Curso: Redes y comunicaciones I: 07 Redes.
Fue dictado en la Universidad Tecnológica del Perú -UTP, Lima - Perú, en los ciclos 2011-2 (junio/2011), 2011-3 (octubre/2011) y 2012-1 (abril/2012).
Curso: Redes y comunicaciones I: 07 Redes.
Fue dictado en la Universidad Tecnológica del Perú -UTP, Lima - Perú, en los ciclos 2011-2 (junio/2011), 2011-3 (octubre/2011) y 2012-1 (abril/2012).
DNS, which stands for domain name system, controls your domain name's website and email settings. When visitors go to your domain name, its DNS settings control which company's server it reaches out to.
We browse the Internet. We host our applications on a server or a cloud that is hooked up with a nice domain name. That’s all there is to know about DNS, right? This talk is a refresher about how DNS works. How we can use it and how it can affect availability of our applications. How we can use it as a means of configuring our application components. How this old geezer protocol is a resilient, distributed system that is used by every Internet user in the world. How we can use it for things that it wasn’t built for. Come join me on this journey through the innards of the web!
We browse the Internet. We host our applications on a server or a cloud that is hooked up with a nice domain name. That’s all there is to know about DNS, right? This talk is a refresher about how DNS works. How we can use it and how it can affect availability of our applications. How we can use it as a means of configuring our application components. How this old geezer protocol is a resilient, distributed system that is used by every Internet user in the world. How we can use it for things that it wasn’t built for. Come join me on this journey through the innards of the web!
Overview of the Domain Name System (DNS).
In the early days of the Internet, hosts had a fixed IP address.
Reaching a host required to know its numeric IP address.
With the growing number of hosts this scheme became quickly awkward and difficult to use.
DNS was introduced to give hosts human readable names that would be translated into a numeric IP addresses on the fly when a requesting host tried to reach another host.
To facilitate a distributed administration of the domain names, a hierarchic scheme was introduced where responsibility to manage domain names is delegated to organizations which can further delegate management of sub-domains.
Due to its importance in the operation of the Internet, domain name servers are usually operated redundantly. The databases of both servers are periodically synchronized.
Ethnobotany and Ethnopharmacology:
Ethnobotany in herbal drug evaluation,
Impact of Ethnobotany in traditional medicine,
New development in herbals,
Bio-prospecting tools for drug discovery,
Role of Ethnopharmacology in drug evaluation,
Reverse Pharmacology.
DNS, which stands for domain name system, controls your domain name's website and email settings. When visitors go to your domain name, its DNS settings control which company's server it reaches out to.
We browse the Internet. We host our applications on a server or a cloud that is hooked up with a nice domain name. That’s all there is to know about DNS, right? This talk is a refresher about how DNS works. How we can use it and how it can affect availability of our applications. How we can use it as a means of configuring our application components. How this old geezer protocol is a resilient, distributed system that is used by every Internet user in the world. How we can use it for things that it wasn’t built for. Come join me on this journey through the innards of the web!
We browse the Internet. We host our applications on a server or a cloud that is hooked up with a nice domain name. That’s all there is to know about DNS, right? This talk is a refresher about how DNS works. How we can use it and how it can affect availability of our applications. How we can use it as a means of configuring our application components. How this old geezer protocol is a resilient, distributed system that is used by every Internet user in the world. How we can use it for things that it wasn’t built for. Come join me on this journey through the innards of the web!
Overview of the Domain Name System (DNS).
In the early days of the Internet, hosts had a fixed IP address.
Reaching a host required to know its numeric IP address.
With the growing number of hosts this scheme became quickly awkward and difficult to use.
DNS was introduced to give hosts human readable names that would be translated into a numeric IP addresses on the fly when a requesting host tried to reach another host.
To facilitate a distributed administration of the domain names, a hierarchic scheme was introduced where responsibility to manage domain names is delegated to organizations which can further delegate management of sub-domains.
Due to its importance in the operation of the Internet, domain name servers are usually operated redundantly. The databases of both servers are periodically synchronized.
