The Use of DNS Resource Records



Similar documents
Motivation. Domain Name System (DNS) Flat Namespace. Hierarchical Namespace

- Domain Name System -

Domain Name System :49:44 UTC Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement

Lecture 2 CS An example of a middleware service: DNS Domain Name System

THE MASTER LIST OF DNS TERMINOLOGY. First Edition

THE MASTER LIST OF DNS TERMINOLOGY. v 2.0

Copyright

DNS. Computer networks - Administration 1DV202. fredag 30 mars 12

Understanding DNS (the Domain Name System)

How to Add Domains and DNS Records

Configuring a Domain to work with your Server

HTG XROADS NETWORKS. Network Appliance How To Guide: DNS Delegation. How To Guide

DNS. Computer Networks. Seminar 12

How to set up the Integrated DNS Server for Inbound Load Balancing

Agenda. Network Services. Domain Names. Domain Name. Domain Names Domain Name System Internationalized Domain Names. Domain Names & DNS

Networking Domain Name System

Distributed Systems. 09. Naming. Paul Krzyzanowski. Rutgers University. Fall 2015

CS3250 Distributed Systems

Talk-101 User Guide. DNSGate

Domain Name System (DNS) Fundamentals

Introduction to DNS CHAPTER 5. In This Chapter

DNS Domain Name System

Domain Name System. CS 571 Fall , Kenneth L. Calvert University of Kentucky, USA All rights reserved

Networking Domain Name System

How To Manage Dns On An Elfiq Link Load Balancer (Link Balancer) On A Pcode (Networking) On Ipad Or Ipad (Netware) On Your Ipad On A Ipad At A Pc Or Ipa

The Domain Name System

Application Protocols in the TCP/IP Reference Model

Application Protocols in the TCP/IP Reference Model. Application Protocols in the TCP/IP Reference Model. DNS - Concept. DNS - Domain Name System

DNS and BIND Primer. Pete Nesbitt linux1.ca. April 2012

Switching Your DNS WiredTree

Domain Name System (DNS) Session-1: Fundamentals. Ayitey Bulley

3. The Domain Name Service

HTG XROADS NETWORKS. Network Appliance How To Guide: EdgeDNS. How To Guide

The Domain Name System

How To Guide Edge Network Appliance How To Guide:

DNS + DHCP. Michael Tsai 2015/04/27

DNS ActiveX Control for Microsoft Windows. Copyright Magneto Software All rights reserved

ECE 4321 Computer Networks. Network Programming

The Domain Name System

Section 1 Overview Section 2 Home... 5

Configuring DNS. Finding Feature Information

LinkProof DNS Quick Start Guide

Configuring the BIND name server (named) Configuring the BIND resolver Constructing the name server database files

THE DOMAIN NAME SYSTEM DNS

DNS Conformance Test Specification For Client

Application and service delivery with the Elfiq idns module

what s in a name? taking a deeper look at the domain name system mike boylan penn state mac admins conference

Distributed Systems. 22. Naming Paul Krzyzanowski. Rutgers University. Fall 2013

The Domain Name System (DNS)

DNS. The Root Name Servers. DNS Hierarchy. Computer System Security and Management SMD139. Root name server. .se name server. .

Network Working Group. Category: Best Current Practice S. Bradner Harvard University M. Patton Consultant July 1997

2 HDE Controller X DNS Server Manual

CSIS 3230 Computer Networking Principles, Spring 2012 Lab 7 Domain Name System (DNS)

Goal of this session

IPV6 Deployment Status for Higher Education Institutions' Website of Ministry of Education Malaysia

Use Domain Name System and IP Version 6

The Domain Name System (DNS)

Local DNS Attack Lab. 1 Lab Overview. 2 Lab Environment. SEED Labs Local DNS Attack Lab 1

Enterprise Architecture Office Resource Document Design Note - Domain Name System (DNS)

You can specify IPv4 and IPv6 addresses while performing various tasks in this feature. The resource

