Domain Name Server

9,378 views
8,975 views

Published on

Create your own domain name server in just few steps ....

Published in: Education, Technology
0 Comments
8 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
9,378
On SlideShare
0
From Embeds
0
Number of Embeds
30
Actions
Shares
0
Downloads
766
Comments
0
Likes
8
Embeds 0
No embeds

No notes for slide

Domain Name Server

  1. 1. AA PresentationPresentation OnOn ““Domain Name ServerDomain Name Server”” by:by: Vipul VaidVipul Vaid
  2. 2. History of DNS  Through the 1970s, the ARPAnet was a small, friendly community of a few hundred hosts. A single file, HOSTS.TXT, contained a name-to-address mapping for every host connected to the ARPAnet. The familiar Unix host table, /etc/hosts, was compiled from HOSTS.TXT (mostly by deleting fields Unix didn't use).  As the ARPAnet grew, however, this scheme became unworkable. The size of HOSTS.TXT grew in proportion to the growth in the number of ARPAnet hosts.  Problems with HOSTS.TXT − Consistency − Name collision
  3. 3. “The Domain Name System”
  4. 4. What is DNS ?  The Domain Name System is a distributed database with hierarchal structure and serve the basis for name resolution process in TCP/IP network.  Domain Name System (DNS) converts the name of a Web site (www.vipul.com) to an IP address (65.115.71.34) and vice-versa.  This IP is the IP address of a Web site's server, not the Web site's name, and is used in routing traffic over the Internet.
  5. 5. Key Components of DNS  Domain namespace  Zones  Nameservers  Resolver
  6. 6. Domain namespace  DNS namespace is the hierarchical structure of the domain name tree. It is defined such that the names of all similar components must be similarly structured, but similarly identifiable. The full DNS name must point to a particular address. host: mail  The mail is the host configured in the google.com domain. The fully qualified domain name (FQDN) of the host mail is mail.google.com. No two hosts can have the same FQDN. Root '.' educomgovorg dtd www mail google
  7. 7. salessupport training microsoft Zones • All top-level domains, and many domains at the second and lower levels, are broken into zones. • Zones: smaller, more manageable units by delegation.
  8. 8. Name server  The programs that store information about the domain namespace are called nameservers. Nameservers generally have complete information about some part of the domain namespace, called a zone − Primary name server (Master) − Secondary name server (Slave) microsoft salessupport training Master Slave Resource Record
  9. 9. Resolver  Resolvers are the clients that access nameservers. Programs running on a host that need information from the domain namespace use the resolver. The resolver handles: − Querying a nameserver. − Interpreting responses (which may be resource records or an error). − Returning the information to the programs that requested it.  In BIND, the resolver is a set of library routines that is linked to programs. − Ex. gethostbyname() in standard socket library inC programming language.
  10. 10. What is DNS query  A query is a request for name resolution to a DNS server. There are two types of queries: recursive and iterative.  Recursive  The queried nameserver is obliged to respond with the requested data or with an error.  Iterative  In iterative resolution, a nameserver simply gives the best answer it already knows back to the querier. No additional querying is required.
  11. 11. query for 1. www.yahoo.com? client www.yahoo.com Root name server Local DNS .com DNS yahoo.com DNS 2.www.yahoo.com ? 3. Ask.com 4. www.yahoo.com? 5. Ask yahoo.com 6. www.yahoo.com ?7. 65.10.2.2 8. 65.10.2.2 9. Client connect 65.10.2.2 How Iterative query works
  12. 12. client Local DNS Root Name server .com yahoo.com 2.www.yahoo.com ? 3. www.yahoo.com? 4.www.yahoo.com? 1. Recursive query for www.yahoo.com? Host : www 5.65.10.2.2 6. 65.10.2.2 7. 65.10.2.2 8. 65.10.2.2 9. Client connect to 65.10.2.2 How Recursive Query Works Host : mail
  13. 13. Master Server Slave Server 1. SOA Request 2. SOA Response 3. AXFR / IXFR Request DNS DNS 4. Full / Partial zone file transfer How Zone Transfer Works
  14. 14. INTRANET INTERNET Forwarder Local Name server Client vipul.com domain(not connected to internet directly) google.com yahoo.com hotmail.com 1. www.google.com ? 2.www.google.com? 3. www.google.com ? How Forwarder Works 4. 65.29.4.2 5.65.29.4.2 6. 65.29.4.2 Some domain connected to internet
  15. 15. Installation  Packages − bind,bind-utils  Daemons − /usr/sbin/named  Scripts − /etc/init.d/named  Ports − 53/{tcp,udp}  Configuration − /etc/named.conf ,/var/named/*  Related − caching-nameserver, bind-chroot