Ethnobotany and Ethnopharmacology:
Ethnobotany in herbal drug evaluation,
Impact of Ethnobotany in traditional medicine,
New development in herbals,
Bio-prospecting tools for drug discovery,
Role of Ethnopharmacology in drug evaluation,
Reverse Pharmacology.
The Roman Empire A Historical Colossus.pdfkaushalkr1407
The Roman Empire, a vast and enduring power, stands as one of history's most remarkable civilizations, leaving an indelible imprint on the world. It emerged from the Roman Republic, transitioning into an imperial powerhouse under the leadership of Augustus Caesar in 27 BCE. This transformation marked the beginning of an era defined by unprecedented territorial expansion, architectural marvels, and profound cultural influence.
The empire's roots lie in the city of Rome, founded, according to legend, by Romulus in 753 BCE. Over centuries, Rome evolved from a small settlement to a formidable republic, characterized by a complex political system with elected officials and checks on power. However, internal strife, class conflicts, and military ambitions paved the way for the end of the Republic. Julius Caesar’s dictatorship and subsequent assassination in 44 BCE created a power vacuum, leading to a civil war. Octavian, later Augustus, emerged victorious, heralding the Roman Empire’s birth.
Under Augustus, the empire experienced the Pax Romana, a 200-year period of relative peace and stability. Augustus reformed the military, established efficient administrative systems, and initiated grand construction projects. The empire's borders expanded, encompassing territories from Britain to Egypt and from Spain to the Euphrates. Roman legions, renowned for their discipline and engineering prowess, secured and maintained these vast territories, building roads, fortifications, and cities that facilitated control and integration.
The Roman Empire’s society was hierarchical, with a rigid class system. At the top were the patricians, wealthy elites who held significant political power. Below them were the plebeians, free citizens with limited political influence, and the vast numbers of slaves who formed the backbone of the economy. The family unit was central, governed by the paterfamilias, the male head who held absolute authority.
Culturally, the Romans were eclectic, absorbing and adapting elements from the civilizations they encountered, particularly the Greeks. Roman art, literature, and philosophy reflected this synthesis, creating a rich cultural tapestry. Latin, the Roman language, became the lingua franca of the Western world, influencing numerous modern languages.
Roman architecture and engineering achievements were monumental. They perfected the arch, vault, and dome, constructing enduring structures like the Colosseum, Pantheon, and aqueducts. These engineering marvels not only showcased Roman ingenuity but also served practical purposes, from public entertainment to water supply.
Operation “Blue Star” is the only event in the history of Independent India where the state went into war with its own people. Even after about 40 years it is not clear if it was culmination of states anger over people of the region, a political game of power or start of dictatorial chapter in the democratic setup.
The people of Punjab felt alienated from main stream due to denial of their just demands during a long democratic struggle since independence. As it happen all over the word, it led to militant struggle with great loss of lives of military, police and civilian personnel. Killing of Indira Gandhi and massacre of innocent Sikhs in Delhi and other India cities was also associated with this movement.
Palestine last event orientationfvgnh .pptxRaedMohamed3
An EFL lesson about the current events in Palestine. It is intended to be for intermediate students who wish to increase their listening skills through a short lesson in power point.
The French Revolution, which began in 1789, was a period of radical social and political upheaval in France. It marked the decline of absolute monarchies, the rise of secular and democratic republics, and the eventual rise of Napoleon Bonaparte. This revolutionary period is crucial in understanding the transition from feudalism to modernity in Europe.
For more information, visit-www.vavaclasses.com
How to Make a Field invisible in Odoo 17Celine George
It is possible to hide or invisible some fields in odoo. Commonly using “invisible” attribute in the field definition to invisible the fields. This slide will show how to make a field invisible in odoo 17.
