DNS

General

• http://en.wikipedia.org/wiki/Domain_Name_System

• RFC7719 - DNS Terminology

• http://en.wikipedia.org/wiki/Round-robin_DNS

• https://webmasters.stackexchange.com/questions/61467/if-icann-only-charges-0-18-per-domain-name-why-am-i-paying-10 [1]

Articles

• http://bugsplat.info/2012-12-31-how-i-run-my-own-dns.html

• http://saynt2day.blogspot.ru/2013/03/danger-of-trailing-dot-in-domain-name.html

• http://www.theregister.co.uk/2013/03/28/i_accidentally_the_internet/

• Calculating The 5,000 Most Frequently Used Domain Name Prefixes and Suffixes

• http://thenextweb.com/entrepreneur/2013/12/17/getting-creative-domain-name-registration

Domains

• http://www.icann.org/
  • https://en.wikipedia.org/wiki/ICANN

• http://www.domainholdings.com/recent-sales/100-oldest-domain-names/

Records

• http://en.wikipedia.org/wiki/DNS_zone

• http://en.wikipedia.org/wiki/List_of_DNS_record_types

• http://en.wikipedia.org/wiki/Wildcard_DNS_record
• xip.io - wildcard DNS for everyone

• https://news.ycombinator.com/item?id=8336025

Root sevrers

• http://root-servers.org/

Registrars

• http://en.wikipedia.org/wiki/Domain_name_registrar
• http://en.wikipedia.org/wiki/Domain_registration

• http://en.wikipedia.org/wiki/Domain_privacy
• http://en.wikipedia.org/wiki/Registrar-Lock

Comparison

• http://www.domparison.com
• http://www.dotology.co.uk
• http://tld-list.com/ [2]
• https://www.domcomp.com/

• https://news.ycombinator.com/item?id=7839186 - list of good registrars

Good words

• https://www.gandi.net

• https://porkbun.com/products/details#whats-included

• http://www.domainsite.com/name ~£7.50
  • http://name.com

• http://www.ukreg.com/ - .co.uk - £2.95pa*com - £5.99pa.net - £9.49pa.eu - £8.89pa All
  • http://www.fasthosts.co.uk/

• http://www.bigrock.com/
  • http://www.bigrock.com/domain-registration/domain-prices
  • http://www.directi.com/products/

• https://www.domainnameshop.com/

• https://www.namecheap.com - cheap. nameserver included.

• https://internetbs.net - cheaper. nameserver not included.

• http://www.domains.coop/ - .coop

• http://ask.metafilter.com/184973/How-can-I-register-a-unicode-domain#2662987

• Git-based DNS Hosting - Steve Kemp

to avoid

• http://www.1and1.co.uk/ - hmm, bibg corp, ugly ui
  • http://www.1and1.co.uk/details-domain-prices?__lf=Order&linkOrigin=Instant&linkId=ct.btn.domainPrices
  • reseller for http://registrar.schlund.info/

• http://123reg.co.uk - transfer out charges
  • https://www.123-reg.co.uk/domain-names/cheap-domain-names.shtml
  • http://en.wikipedia.org/wiki/Webfusion
  • hidden transfer fees still?

• Network Solutions - avoid
  • http://www.networksolutions.com/support/changing-payment-methods/
  • http://www.networksolutions.com/support/using-paypal-as-your-payment-method/
  • http://www.networksolutions.com/support/transfers-within-network-solutions-2/
  • http://www.networksolutions.com/support/preparing-a-domain-name-for-a-transfer-out-of-network-solutions/
  • http://inessential.com/2014/01/21/network_solutions_auto-enroll_1_850 [3]

Do NOT use GoDaddy. Google it +

• http://skepchick.org/2014/04/godaddy-released-my-personal-information-to-a-spammer-troll/

Name server

• https://en.wikipedia.org/wiki/Name_server

• https://freedns.afraid.org/zc.php?from=L3JlZGlyZWN0Lw==

Search

• http://www.namemesh.com
• http://www.leandomainsearch.com/
• http://instantname.me/

• http://namemonk.com/ [4]

• http://instantdomainsearch.com/
• http://www.bustaname.com/
• https://domize.com/
• http://domaintyper.com/

• http://namevine.com/ - with social service lookup

• http://shortdomainsearch.net/

• http://www.dictionarydomains.co/ [5]

• https://confirm.io/ [6]

• https://domai.nr

TLDs

• http://dns.robtex.com/

• https://www.nic.ch/reg/index/view.html?lid=en
  • http://en.wikipedia.org/wiki/.ch

• http://en.wikipedia.org/wiki/.name

• https://gigaom.com/2014/06/30/the-dark-side-of-io-how-the-u-k-is-making-web-domain-profits-from-a-shady-cold-war-land-deal/ [https://news.ycombinator.com/item?id=8587379

Styles

• http://en.wikipedia.org/wiki/Domain_hack
• http://en.wikipedia.org/wiki/Vanity_domain

thoughts

acronym in url, not domain - seo?