Networking Domain Name System

Inbound Load Balance. User Manual

My Services Online Service Support. User Guide for DNS and NTP services

OpenSRS Service DNS Configuration Guide

Copyright International Business Machines Corporation All rights reserved. US Government Users Restricted Rights Use, duplication or disclosure

Internet-Praktikum I Lab 3: DNS

Glossary of Technical Terms Related to IPv6

Introduction to Network Operating Systems

How to Configure the Windows DNS Server

netkit lab dns Università degli Studi Roma Tre Dipartimento di Informatica e Automazione Computer Networks Research Group Version Author(s)

Domain Name System. 188lecture12.ppt. Pirkko Kuusela, Markus Peuhkuri, Jouni Karvo

Chapter 23 The Domain Name System (DNS)

DNS at NLnet Labs. Matthijs Mekking

DNS and Interface User Guide

DNS. DNS Fundamentals. Goals of this lab: Prerequisites: LXB, NET

dnsperf DNS Performance Tool Manual

Domain Name Server. Training Division National Informatics Centre New Delhi

DNS and BIND. David White

Part 5 DNS Security. SAST01 An Introduction to Information Security Martin Hell Department of Electrical and Information Technology

Domain Name System DNS

The secret life of a DNS query. Igor Sviridov <sia@nest.org>

IPv6 support in the DNS

Overview. Principles Creating reverse zones Setting up nameservers Reverse delegation procedures IPv6 Reverse DNS

Domain Name System (DNS) Services

DNS Session 4: Delegation and reverse DNS. Joe Abley AfNOG 2006 workshop

How to Configure DNS Zones

API of DNS hosting. For DNS-master and Secondary services Table of contents

Using Webmin and Bind9 to Setup DNS Sever on Linux

DNS (Domain Name System) is the system & protocol that translates domain names to IP addresses.

Building a Linux IPv6 DNS Server

Domain Name System Security

Names vs. Addresses. Flat vs. Hierarchical Space. Domain Name System (DNS) Computer Networks. Lecture 5: Domain Name System

Operational Problems in IPv6: Fallback and DNS issues

Domain Name System. Heng Sovannarith

Internet Engineering Task Force. Intended status: Experimental Expires: September 6, 2012 March 5, 2012

Configuring an External Domain

Advanced DNS Course. Module 4. DNS Load Balancing

Internetworking with TCP/IP Unit 10. Domain Name System

DNS : Domain Name System

Domain Name Servers. Domain Types WWW host names. Internet Names. COMP476 Networked Computer Systems. Domain Name Servers

Transcription:

International Journal of Advances in Electrical and Electronics Engineering 230 Available online at www.ijaeee.com & www.sestindia.org/volume-ijaeee/ ISSN: 2319-1112 Simar Preet Singh Systems Engineer, Infosys Limited, Plot No.-24, Rajiv Gandhi Infotech Park, Phase II, Pune - 411057 (INDIA) er.simarpreetsingh@gmail.com Abstract: DNS (Domain Name System) is the service which translates between Internet names and Internet addresses. Internet names are the names which we use to refer to hosts on the Internet, such as www.websites.net. Internet addresses are the numbers which routers use to move traffic across the Internet, such as 69.64.156.229. DNS records or Zone files are used for mapping URLs to an IP. Located on servers called the DNS servers, these records are typically the connection of your website with the outside world. This paper covers a detailed study of DNS Resource Records. It describes the information of what the DNS Resource Records are and what is purpose to use them. This paper includes all of the various types of resource records with their syntax and suitable examples to depict how DNS records are used. In the end, this paper explains the difference between AAAA and A6 record types. The A6 record is a new DNS record, described in detail in RFC 2874, meant to replace the AAAA record in IPv6 address resolution. Keywords: DNS Resource Records, A Record, AAAA, CNAME, MX, NS, SOA, TXT, A6, A6 Vs AAAA, TTL. I. Introduction A Resource Record (RR) is the basic data element in the domain name system. Resource Records define data types in the Domain Name System (DNS). The resource records are created to help DNS work like zone, so these are also called zone files. DNS records are used for mapping URLs to an IP[1]. These records are typically the connection of your website with the outside world. Requests for your website are forwarded to your DNS servers and then get pointed to the Web Servers that serve the website or to Email servers that handle the incoming email. Resource Records are stored in binary format internally for use by DNS software[2]. But resource records are sent across a network in text format while they perform zone transfers. II. Elements of DNS Record DNS records consist of several elements. Each element needs to be correct for the DNS record as a whole to function. The elements are: Hostname Type Content Time To Live (TTL) www A 195.8.66.210 400 The DNS zone of your website will be made up of several records, each with these elements. Below we discuss the function of these elements as well as the values that can be used for them. a) Hostname On the Internet a hostname is a domain name label that points to a server, like tagadab.com or www.websites.net which point to a server on the IP address 69.64.156.229. When entered in a DNS record you can normally omit everything from the first. onwards in the domain name as the DNS server fills this information in automatically. For example, a hostname of www in the DNS zone of the domain websites.net will be read as www.websites.net. The hostname of a DNS record defines where traffic for that hostname is directed. Legal characters for hostnames are letters a-z, numbers 0-9 and the -. Hostnames cannot start or end with - and must be 1-63 characters long.

