DNS

From Things and Stuff Wiki
Jump to navigation Jump to search


General

Articles

Domains

Records

Root severs

Registrars

Comparison

Good words


to avoid

Do NOT use GoDaddy. Google it +

Name server

Search

TLDs

Styles

thoughts

acronym in url, not domain - seo?

Management

Selling

Software

Configuration

/etc/resolv.conf 

# Google DNS
nameserver 8.8.8.8
nameserver 8.8.4.4

See also #DNSCrypt

/etc/hosts

resolvconf

systemd-resolved

  • systemd-resolved is a system service that provides network name resolution to local applications. It implements a caching and validating DNS/DNSSEC stub resolver, as well as an LLMNR resolver and responder. In addition it maintains the /run/systemd/resolve/resolv.conf file for compatibility with traditional Linux programs. This file may be symlinked from /etc/resolv.conf.
  • systemd-resolve — Resolve domain names, IPV4 and IPv6 addresses, DNS resource records, and services

Other

  • https://github.com/kvz/nsfailover - Every minute (or whatever), nsfailover.sh checks to see if the primary configured nameserver can resolve google.com. If it cannot, it writes the secondary, or even tertary server to function as the primary server in /etc/resolv.conf

Servers, proxy, cache

BIND

YADIFA

  • http://www.yadifa.eu/ YADIFA® is designed specifically for the efficient management of large Internet zones and uses dynamic updates to instantly change domain name records. It is equally optimised to handle multiple Internet zones. Our benchmark tests show how we measure up to the competition.

PowerDNS

Unbound

  • Unbound is a validating, recursive, and caching DNS resolver.

Dnsmasq

  • Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. It has also been widely used for tethering on smartphones and portable hotspots, and to support virtual networking in virtualisation frameworks. Supported platforms include Linux (with glibc and uclibc), Android, *BSD, and Mac OS X. Dnsmasq is included in most Linux distributions and the ports systems of FreeBSD, OpenBSD and NetBSD. Dnsmasq provides full IPv6 support.

pdnsd

  • pdnsd is a proxy DNS server with permanent caching (the cache contents are written to hard disk on exit) that is designed to cope with unreachable or down DNS servers (for example in dial-in networking). Since version 1.1.0, pdnsd supports negative caching.

nscd

  • nscd - name service cache daemon

Tools

whois domain.name
  • DNSYO is a little tool I built to help me keep track of DNS propagation. In short, it's nslookup, if nslookup queried over 1500 servers and collated their results.

dig

dig any domain.name
  show all records for domain

Services

Security

TSIG

  • https://en.wikipedia.org/wiki/TSIG - Transaction SIGnature, protocol defined in RFC 2845. It is used primarily by the Domain Name System (DNS) to provide a means of authenticating updates to a DNS database. It is most commonly used to update Dynamic DNS or a secondary/slave DNS server. TSIG uses shared secret keys and one-way hashing to provide a cryptographically secure means of authenticating each endpoint of a connection as being allowed to make or respond to a DNS update.

DNSBL

DNSSEC

still CAs, registrars and TLDs

DNSCurve

DNSCrypt

Client

sudo dnscrypt-proxy -R dnscrypt.eu-dk --local-address=127.0.0.1:40

Using dnsmasq listening on port 40 to cache requests.

or 

systemctl edit dnscrypt-proxy.socket

Note: The ListenStream and ListenDatagram options need to be cleared with empty assignment before overriding, otherwise the new address would be added to the list of sockets. 

[Socket]
ListenStream=
ListenDatagram=
ListenStream=127.0.0.1:40
ListenDatagram=127.0.0.1:40

Server

Resolvers

  • DNSCrypt.eu does not censor or change DNS lookups, nor log your traffic through the DNSCrypt service in a way that can identify you.
    • 176.56.237.171 and 77.66.84.233

Testing

DANE

Convergence

DNSNMC

Dynamic

Software

Alternate

GNU Name System

Basic DNS Records

From DreamHost wiki;

A
Forward mapping of hostname to an IP address (66.33.201.141).
AAAA
Forward mapping of hostname to an IPv6 address.
PTR
Reverse mapping of an IP address (66.33.201.141) to a hostname (dreamhost.com).
MX
Mail eXchange records tell you which hostname to connect to for sending email.
CNAME
Say it, See Name, it points one domain name to another domain name, including mail service.
TXT
Text records, these are free form text strings, used for things like SPF.
SRV
Service records advertise a specific service a server offers. Zeroconf and XMPP Federation (Jabber and Google Apps) use SRV records in addition to PTR records.
NS
Delegates a domain or subdomain to another DNS server.
Retrieved from "https://wiki.thingsandstuff.org/index.php?title=DNS&oldid=36078"