DNS in Action: A Detailed And Practical Guide to Dns Implementation, Configuration, And Administration (Paperback)

The Domain Name System is one of the foundations of the internet. It is the system that allows the translation of human-readable domain names into machines-readable IP addresses and the reverse translation of IP addresses into domain names. This book describes the basic DNS protocol and its extensions; DNS delegation and registration, including for reverse domains; using DNS servers in networks that are not connected to the internet; and using DNS servers on firewall machines. Many detailed examples are used throughout the book to show perform various configuration and administration tasks.

Table of Contents

• Preface

 

• Chapter 1: Domain Name System
  • 1.1 Domains and Subdomains
  • 1.2 Name Syntax
  • 1.3 Reverse Domains
  • 1.4 Domain 0.0.127.in-addr.arpa
  • 1.5 Zone
    • 1.5.1 Special Zones
  • 1.6 Reserved Domains and Pseudodomains
  • 1.7 Queries (Translations)
    • 1.7.1 Round Robin
  • 1.8 Resolvers
    • 1.8.1 Resolver Configuration in UNIX
    • 1.8.2 Resolver Configuration in Windows
  • 1.9 Name Server
  • 1.10 Forwarder Servers

 

• Chapter 2: DNS Protocol
  • 2.1 Resource Records
  • 2.2 DNS Protocol
  • 2.3 DNS Query
    • 2.3.1 DNS Query Packet Format
    • 2.3.2 DNS Query Packet Header
    • 2.3.3 Question Section
    • 2.3.4 The Answer Section, Authoritative Servers, and Additional Information
    • 2.3.5 Compression
    • 2.3.6 Inverse Query
    • 2.3.7 Methods of RR Transfer via a DNS Packet
    • 2.3.8 Communication Examples

 

• Chapter 3: DNS Extension
  • 3.1 DNS Update
    • 3.1.1 Header Section
    • 3.1.2 Zone Section
    • 3.1.3 Prerequisite Section
    • 3.1.4 Update Section
    • 3.1.5 Additional Data Section
    • 3.1.6 Journal File
    • 3.1.7 Notes
  • 3.2 DNS Notify
    • 3.2.1 Notify Message
  • 3.3 Incremental Zone Transfer
    • 3.3.1 Request Format
    • 3.3.2 Reply Format
    • 3.3.3 Purging
    • 3.3.4 Examples from RFC 1995
  • 3.4 Negative Caching (DNS NCACHE)
    • 3.4.1 How Long are Negative Answers Stored in Memory?
    • 3.4.2 The MINIMUM Field in an SOA Record
    • 3.4.3 Saving Negative Reply Rules
  • 3.5 DNS IP version 6 Extension
    • 3.5.1 AAAA Records
    • 3.5.2 A6 Records
    • 3.5.3 Reverse Domains
    • 3.5.4 DNAME Records
  • 3.6 DNS Security Protocols
    • 3.6.1 DNSsec
    • 3.6.2 KEY Record
    • 3.6.3 SIG Record
    • 3.6.4 NXT Record
    • 3.6.5 Zone Signature
    • 3.6.6 Display Data
    • 3.6.7 DNS Protocol
  • 3.7 TSIG
    • 3.7.1 TKEY
  • 3.8 Saving Certificates to DNS

 

• Chapter 4: Name Server Implementation
  • 4.1 DNS Database
  • 4.2 RR Format
    • 4.2.1 SOA Records
    • 4.2.2 A Records
    • 4.2.3 CNAME Records
    • 4.2.4 HINFO and TXT Records
    • 4.2.5 NS Records
    • 4.2.6 MX Records
    • 4.2.7 PTR Records
    • 4.2.8 SRV Records
    • 4.2.9 $ORIGIN
    • 4.2.10 $INCLUDE
    • 4.2.11 Asterisk (*) in a DNS Name
  • 4.3 Name Server Implementation in BIND
    • 4.3.1 named Program in BIND Version 4 System
    • 4.3.2 New Generation BIND
      • 4.3.2.1 Configuration File
      • 4.3.2.2 DNS Database
      • 4.3.2.3 Lightweight Resolver
  • 4.4 Microsoft's Native Implementation of DNS in Windows 2000/2003