231 b) Type Ultimately, DNS is a kind of distributed database, and each query or response includes a name, a type, and (for a response) a value. The resource types represent different purposes. We will explain some of the commonly used types of DNS record in the next section. c) Content The content portion of a DNS record refers to the destination of the traffic to the hostname specified in the record. This is commonly an IP address (in the case of A records) but can be another domain name (so long as the domain name is appended with a. ). d) Time to Live (TTL) The TTL is a positive integer that represents a number of seconds. In a DNS record the TTL specifies how long the record can be cached by your ISPs recursive name server. Simply put, the value of a TTL in a record will determine how quickly any DNS changes you make will affect users across the Internet[9]. If the record you are changing had a high TTL (for example - 86400 or 24 hours) then the changes you are making will take a long time to propagate throughout the Internet. Before making any DNS record changes it is advisable to check the TTLs of your existing records. If they are over an hour (with a TTL value greater than 3600) then you should reduce them to around the 400-3600 mark[3]. After twenty four hours you can then make any further changes to your DNS records knowing that these changes will take effect relatively quickly. III. Resource Record Types Figure 1: The various resource record types There are dozens of resource record types, though only a few are in common usage. The rest are experimental, obsolete, or serve obscure purposes that rarely come up in practice. In practice, there are 23 types of resource record types defined for DNS. The commonly used record types are explained as follows:- a) A Record A Record (Address Record) is an IP Address record, and is the most obvious type of data supported by DNS. Indeed; many users have no idea that DNS deals with anything other than IP addresses. Address Record, assigns an IP address to a domain or subdomain name. When the domain name system was designed it was recommended that no two A records refer to the same IP address. Suppose you have the somedomain.tld domain and want to assign 10.10.0.1 IP address to your web server, then you should create an A record with www.somedomain.tld as Fully Qualified Domain Name and 10.10.0.1 in the value field. From now on, all the requests for www.somedomain.tld will be sent to a server with that IP[4]. Basically, A record is useful when you have subdomains residing on various systems. Example of A Record with Syntax websites.net. IN A 69.64.156.229 Where IN indicates Internet and A indicates the Address record. The above example indicates that the IP Address for the domain websites.net is 69.64.156.229. b) AAAA Record