2. Jump to first page
February 2003
slideset 1 -2
Purpose of naming
Addresses are used to locate objects
Names are easier to remember than numbers
You would like to get to the address or other
objects using a name
DNS provides a mapping from names to
resources of several types
3. Jump to first page
February 2003
slideset 1 -3
Names and addresses in
general
An address is how you get to an endpoint
Typically, hierarchical (for scaling):
950 Charter Street, Redwood City CA, 94063
204.152.187.11, +1-650-381-6003
A “name” is how an endpoint is referenced
Typically, no structurally significant hierarchy
“David”, “Tokyo”, “itu.int”
4. Jump to first page
February 2003
slideset 1 -4
Naming History
1970’s ARPANET
Host.txt maintained by the SRI-NIC
pulled from a single machine
Problems
traffic and load
Name collisions
Consistency
DNS created in 1983 by Paul Mockapetris (RFCs 1034
and 1035), modified, updated, and enhanced by a myriad
of subsequent RFCs
5. Jump to first page
February 2003
slideset 1 -5
DNS
A lookup mechanism for translating objects into
other objects
A globally distributed, loosely coherent, scalable,
reliable, dynamic database
Comprised of three components
A “name space”
Servers making that name space available
Resolvers (clients) which query the servers
about the name space
6. Jump to first page
Exercise
Is DNS security critical?
What would happen if it is not:
Confidential?
High integrity?
Available?
March 2017
slideset 1 -6
7. Jump to first page
February 2003
slideset 1 -7
DNS Features: Global
Distribution
Data is maintained locally, but retrievable globally
No single computer has all DNS data
DNS lookups can be performed by any device
Remote DNS data is locally cachable to improve
performance
8. Jump to first page
February 2003
slideset 1 -8
DNS Features: Loose
Coherency
The database is always internally consistent
Each version of a subset of the database (a zone) has a
serial number
The serial number is incremented on each database change
However, client does not know current number for zone apriori
Changes to the master copy of the database are replicated
according to timing set by the zone administrator
Cached data expires according to timeout set by zone
administrator
9. Jump to first page
February 2003
slideset 1 -9
DNS Concepts
Next slides are about concepts
After this set of slides you should understand
How the DNS is built
Why it is built the way it is
The terminology used throughout the course
10. Jump to first page
February 2003
slideset 1 -10
Concept: DNS Names 1
The namespace needs to be made hierarchical to
be able to scale.
The idea is to name objects based on
location (within country, set of organizations, set of
companies, etc)
unit within that location (company within set of
company, etc)
object within unit (name of person in company)
11. Jump to first page
February 2003
slideset 1 -11
Concept: DNS Names 2
How names appear in the DNS
Fully Qualified Domain Name (FQDN)
WWW.RIPE.NET.
labels separated by dots
DNS provides a mapping from FQDNs to
resources of several types
Names are used as a key when fetching data in
the DNS
Note the trailing dot
12. Jump to first page
February 2003
slideset 1 -12
The DNS maps names into data using Resource
Records.
More detail later
www.ripe.net. … A 10.10.10.2
Concept: Resource
Records
Address Resource
Resource Record
13. Jump to first page
Root DNS Servers
13 servers stored in every computer
March 2017
slideset 1 -13
HOSTNAME IP ADDRESSES MANAGER
a.root-servers.net 198.41.0.4, 2001:503:ba3e::2:30 VeriSign, Inc.
b.root-servers.net 192.228.79.201, 2001:500:84::b University of Southern California (ISI)
c.root-servers.net 192.33.4.12, 2001:500:2::c Cogent Communications
d.root-servers.net 199.7.91.13, 2001:500:2d::d University of Maryland
e.root-servers.net 192.203.230.10, 2001:500:a8::e NASA (Ames Research Center)
f.root-servers.net 192.5.5.241, 2001:500:2f::f Internet Systems Consortium, Inc.
g.root-servers.net 192.112.36.4, 2001:500:12::d0d US Department of Defense (NIC)
h.root-servers.net 198.97.190.53, 2001:500:1::53 US Army (Research Lab)
i.root-servers.net 192.36.148.17, 2001:7fe::53 Netnod
j.root-servers.net 192.58.128.30, 2001:503:c27::2:30 VeriSign, Inc.
k.root-servers.net 193.0.14.129, 2001:7fd::1 RIPE NCC
l.root-servers.net 199.7.83.42, 2001:500:9f::42 ICANN
m.root-servers.net 202.12.27.33, 2001:dc3::35 WIDE Project
Distributed throughout the world
through the use of IP anycast
14. Jump to first page
Root DNS Locations
March 2017
slideset 1 -14
15. Jump to first page
February 2003
slideset 1 -15
DNS Name Heirarchy
Domain names can be
mapped to a tree.
