1/30 DNS : Domain Name System Surasak Sanguanpong nguan@.ac.th http://www...ac.th/~nguan Last updated: May 24, 1999 Outline 2/30 DNS basic name space name resolution process protocol configurations
Why need DNS? 3/30 host table /etc/hosts compiled from HOST.TXT (maintain by SRI NIC) simple text file with has IP address to name mapping problems traffic and load name collision consistency A hierarchical name with distributed control is needed DNS basic 4/30 DNS is a distributed database TCP/IP applications use DNS to map hostname to IP address map IP address to hostname provide e-mail routing information mail nguan@..ac.th > mail...ac.th handle aliases www...ac.th is actually is1...ac.th
Naming Scheme 5/30 cc...ac.th building tree from top to bottom th more specific ac name space is a tree of domain names are case-insensitive cc cc...ac.th Domain Name Space 6/30 root arpa com edu gov int mil net org au th in-addr usu ac cc cc.usu.edu tu cc cc...ac.th arpa domains generic domains country domains
DNS Management 7/30 managed by NIC root com th managed by Internic Thailand NIC manages root and top level domain name local admins manage 3rd level or more ac tu or manage by tu managed by Domain Name Concept 8/30 label domain name domain name every node has a label (except root) the list of labels, starting at that node, working up to the root, using a. to separate e.g..ac.th,..ac.th th ac absolute domain name absolute domain name domain name that ends with a period e.g. cc...ac.th. relative domain name relative domain name name to be completed e.g. cc cc
Domains 9/30 domain subtree of the domain name space th ac.th domain ac.ac.th domain tu cc cc...ac.th node Domains and Zones Zone is a subtree for which naming authority has been delegated.ac.th domain.ac.th zone ee.ac.th zone.ac.th domain ee 10/30 sci kps rdi lib sci kps rdi lib case 1 : single DNS administration case 2 : and have authority for their zones
Name Servers 11/30 Name server : Server that store information about the zone ns..ac.th ee ns...ac.th responsibility for..ac.th zone responsibility for.ac.th zone sci kps rdi lib ns...ac.th responsibility for..ac.th zone Type of Name Servers Primary Name server gets the data for zones from files on the host it runs on Secondary Name server gets its zone data from the primary for redundancy and workload distribution 12/30 nontri..ac.th: secondary ns..ac.th : primary ee ns...ac.th : primary ns2...ac.th : secondary sci kps rdi lib ns...ac.th: primary cc...ac.th: secondary
Zone Transfer 13/30 Secondary Name Server pulls zone data over from the primary called zone transfer. primary for.ac.th secondary for..ac.th ns..ac.th nontri..ac.th ns...ac.th primary for..ac.th secondary for.ac.th secondary for..ac.th ns2...ac.th secondary for..ac.th secondary for.ac.th secondary for..ac.th cc...ac.th secondary for..ac.th ns...ac.th primary for..ac.th secondary for.ac.th secondary for..ac.th Root Name Server 14/30 name server must contact other name servers for non local IP it has to know IP address of the top most server called root name server root name server - provide the names and address of the name server authoritative for top level domain name I have to connect root, when I don t have more info ns..ac.th root
Root Name Server (cont.) 15/30 13 root servers are currently available in Internet (Last updated Aug 97) A.ROOT-SERVERS.NET 198.41.0.4 B.ROOT-SERVERS.NET 128.9.0.107 C.ROOT-SERVERS.NET 192.33.4.12 D.ROOT-SERVERS.NET 128.8.10.90 E.ROOT-SERVERS.NET 192.203.230.10 F.ROOT-SERVERS.NET 192.5.5.241 G.ROOT-SERVERS.NET 192.112.36.4 H.ROOT-SERVERS.NET 128.63.2.53 I.ROOT-SERVERS.NET 192.36.148.17 J.ROOT-SERVERS.NET 198.41.0.10 K.ROOT-SERVERS.NET 193.0.14.129 L.ROOT-SERVERS.NET 198.32.64.12 M.ROOT-SERVERS.NET 202.12.27.33 ftp://ftp.rs.internic.net/domain/named.root Name Resolution Process 16/30 name server address of www..ac.th? ask th name servers root name server address of www..ac.th? ask ac.th name servers th name server th address of www..ac.th? ask.ac.th name server ac.th name server ac or address of www..ac.th? ask ns..ac.th name server.ac.th name server tu address of www..ac.th? address is 158.108.2.69 ns..ac.th name server www address is 158.108.2.69 address of www..ac.th? resolver
Reverse Resolution root 17/30 arpa in-addr in-addr.arpa domain in reverse direction of IP address au ac th 0 158 255 tu 0 108 255 0 3 0 34 255 255 cc cc...ac.th 3.34.108.158.in-addr.arpa Caching 18/30 all name servers employ a cache to reduce the DNS traffic standard UNIX keep cache in name server with time-out cache data is non-authoritative