IJAEEE,Volume1,Number 2 Simar Preet Singh et al. An AAAA record or IPv6 address record maps a hostname to a 128-bit IPv6 address. The regular DNS Address resource record is defined for a 32-bit IPv4 address, so a new one was created to allow a domain name to be associated with a 128 bit IPv6 address. The four A s ( AAAA ) are a mnemonic to indicate that the IPv6 address is four times the size of the IPv4 address. The AAAA record is structured in very much the same way as the A record in both binary and master file formats; it is just much larger. The DNS resource record Type value for AAAA is 28. Example of AAAA Record with Syntax linux aaaa 3ffe:1900:4545:2:02d0:09ff:fef7:6d2c The AAAA record provides transition and coexistence between IPv4 and IPv6 networks. An IPv4 nameserver can provide IPv6 addresses. c) CNAME Record A CNAME record or canonical name record makes one domain name an alias of another. The aliased domain gets all the subdomains and DNS records of the original. You should use a CNAME record whenever you want associate a new subdomain to an already existing A record; i.e. you can make www.somedomain.tld to somedomain.tld, which should already have been assigned an IP with an A record.this allows you to have as many subdomains as you wish without having to specify the IP for every record. Use a CNAME if you have more services pointing to the same IP. This way you will have to update only one record in the convenience of a change of IP address. Example of CNAME Record with Syntax mail.example.com IN CNAME mail.example.net where IN indicates Internet and CNAME indicates CNAME record. d) MX Record An MX record or mail exchange record maps a domain name to a list of mail exchange servers for that domain. Example with MX Record Syntax - Single mail servers mydomain.com. 14400 IN MX 0 mydomain.com. The MX record shows that all emails @ mydomain.com should be routed to the mail server at mydomain.com. The DNS record shows that mydomain.com is located at 26.34.9.14. This means that email meant for test@mydomain.com will be routed to the email server at 26.34.9.14. This finishes the task of the MX record. The email server on that server then takes over, collects the email and then proceeds to distribute it to the user ``test''. It is important that there be a dot(``.'') after the domain name in the MX record. If the dot is absent, it routes to ``mydomain.com.mydomain.com''. The number 0, indicates Preferance number. Mail is always routed to the server which has the lowest Preferance number. If there is only one mail server, it is safe to mark it 0. Using Multiple mail servers If you want to use multiple mail servers you have to use MX record preferences. The MX record preference values indicate which mail server to use and in which order to try them when they fail or don't respond. A larger preference number is less preferred. Thus, a mail exchanger with a preference of zero (0) is always preferred over all other mail exchangers. Setting preference values to equal numbers makes mail servers equally preferred. Example with MX Record Syntax - Multiple mail servers mydomain.com. 14400 IN MX 0 mydomain.com. mydomain.com. 14400 IN MX 30 server2.mydomain.com You can have unlimited MX entries for Fallback or backup purpose. If all the MX records are equal Preference

233 numbers, the client simply attempts all equal Preference servers in random order, and then goes to MX record with the next highest Preference number. e) NS Record An NS record or name server record maps a domain name to a list of DNS servers authoritative for that domain. Delegations depend on NS records. NS Record Name Server Record which indicates the Authoritative Name Servers for a particular Domain. The NS records of the Authoritative Name Server for any given Domain will be listed on the Parent Server. These are called as the Delegation Records as these records on the Parent Server indicates the delegation of the domain to the Authoritative servers. The NS record will also be listed in the Zone records of the Authoritative Name Server itself. These records are called as the Authoritative Records. The NS records found on the Parent Server should match the NS records on the Authoritative Server as well. However, you can have NS records listed on the Authoritative server that is not listed in the Parent Server. This arrangement is normally used to configure Stealth Name Servers. Example of NS Record With syntax example.com. IN NS ns1.live.secure.com. where IN indicates the Internet and NS indicates the type of record which Name Server record. The above example indicates that the ns1.live.secure. com is the authoritative server for the domain example.com. f) SOA Record An SOA record or start of authority record specifies the DNS server providing authoritative information about an Internet domain, the email of the domain administrator, the domain serial number, and several timers relating to refreshing the zone. An SOA Record is the most essential part of a Zone file. The SOA record is a way for the Domain Administrator to give out simple information about the domain like, how often it is updated, when it was last updated, when to check back for more info, what is the adomins email address and so on[7]. A Zone file can contain only one SOA Record. A properly optimized and updated SOA record can reduce bandwidth between nameservers, increase the speed of website access and ensure the site is alive even when the primary DNS server is down. Example of SOA Record with syntax Here is the SOA record. Notice the starting bracket ``(``. This has to be on the same line, otherwise the record gets broken. name TTL class rr Nameserver email-address mydomain.com. 14400 IN SOA ns.mynameserver.com. root.ns.mynameserver.com. (2004123001 ; Serial number 86000 ; Refresh rate in seconds 7200 ; Update Retry in seconds 3600000 ; Expiry in seconds 600 ; minimum in seconds ) g) TXT Text (TXT) resource record maps a DNS domain name specified in the owner field to a string of characters in text_string serving as descriptive text. Syntax: Example: owner ttl class TXT text_string websites.net TXT "This is an example of additional domain name information."