 

• Chapter 5: Tools for DNS Debugging and Administration
  • 5.1 Tools for DNS Debugging
    • 5.1.1 Check Configuration Files
    • 5.1.2 named-checkconf Utility
    • 5.1.3 named-checkzone Utility
    • 5.1.4 nslookup Program
      • 5.1.4.1 Debugging Mode
      • 5.1.4.2 Debug Debugging Level
      • 5.1.4.3 d2 Debugging Level
    • 5.1.5 Other Programs Used for Debugging DNS
      • 5.1.5.1 The dnswalk Program
      • 5.1.5.2 The dig Program
  • 5.2 The rndc Program
    • 5.2.1 Signals
      • 5.2.1.1 HUP Signal
      • 5.2.1.2 INT Signal
      • 5.2.1.3 IOT Signal
      • 5.2.1.4 TERM Signal
      • 5.2.1.5 KILL Signal
      • 5.2.1.6 USR1 and USR2 Signals
  • 5.3 Errors in DNS Configuration

 

• Chapter 6: Domain Delegation and Registration
  • 6.1 Example 1
    • 6.1.1 Server ns.company.tld
    • 6.1.2 Server ns.provider.net
    • 6.1.3 Server ns.manager-tld.tld
  • 6.2 Example 2
    • 6.2.1 Server ns.company.com
    • 6.2.2 Server ns.branch.company.tld
  • 6.3 Domain Registration

 

• Chapter 7: Reverse Domain Delegation

 

• Chapter 8: Internet Registry
  • 8.1 International Organizations
  • 8.2 Regional Internet Registry (RIR)
  • 8.3 IP Addresses and AS Numbers
  • 8.4 Internet Registry
    • 8.4.1 Registration of a Local IR
  • 8.5 Delegation of Second-Level Domains

 

• Chapter 9: DNS in Closed Intranets
  • 9.1 Configuring a Root Name Server on the Same Server (BIND v4)
  • 9.2 Configuring a Root Name Server on a Separate Server (BIND v4)
    • 9.2.1 Configuring a Name Server for the Root Domain
    • 9.2.2 Configuring Name Servers for company.com
  • 9.3 Root DNS Server in Windows 2000/2003

 

• Chapter 10: DNS and Firewall
  • 10.1 Shared DNS for Internet and Intranet
    • 10.1.1 The Whole Internet is Translated on the Intranet
    • 10.1.2 Only Intranet Addresses are Translated on Intranet
  • 10.2 Name Server Installed on Firewall
    • 10.2.1 Translation in Intranet—Whole Internet
    • 10.2.2 Translation in Intranet without Internet Translation
  • 10.3 Dual DNS
  • 10.4 End Remarks

 

• Appendix A: Country Codes and RIRs

 

• Index

描述
域名系統（Domain Name System）是互聯網的基礎之一。它是一個允許將人類可讀的域名轉換為機器可讀的IP地址，以及將IP地址轉換為域名的系統。本書描述了基本的DNS協議及其擴展；DNS委派和註冊，包括反向域的註冊；在未連接到互聯網的網絡中使用DNS服務器；以及在防火牆機器上使用DNS服務器。本書通過許多詳細的示例展示了各種配置和管理任務的執行。

目錄
前言
第1章：域名系統
1.1 域名和子域名
1.2 名稱語法
1.3 反向域
1.4 域名0.0.127.in-addr.arpa
1.5 區域
1.5.1 特殊區域
1.6 保留域名和偽域名
1.7 查詢（轉譯）
1.7.1 輪詢
1.8 解析器
1.8.1 UNIX中的解析器配置
1.8.2 Windows中的解析器配置
1.9 名稱服務器
1.10 轉發服務器

第2章：DNS協議
2.1 資源記錄
2.2 DNS協議
2.3 DNS查詢
2.3.1 DNS查詢封包格式
2.3.2 DNS查詢封包標頭
2.3.3 問題部分
2.3.4 答案部分、權威服務器和附加信息
2.3.5 壓縮
2.3.6 反向查詢
2.3.7 通過DNS封包進行資源記錄傳輸的方法
2.3.8 通信示例

第3章：DNS擴展