Know How DNS Works

Domain name Servers (DNS) are an important but invisible part of the internet, and form one of the largest databases on it. Each machine on an internet is assigned a unique address, called an IP address, which is 32 bit number and is expressed as 4 octets. The method user to represent these IP addresses is known as dotted decimal Notation". A typical address looks like this: 199.249.150.4

It is very difficult to keep in mind the IP addresses of all the websites we visit daily, because it's not easy to remember strings of numbers. However, we do remember words. This is where domain names come into the picture. If you want to connect to a particular site, you need to know its IP address but do need to know its URL. The DNS gets the mappings of the IP addresses and the corresponding names.

Names and numbers

DNS converts the machine names (such as www.xyz.com) to IP addresses (such as 199.249.150.9). Basically, it translates from a name to an address and from an address to a name.

The mapping from the IP address to the machine name is called reverse mapping. When you type http://www.xyz.com into your browser, the browser first needs to get the IP address of www.xyz.com. The machine uses a directory service to look up IP addresses and this service is called DNS. When you type www.xyz.com your machines firsts contacts a DNS server, asking it to find the IP address for www.xyz.com. This DNS server might then contact other DNS servers on the internet. DNS is therefore is considered as the global network of servers. The great advantage of DNS is that no organization is responsible for updating it. It is what is known as distributed database.

The three letter codes

A DNS server is just a computer that's running the DNS software. The most popular DNS software is BIND (Berkeley Internet Name Domain) DNS is hierarchical, tree-structured system. The top is donated by'.'. And is known as the root of the system. Below the root there are seven immediate sub domain nodes and these are 'com', 'org', 'gov', 'mil', 'net', 'edu', 'Int', etc.

DNS consists of two components

  • Nameserver

  • Resolver

    Nameserver:

    This performs the task of looking up the names. Usually, there is one nameserver for a cluster of machines. If the nameserver does not contain the requested information, it will contact another nameserver. But it is not required for every server to know how to contact every other server. Every nameserver will know how to contact the root nameserver, and this in turn will know the location of every authoritative nameserver for all the second level domains.

    Resolver:

    This runs on a client machine to initiate DNS lookups. It contains a list of nameservers to use. As we have read, the function of each of these nameservers is to resolve name queries. There are three types of nameservers-primary nameserver, secondary nameserver, and caching nameserver. The secondary nameservers are configured for backup purposes. Caching nameservers only resolve name queries but do not maintain any DNS database files. It is important to note here that any change to primary nameservers needs to be propagated to secondary nameservers. This is because primary nameservers own the database records. The changes are propagated via a 'zone transfer'.

    HOW 'CACHING"WORKS

    DNS uses principle of 'caching' for its operation. When a nameservers receives Information about a mapping, it caches this information .further queries for the same mapping will use this cached result, thereby reducing the search cost. The nameservers don't cache forever. The caching has a component called time to live (TTL) and the TTL determines how long a server will cache a piece of information. So when the nameservers caches receive an IP address, it receives the TTL with it. The nameserver caches the IP address for the period of time then discards it.

    When a process needs to determine an IP address given a DNS address, it calls upon the local host to resolve the address. This can be done in variety of ways:

    Table look up. On UNIX hosts, the table is /etc/hosts.

    The process communicates with a local nameservers. This is named on a UNIX system.

    By sending a massage to the remote system that is identified from the information in the file/etc/resolve.conf.

    When a nameserver receives a query for a domain that is does not serve, it may send back a referral to the client by specifying better nameservers. Typically operate in the recursive manner wherein any DNS server passes requests it cannot handle to higher level server and so on, until either the request can be handled or until the root of the DNS name space is reached.

    The nameservers contain pointers to other nameserver with the help of which it is possible to traverse the entire domain naming hierarchy. A host with the initial nameserver addresses has to be configured. After this, it is able to use DNS protocols to locate the nameserver responsible for any part or the DNS naming hierarchy.

    Thus when a nameserver receives a request, it can do one of the following:

    It can answer the request with an IP address. This method is called iterative. In this, the client simply asks the server to resolve a domain name. The server accesses its database, finds its IP address and sends that back. If the server does not find the address, it sends back an error ;DNS not found'). Contact another nameserver and try to find the IP address for the requested name. Send back a referral to the client specifying the IP address of better nameservers.

    A popular user interface, called 'nslookup'is available on the UNIX system. With this, you can perform any DNS function. This program also displays the result to the user. Using is nslookup, you can obtain a listing of all the hosts in a zone. In order to do this, you first need to identify the nameserver for the zone.

    The threats that are associated with the DNS are due to the lack of integrity and authenticity checking of the data held within the DNS. Also, other protocols can use host names as an access control mechanism. The internet engineering task force (IETF) has come up with DNS security (DNSSEC) extensions to DNS protocol. The main objective to DNSSEC is to provide authentication and integrity to the DNS. These are provided through the use of cryptographic'

    About The Author

    Pawan Bangar,
    Technical Director,
    Birbals, Ebirbals, SeoBirbals, Hbirbals
    India.