New branches at the ‘dots’
No restriction to the amount
of branches.
net com
ripe
www www
edu
isi tislabs
•
disi
ws1 ws2
• •
•
•
•
•
ftp
sun
google
moon
16. Jump to first page
February 2003
slideset 1 -16
Concept: Domains
Domains are “namespaces”
Everything below .com is in the com domain.
Everything below ripe.net is in the ripe.net domain
and in the net domain.
net domain
com domain
ripe.net domain
net com
ripe
www
www
edu
isi tislabs
•
disi
ws1
ws2
•
• •
•
•
•
ftp
sun
moon
google
17. Jump to first page
February 2003
slideset 1 -17
Delegation
Administrators can create subdomains to group hosts
According to geography, organizational affiliation or any
other criterion
An administrator of a domain can delegate responsibility
for managing a subdomain to someone else
But this isn’t required
The parent domain retains links to the delegated
subdomain
The parent domain “remembers” who it delegated the
subdomain to
18. Jump to first page
February 2003
slideset 1 -18
net domain
Concept: Zones and
Delegations
Zones are “administrative spaces”
Zone administrators are responsible for portion of
a domain’s name space
Authority is delegated from a parent and to a child
ripe.net zone
net zone
disi.ripe.net zone
net com
ripe
www
www
edu
isi tislabs
•
disi
ws1
ws2
•
• •
•
•
•
ftp
sun
moon
google
19. Jump to first page
February 2003
slideset 1 -19
Name Servers
Name servers answer ‘DNS’ questions.
Several types of name servers
Authoritative servers
master (primary)
slave (secondary)
(Caching) recursive servers
also caching forwarders
Mixture of functionality
20. Jump to first page
February 2003
slideset 1 -20
Authoritative name servers
Give authoritative answers for one or more zones.
The master server normally loads the data from a
zone file
A slave server normally replicates the data from
the master via a zone transfer
master
slave
slave
21. Jump to first page
February 2003
slideset 1 -21
Recursive Name Servers
Recursive servers do the actual lookups; they ask
questions to the DNS on behalf of the clients.
Answers are obtained from authoritative servers
but the answers forwarded to the clients are
marked as not authoritative
Answers are stored for future reference in the
cache
22. Jump to first page
February 2003
slideset 1 -22
Concept: Resolvers
Resolvers ask the questions to the DNS system
on behalf of the application.
Normally implemented in a system library (e.g,
libc)
gethostbyname(char *name);
gethostbyaddr(char *addr, int len,
type);
23. Jump to first page
DNS Query Format
Operates over UDP, destination port is 53
March 2017
slideset 1 -23
MAC Header IP Header Trans. ID Flags # Queries
# Answers # Authorities Additional Resource Records
16 bit increasing number
Queries:
Name, Type, Class
Dest port = 53
24. Jump to first page
DNS Flags
16 bits that identify the type of DNS record
Bit 1: query or response
Bit 2-5:Standard or inverse
(lookup name of IP addr)
Bit 6: Is answer authoritative
Bit 7: Truncation
Bit 8: Query recursively
Bit 9: recursion available
Bits 10/12: reserved
Bit 11: Authority was auth. by sending server
Bits 13-16: error reporting
March 2017
slideset 1 -24
25. Jump to first page
February 2003
slideset 1 -25
Resolving process & Cache
Resolver
Question: www.ripe.net A
www.ripe.net A ?
Caching
forwarder
(recursive)
root-server
www.ripe.net A ?
Ask net server @ X.gtld-servers.net (+ glue)
gtld-server
www.ripe.net A ?
Ask ripe server @ ns.ripe.net (+ glue)
ripe-server
www.ripe.net A ?