DNS message format (I) 19/30 0 15 16 31 identification:16 flags:16 number of questions :16 number of authority RRs :16 1 or more questions 1 or more answers 1 or more authority 1 or more additional information number of answer RRs:16 number of additional RRs:16 fixed header query reply fixed 12 byte header with 4 variable lth fields DNS message format is defined for both queries and answers DNS message format (II) 20/30 0 15 16 31 identification:16 identification:16 flags:16 flags:16 set by the client and return by the server lets the client match responses to requests
DNS message format (III) 21/30 identification:16 identification:16 flags:16 flags:16 QR QR opcode opcode AA AA TC TC RD RD RA RA (zero) (zero) rcode rcode 1 4 1 1 1 1 3 4 QR opcode AA TC RD RA rcode 0 query, 1 response 0 standard query, 1inverse query, 2server status request 0 authoritatived answer,1 non authoritatived answer 1 truncated. using UDP, reply was>512 bytes, return only 512 bytes 1 recursive desired, 0 iterative 1 recursion available (server support recursion) return code : 0no error, 3name error DNS message format (IV) 22/30 questions questions :32 :32 query query name name query query type type query query class class query class normally 1 means Internet Address query type indicates desired response A 1 IP address NS 2 name server CNAME 5 canonical name PTR 12 pointer record query name is the name being loop, sequence of label begins with 1-byte count 3www322ac2th0 HINFO 13 host info MX 15 mail exchange record
DNS message format (V) 23/30 reply 1 or more answers 1 or more authority 1 or more additional information these three fields share a common resource record (RR) domain domain name name type type class class time-to-live resource lth resource data data domain name : corresp. response name, (query name format) type : response RR type code (see query type) time-to-live : cache life time of RR (often 864001 day) resource lth : specify the size of resource data resource data : the answer, e.g. IP address or other type Operations 24/30 use port 53 typically UDP request and reply if answer is too big, use TCP ip ip hdr hdr UDP UDP hdr hdr DNS DNS hdr hdr query query answer#1 answer#2
Resolver file 25/30 resolver must have address for local name server /etc/resolv.conf on UNIX /etc/resolv.conf # domain domain..ac.th # list of name server nameserver 158.108.32.5 nameserver 158.108.33.3 nameserver 158.108.2.67 Setting up DNS 26/30 BIND (Berkeley Internet Name Domain) package /usr/somewhere/in.named - BSD named DNS server /etc/named.boot - named configuration (tell named where to find database files)
Sample named.boot 27/30 ; Boot file for server ns...ac.th. directory /usr/local/named cache. root.cache primary localhost. primary/local primary 0.0.127.in-addr.arpa primary/local.rev primary..ac.th primary/ secondary.ac.th 158.108.2.67 secondary/ secondary cpc..ac.th 158.108.2.67 secondary/cpc secondary..ac.th 158.108.40.196 secondary/ secondary 108.158.in-addr.arpa 158.108.2.67 secondary/.rev primary 32.108.158.in-addr.arpa primary/zone/zone32 primary 33.108.158.in-addr.arpa primary/zone/zone33 : : : New named.conf format 28/30 BIND Version 8 defines a new format of boot file : named.conf options { directory "/usr/local/named"; }; zone "." { type hint; file "root.cache"; }; zone "localhost." { type master; file "primary/local"; }; zone "0.0.127.in-addr.arpa" { type master; file "primary/local.rev"; }; zone "..ac.th" { type master; file "primary/"; }; zone ".ac.th" { type slave; masters { 158.108.2.67; }; : :
Sample database file 29/30 ; address file for server ns...ac.th. (primary/) @ IN SOA ns...ac.th. dnsadmin.ns...ac.th. ( 1998051300 ; Last Updated May 13,1998 10800 ; Refresh every 3 hours 3600 ; Retry every 1 hour 2592000 ; Expire after 30 days 86400 ; Minimum TTL of 1 day ) ; Name Servers IN NS ns...ac.th. IN NS ns...ac.th. IN NS ns..ac.th. (continue on next page) Sample database file (cont.) 30/30 ; Mail Hubs for the Domain IN MX 10 mailhost...ac.th. IN MX 15 cc...ac.th. ; AI Lab mars IN HINFO "MP 1101D/DECstation 5000-420" IN MX 10 mailhost...ac.th. IN A 158.108.32.97 maspar IN CNAME mars...ac.th. saturn IN HINFO "SPARCstation 2" "SunOS 4.1.3" IN MX 10 mailhost...ac.th. IN A 158.108.32.98 ailab2 IN CNAME saturn...ac.th.