    Visit us at: www.birbals.com, www.ebirbals.com, www.hbirbals.com, www.seobirbals.com

    pawan@ebirbals.com

  • More Resources

    Unable to open RSS Feed $XMLfilename with error HTTP ERROR: 404, exiting

    More Domain Names Information:

    Related Articles

    Information on Domain Names
    It's been two years since John started his online business. He is very much satisfied with his current web host whose services he acquired one year ago.
    Secrets of Expired Domain Name Traffic
    One of the biggest challenges to a webmaster is how to generate traffic. More traffic to your website equates to more sales.
    Domain Names
    Domain names are relatively straightforward! Or at least that's the theory!!The domain name is also, but technically not quiet correct, known as the website address.Using an ISP's domain name can look amateurish in an e-mail addresses, it is much more so with websites, giving the impression of hanging on another's coat tails.
    Signing up for a Domain Name? Consider Private Registration
    A plethora of websites exists to register a domain name. Google 'register domain names' and have a fun-filled time comparing prices.
    A Little Secret About Public Domain Treasures
    I bet this little secret is going to get YOU excited..
    Investing in Great Domain Names when They Come for Sale
    Domain names are not just online identities anymore they are the most important asset an online company owns. There are businesses being spun out because the owner stumbled on a good domain name.
    Deleted Domains Can Kickstart a New Website
    Are you getting ready to launch a new website online with a brand new domain name? You may want to consider registering a deleted domain name instead. Here are some of the benefits to consider from this strategy.
    ICANN or I CANNot that is the Question
    Well, it seems we should all be very busy registering new domain name extensions as soon as we can, irregardless of whether we feel this is necessary or not. With ICANN bringing on an additional bevy of new domain name extensions, there are more possibilities to celebrate and party.
    Public Domain Works Are Closer Than They Appear
    Searching for public domain works can be a tedious job and take several hours just to find one or two good publications.There are hundreds, if not thousands of quality databases online you can use to search for public domain content, but are you aware of the places offline you can visit starting tomorrow morning and walk away with a handful of public domain publications you can duplicate.
    Five Ways To Profit From Public Domain Information
    Ever wondered why Walt Disney never got sued for intellectual property theft?C'mon, the guy ripped off so many Hans Christian Anderson and Grimm Brothers' fairy tales! And he never paid the said authors any royalty fees! Granted that they're dead, but shouldn't their families be entitled to proceeds from their works? Such would be a small price to pay, considering the accumulated wealth of Walt Disney's billion dollar enterprise.But alas, Mr.
    Liberalization of in-Domains?
    Communications and IT Minister Dayanidhi Maran has -as Hindustan Times reports-some advice for Indian patriots: use in-domains for Websites and e-mail IDs to popularise Indian identity in the world.With India emerging as a global "labor" for IT, Indian companies should change the domain names of their Websites and e-mail IDs to in-domains, just like other countries.
    All-time Record of Domain Registrations
    The number of registered domains has reached an all-time high of more than 60 million domain names worldwide.Figures show that country code Top Level Domains (ccTLDs) are the fastest growing market, while general demand for new domains remains strong.
    How To Really Profit from Domain Names
    Have you heard about domain names that sold for over a million dollars? Inspired by this, you imagine registering a great domain name, hanging onto it for a while, and then selling it off to become the next multi-millionaire. It could happen, but don`t count on it!First of all, many of the truly great domain names are already taken.
    Virtual Airport
    Aero Registrar Secura GmbH proposes to the IT departments of airports to sell aero-domains to companies at the airport. Airports can build a portal of the airport and forming by this a kind of virtual airport.
    A Guide to Sell Your Domain Name Quickly
    Everyday I read this question on different forums "how I sell my domain quickly?" To me earning huge income from domain and selling it quickly are two different things, and you have to select one. Many newbie register a domain in the hope that next day someone will purchase it in two million dollars, which is obviously nonsense.
    Get Your Own Domain Name Or Die Online
    Would you buy from someone with an "@yahoo.com" e-mail address? I wouldn't.
    How to Register an Expiring Domain
    Understanding the process and options involved with registering an expiring domain can be a confusing task. How, Where, When?This article will explain the basic steps to researching an expiring domain name, and the many different options (or should I say necessary steps to insure success).
    Customer Excellence Returns to Web Site Hosting!
    For those of you with Web sites, you probably know what a "host" is. It's a company that provides a location, or address, on the Internet where your Web site resides.
    What You Need to Know About Choosing A Domain Name
    Aside from the nuts and bolts of where to register your domain name and purchasing a good economical hosting service, there are a few things to know about buying a good domain name, that only experience can teach. Here are a few tips to get you started on the right foot:1.
    Earn Money With Parked Domain Names
    Do you have domain names that you are not currently using? Did you know that these domains can actually become a source of revenue for your online business?There are several companies on the internet that will pay you to redirect your domain to a landing page, filled highly relevant PPC (pay per click) links. The links displayed on your landing page will be optimized based on what keywords are in your domain, and what links previous visitors have been interested in looking at.