  16. 16. Configuring DNS  Main configuration file − /etc/named.conf − It define access controls − Defines listing interfaces − List authoritative zones (collection of records) − Other global configuration  Recursive query or not  etc.
  17. 17. /etc/named.conf acl “mynetwork” { 192.168.0.0/24; }; options { listen-on port 53 { 127.0.0.1 ; 192.168.0.254 ; }; directory "/var/named"; allow-query { mynetwork ; }; allow-recursion { none ; }; // allow-transfer { any; }; // forwarders { 0.0.0.0; }; recursion no; };
  18. 18. /etc/named.conf cont. // zone declaration zone “vipul.com” in { // forward zone type master; file “vipul.com.db”; }; zone “0.168.192.in-addr.arpa” in { // reverse zone type master; File “192.168.0.db”; }; zone “0.0.127.in-addr.arpa” in { // localhost zone type master; file “127.0.0.db”; };
  19. 19. Resource Records NOTE: A resource record (RR) is a standard DNS database structure containing information used to process DNS queries Type MeaningMeaning ValueValue SOA Start of Authority Parameter for this zone A address 32 bit integer MX Mail exchange Domain willing to accept mail NS Name server Domain name PTR pointer Alias of an IP address HINFO Host description CPU and OS info TXT text Uninterpreted ASCII text
  20. 20. Forward zone $TTL 3D vipul.com. IN SOA ns.vipul.com. root.vipul.com ( 42; 3H; 15M; 1W; 1D; ) vipul.com. IN NS ns.vipul.com. vipul.com. IN MX mail.vipul.com. localhost.vipul.com. IN A 127.0.0.1 ns.vipul.com IN A 192.168.0.254 n1.vipul.com IN A 192.168.0.1 n2.vipul.com IN A 192.168.0.2 www IN CNAME ns carrie IN CNAME n1 Shrek IN CNAME n2 mail IN CNAME ns
  21. 21. Reverse zone for 192.168.0.0/24 $TTL 3D 0.168.192.in addr.arrpa. IN SOA ns.vipul.com. root.vipul.com. ( 42 ; serial 3H ; slave refresh 15M ;slave retry 1W ;slave timeout 1D ; minimum cache TTL for negative answer ) 0.168.192.in-addr.arpa. IN NS ns.vipul.com. 0.168.192.in-addr.arpa. IN MX mail.vipul.com. 254.0.168.192.in-addr.arpa IN PTR ns.vipul.com. 1.0.168.192.in-addr.arpa IN PTR n1.vipul.com. 2.0.168.192.in-addr.arpa IN PTR n2.vipul.com.
  22. 22. Reverse zone for 127.0.0.0/8 $TTL 3D 0.0.127.in addr.arrpa. IN SOA ns.vipul.com. root.vipul.com. ( 42 ; serial 3H ; slave refresh 15M ;slave retry 1W ;slave timeout 1D ; minimum cache TTL for negative answer ) 0.0.127.in-addr.arpa. IN NS ns.vipul.com. 0.0.127.in-addr.arpa. IN MX mail.vipul.com. 1.0.0.127.in-addr.arpa IN PTR localhost.
  23. 23. Check for errors  named-checkconf − Command use to check /etc/named.conf for errors  named-checkzone − Command used to check zone database files
  24. 24. Starting bind  All named related files should be accessible by named − chown root:named /var/named/vipul.com.db − chown root:named /var/named/192.168.0.db − chown root:named /var/named/127.0.0.db  Turn selinux off if not familiar: setenforce 0  To start named deamon − service named start , or − /etc/init.d/named start
  25. 25. Resolver Configuration  /etc/nsswitch − hosts: dns files  /etc/resolv.conf − On Clients  search vipul.com  nameserver 192.168.0.254 − On Server  nameserver 127.0.0.1
  26. 26. Resolver Client  gethostip − Queries using stub resolver.  host and dig − Only query DNS (not /etc/hosts). − more flexible and powerful then gethostip. − host provides concise output by default. − Dig provide verbose output by default.  nslookup − Standard DNS query tool. − Interactive and non interactive mode.
  27. 27. Conclusion • DNS serve the basis for name resolution process on internet. DNS consists of the domain namespace, name servers that store resource records, and DNS resolvers. • A domain is a branch of the DNS namespace beginning at its root node. All of the resource records in a domain are stored in zones on DNS servers. A zone is a contiguous portion of a DNS domain whose information is stored in a file on a DNS server. • On the Internet, DNS consists of the root domain, top-level domains, and second-level domains. IANA manages the names and DNS servers of the root domain and the top- level domains. Individual organizations are responsible for managing the names in their second-level domains. • DNS resolvers use either recursive or iterative queries • Forward lookups provide an IP address based on an FQDN. Reverse lookups provide an FQDN based on an IP address. • Zone transfers can transfer either the entire zone file (known as a full zone transfer) or just the records that have changed (known as an incremental zone transfer). DNS Notify is a standard mechanism by which a master name server notifies secondary name servers to check .
  28. 28. Query?Query? Reach me atReach me at vipul.vid@gmail.comvipul.vid@gmail.com

×