IJAEEE,Volume1,Number 2 Simar Preet Singh et al. It's generally (but not universally) allowed that one name can have multiple resource records, even more than one of the same type[6]. A common example would be a machine having multiple IP addresses, both of which are entered in DNS: www.websites.net. IN A 69.64.156.229 www.websites.net. IN A 69.64.158.245 Here, the name www.websites.net has two IP address records associated with it, and both will be returned in answer to an A query for this name. Note that the order of the addresses, as they appear in the file, is not maintained in the responses they're usually shuffled. IV. A6 Record There are new records in DNS for IPv6, which support the ease of maintenance and mobility which are hallmarks of IPv6. These will be available in BIND version 9, which is currently in beta test and is running at the ilabs IPv6 demonstration booth. The A6 and DNAME records, and BINARY LABEL syntax, allow a site to make DNS entries for IPv6 addresses, without the necessity of hard- coding the Provider's address fields. The A6 record is used to represent a 128-bit IPv6 address. When an IPv6 aware application wants to look up the name of an IPv6 server, it will request an A6 record from the DNS server. (Just as in IPv4, applications request the A record to translate names to addresses.) The first several bits (words, actually) of the address are the Provider's prefix. In IPv4, this is analogous to the network number, which is the same for all systems on the network and gets repeated a lot. Since IPv6 addresses are so much longer, we'd rather not hardcode that prefix into the local DNS. The A6 record lets us refer to the Provider's DNS for those bits in the address. This gives Provider and Client more independence from each other's DNS. In addition, if the network changes ISPs, there is no need to modify the DNS[5]. You can simply change the referral record to point to the new ISP. Syntax of A6 Example NAME [TTL] TYPE BITS ADDRESS REFERRAL linux A6 64 ::02d0:09ff:fef7:6d2c SLAnortel.v6.ilabs.interop.net. In the example above, the name given in the Referral field is defined in the Provider's DNS, and would have the first 64 bits of the address being looked up. Thus, when an application looked up the name "linux," it would get the last 64 bits of the address from the address (A6) record above, and then go to SLAnortel.v6.ilabs.interop.net to get the first 64 bits, which it would combine to get a full IPv6 address. V. Difference between A6 and AAAA Record Types The A6 record is a new DNS record, described in detail in RFC 2874, meant to replace the AAAA record in IPv6 address resolution. The primary new feature of A6 records is the possibility to divide the IPv6 address to a chain formed by several A6 records residing on different name servers, to ease the generation of aggregately and renumber able IPv6 addresses. The difference between the A6 and AAAA Record Types can be explained with the following example: Consider the host foo, on site bar.baz. bar.baz has bought their Internet connectivity from ISPs isp-1.baz and isp-2.baz. Both ISPs have their own IPv6 address spaces, with prefixes 2001:1::/32 and 2001:2::/32. Both ISPs have also assigned the number 42 as the next level aggregation identifier for bar.baz. The site bar.baz now has two address ranges, 2001:1:42::/48 and 2001:2:42::/48. For the host foo they have assigned the subnet ID 1 and the interface ID 2a. So the two addresses for foo.bar.baz are 2001:1:42:1::2a and 2001:2:42:1::2a. Using AAAA records, this would be expressed in the zone file of bar.baz as:

235 $ORIGIN bar.baz. foo IN AAAA 2001:1:42:1::2a AAAA 2001:2:42:1::2a The drawback for this approach is that the addresses contained in bar.baz would have to be changed, should isp-1 or isp-2 for some reason renumber its network. With A6 records, the site bar.baz only needs to give the part of the IPv6 address they themselves decide (in this case, the last 80 bits), and point out which DNS names contain the A6 records for the prefixes in the first 48 bits. The format of an A6 record is: A6 <prefix-len> <ipv6-address> [dns-name] Here the prefix-len is a decimal number between 0 and 128, inclusive. The prefix length is the amount of bits that are missing from the ipv6-address part, and are supposed to be retrieved querying the name specified, dns-name. In the special case when prefix length is 0 (and the address is complete), the dns-name may be omitted. (Obviously, if the address is complete, there's no need to do further queries.) So, using A6 chains, the addresses for foo.bar.baz would be in the DNS zones like this: On the name servers of bar.baz: On the name servers of isp-1.baz: $ORIGIN bar.baz. foo A6 64 ::2a subnet-1.ip6 subnet-1.ip6 A6 48 0:0:0:1:: ip6 ip6 A6 48 0::0 subscriber-bar.ip6.isp1.baz. ip6 A6 48 0::0 subscriber-bar.ip6.isp2.baz. $ORIGIN isp-1.baz. subscriber-bar.ip6 A6 admin.baz. 32 0:0:42:: isp-1.ip6.tla- On the name servers of isp-2.baz: $ORIGIN isp-2.baz. subscriber-bar.ip6 A6 admin.baz. 32 0:0:42:: isp-2.ip6.tla- On the name servers of tla-admin.baz: $ORIGIN tla-admin.baz. isp-1.ip6 A6 0 2001:1:: isp-2.ip6 A6 0 2001:2:: VI. Conclusion There are various types of DNS Resource Records. Each record is used for a specific purpose. The A record is used to assign an IP address to a domain or subdomain name whereas CNAME record makes one domain name an alias of another. An AAAA record or IPv6 address record maps a hostname to a 128-bit IPv6 address. An MX record or mail exchange record maps a domain name to a list of mail exchange servers for that domain. An

IJAEEE,Volume1,Number 2 Simar Preet Singh et al. NS record or name server record maps a domain name to a list of DNS servers authoritative for that domain. Text (TXT) resource record maps a DNS domain name specified in the owner field to a string of characters. Some of the new records are also introduced in DNS for IPv6 like A6, which support the ease of maintenance and mobility which are hallmarks of IPv6. These will be available in BIND version 9. These records allow a site to make DNS entries for IPv6 addresses, without the necessity of hard-coding the Provider's address fields. Currently the A6 record proposal hasn't received much popularity (a bit like the ip6.arpa zone), perhaps because of the added complexity and the fact that very few resolver libraries support the resolving of A6 chains properly. Still, it might very well be the future. References [1] Role of the Domain Name System (DNS), J.C. Klensin, J. Klensin (February 2003). [2] Application Techniques for Checking and Transformation of Names, J.C. Klensin, J. Klensin. [3] Domain Name System (DNS) IANA Considerations, D. Eastlake 3rd (November 2008), Section 3. [4] Clarifications to the DNS Specification, R. Elz, R. Bush (July 1997). [5] Role of the Domain Name System (DNS), J.C. Klensin, J. Klensin (February 2003) [6] Domain Names - Concepts and Facilities, P. Mockapetris, The Internet Society (November 1987) [7] Mockapetris, Paul (April 1989). "DNS Encoding of Network Names and Other Types". [8] Mockapetris, Paul (2004-01-02). "Letting DNS Loose". [9] Application Techniques for Checking and Transformation of Names, J.C. Klensin, J. Klensin.