30. DNS protocol, messages (UDP 53)
Name, type fields
for a query
RRs in
response
to query
records for
authoritative servers
additional “helpful”
info that may be used
Let’s check a web example using Wireshark!
(MX record: nslookup –type=MX cs.ucf.edu or
dig mx cs.ucf.edu)
25.30
31. Inserting records into DNS
Example: just created startup “netwar”
Register name netwar.com at a registrar (e.g., Network
Solutions)
Need to provide registrar with names and IP addresses of your
authoritative name server (primary and secondary)
Registrar inserts two RRs into the com TLD server:
(netwar.com, dns1.netwar.com, NS)
(dns1.netwar.com, 212.212.212.1, A)
Put in authoritative server dns1.netwar.com
Type A record for www.netwar.com
Type CName for netwar.com (alias)
Type MX record for netwar.com (email)
Type A record for the email server
How do people get the IP address of your Web site?
25.31
32. 25.32
25-8 REGISTRARS
How are new domains added to DNS? This is done
through a registrar, a commercial entity accredited by
ICANN. A registrar first verifies that the requested
domain name is unique and then enters it into the
DNS database. A fee is charged.
33. 25.33
25-9 DYNAMIC DOMAIN NAME
SYSTEM (DDNS)
Used when a server has a dynamic-changeable IP
The DNS master file must be updated dynamically.
The Dynamic Domain Name System (DDNS)
therefore was devised to respond to this need. In
DDNS, when a binding between a name and an
address is determined, the information is sent, usually
by DHCP to a primary DNS server. The primary server
updates the zone. The secondary servers are notified
either actively or passively.
34. 25.34
25-10 ENCAPSULATION
DNS can use either UDP or TCP. In both cases the
well-known port used by the server is port 53. UDP is
used when the size of the response message is less than
512 bytes because most UDP packages have a 512-byte
packet size limit. If the size of the response message is
more than 512 bytes, a TCP connection is used.
35. 25.35
DNS can use the services of UDP or TCP
using the well-known port 53.
Note