192.168.5.10
192.168.5.10
Add to cache
Glue records identify IP
address of referred servers
26. Jump to first page
February 2003
slideset 1 -26
Resource records consist of it’s name, it’s TTL, it’s
class, it’s type and it’s RDATA
TTL is a timing parameter
IN class is widest used
There are multiple types of RR records
Everything behind the type identifier is called rdata
Concept: Resource
Records (more detail)
Label ttl
class
type
rdata
www.ripe.net. 3600 IN A 10.10.10.2
TTL is specified
in response
(max 7 days)
27. Jump to first page
February 2003
slideset 1 -27
Label ttl class type rdata
ripe.net. 7200 IN SOA ns.ripe.net. olaf.ripe.net. (
2001061501 ; Serial
43200 ; Refresh 12 hours
14400 ; Retry 4 hours
345600 ; Expire 4 days
7200 ; Negative cache 2 hours
)
ripe.net. 7200 IN NS ns.ripe.net.
ripe.net. 7200 IN NS ns.eu.net.
pinkje.ripe.net. 3600 IN A 193.0.1.162
host25.ripe.net. 2600 IN A 193.0.3.25
RRs in a zone file
28. Jump to first page
Types of resolvers
Root servers
TLD servers
Resellers
Individual Domains
Internet Registries (must be ICANN registered)
March 2017
slideset 1 -28
29. Jump to first page
Requirements for registration
Satisfy top-level requirements
E.g. for .ca must be Canadian person, business, or
organization
Claim to the domain (WWF vs WWE)
First come first serve
Must verify ownership of IP resources/name
server resources
Sign registrant agreement
Authorization code (if transferring)
March 2017
slideset 1 -29
30. Jump to first page
February 2003
slideset 1 -30
SOA and NS
The SOA and NS records are used to provide
information about the DNS itself.
The NS indicates where information about a given
zone can be found:
The SOA record provides information about the
start of authority, i.e. the top of the zone, also
called the APEX.
ripe.net. 7200 IN NS ns.ripe.net.
ripe.net. 7200 IN NS ns.eu.net.
31. Jump to first page
February 2003
slideset 1 -31
Resource Record: SOA
Timing parameter
Master server Contact address
Version number
net. 3600 IN SOA A.GTLD-SERVERS.net. nstld.verisign-grs.com. (
2002021301 ; serial
30M ; refresh
15M ; retry
1W ; expiry
1D ) ; neg. answ. ttl
32. Jump to first page
February 2003
slideset 1 -32
TTL and other Timers
TTL is a timer used in caches
An indication for how long the data may be reused
Data that is expected to be ‘stable’ can have high
TTLs
SOA timers are used for maintaining consistency
between primary and secondary servers
33. Jump to first page
February 2003
slideset 1 -33
Places where DNS data
lives
Registry DB
Master
Slave server
Slave
Cache server
Changes in DNS do not propagate instantly!
Not going to net if TTL>0
Might take up to refresh
to get data from master
Upload of zone
data is local policy
34. Jump to first page
February 2003
slideset 1 -34
DNS Features: Scalability
No limit to the size of the database
One server has over 20,000,000 names
Not a particularly good idea
No limit to the number of queries
24,000 queries per second handled easily
Queries distributed among masters, slaves, and
caches
35. Jump to first page
February 2003
slideset 1 -35
DNS Features: Reliability
Data is replicated
Data from master is copied to multiple slaves
Clients can query
Master server
Any of the copies at slave servers
Clients will typically query local caches
DNS protocols can use either UDP or TCP
If UDP, DNS protocol handles retransmission, sequencing,
etc.
36. Jump to first page
February 2003
slideset 1 -36
DNS Features: Dynamicity
Database can be updated dynamically
Add/delete/modify of any record
Modification of the master database triggers
replication
Only master can be dynamically updated
Creates a single point of failure
37. Jump to first page
Attacking DNS
How would you go about attacking DNS?
Would other protections we’ve covered be able to
protect DNS?
March 2017
slideset 1 -37