Management

• http://www.fabulous.com/
• https://www.nameterrific.com/ [7]

• http://news.ycombinator.com/item?id=4847449

• http://uberdns.eu/ - uses git

Selling

• http://sedo.com/

Software

Configuration

• https://wiki.archlinux.org/index.php/Resolv.conf

/etc/resolv.conf

nameserver 8.8.8.8

or such ip

BE Broadband;

• 87.194.255.154
• 87.194.255.155

Google;

• 8.8.8.8
• 8.8.4.4

• https://github.com/kvz/nsfailover

Servers, proxy, cache

• http://www.bind9.net/
• https://wiki.archlinux.org/index.php/BIND
• http://www.isc.org/downloads/BIND/
• http://www.yadifa.eu/
• https://www.powerdns.com/

• http://www.unbound.net/

• http://en.wikipedia.org/wiki/Dnsmasq
• https://wiki.archlinux.org/index.php/Dnsmasq

• pdnsd is a proxy DNS server with permanent caching (the cache contents are written to hard disk on exit) that is designed to cope with unreachable or down DNS servers (for example in dial-in networking). Since version 1.1.0, pdnsd supports negative caching.
  • https://wiki.archlinux.org/index.php/Pdnsd

• http://mayakron.altervista.org/wikibase/show.php?id=AcrylicHome - windows

• nscd - name service cache daemon

Tools

whois domain.name

• http://en.wikipedia.org/wiki/Whois

• http://linux.die.net/man/1/nslookup
  • https://en.wikipedia.org/wiki/Nslookup

• DNSYO is a little tool I built to help me keep track of DNS propagation. In short, it's nslookup, if nslookup queried over 1500 servers and collated their results.

• https://github.com/jedisct1/massresolver

• http://www.intodns.com/

dig

dig any domain.name
  show all records for domain

• http://en.wikipedia.org/wiki/Dig_(command)

Services

• http://network-tools.com/ - good all round domain/ip tool
• http://www.who.is/ - basic whois archive records
• http://viewdns.info/

Security

TSIG

• https://en.wikipedia.org/wiki/TSIG - Transaction SIGnature, protocol defined in RFC 2845. It is used primarily by the Domain Name System (DNS) to provide a means of authenticating updates to a DNS database. It is most commonly used to update Dynamic DNS or a secondary/slave DNS server. TSIG uses shared secret keys and one-way hashing to provide a cryptographically secure means of authenticating each endpoint of a connection as being allowed to make or respond to a DNS update.

DNSBL

• https://en.wikipedia.org/wiki/DNSBL

• https://en.wikipedia.org/wiki/Comparison_of_DNS_blacklists

DNSSEC

• https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions

• http://www.icann.org/en/about/learning/factsheets/dnssec-qaa-09oct08-en.htm
• http://www.dnssec-deployment.org/
• http://www.dnssec-tools.org/

• https://wiki.debian.org/DNSSEC
• http://pir.org/get/faq/dnssec
• https://www.opendnssec.org/about/
• http://www.cisco.com/web/about/security/intelligence/dnssec.html
• http://www.internetsociety.org/deploy360/resources/step-by-step-how-to-use-a-dnssec-ds-record-to-link-a-registar-to-a-dns-hosting-provider/
• http://www.dnsops.gov/dnssec-perform.html

• http://www.root-dnssec.org/

still CAs, registrars and TLDs

• https://news.ycombinator.com/item?id=8894902

DNSCurve

• DNSCurve
  • http://en.wikipedia.org/wiki/DNSCurve
  • http://bd.hauke-lampe.de/dnssec/how-to-install-dnscurve.html - non arch

• http://dnscrypt.org/
  • http://en.wikipedia.org/wiki/OpenDNS#DNSCrypt
  • https://wiki.archlinux.org/index.php/DNSCrypt
  • https://www.archlinux.org/packages/community/x86_64/dnscrypt-proxy/ - includes systemd service file to enable exec on start

/etc/conf.d/dnscrypt-proxy
  # old config

• https://github.com/simonclausen/dnscrypt-autoinstall

• http://www.opendns.com/welcome/ - test dns connection

• Current list of free, DNSCrypt-enabled resolvers

• DNSCrypt.eu does not censor or change DNS lookups, nor log your traffic through the DNSCrypt service in a way that can identify you.
  • 176.56.237.171 and 77.66.84.233

DANE

• Wikipedia:DNS-based Authentication of Named Entities (DANE) is a proposed protocol to allow X.509 certificates (commonly used for Transport Layer Security) to be bound to DNS names using Domain Name System Security Extensions (DNSSEC).
• http://www.internetsociety.org/deploy360/resources/dane/

Convergence

• http://convergence.io/
  • https://en.wikipedia.org/wiki/Convergence_(SSL)

• http://www.theregister.co.uk/2011/09/08/google_chrome_rejects_convergence/

DNSNMC

• http://okturtles.com/ [8]
  • https://github.com/okTurtles/dnschain

Dynamic

• http://en.wikipedia.org/wiki/Dynamic_DNS

• http://www.noip.com/free/

• https://onetimedns.net/

• http://www.duckdns.org/

Software

• http://www.inatech.eu/inadyn/

Distributed

• Pseudo-top-level_domain
• Telecomix DNS
  • Next Level pad

• P2P-DNS

• DJDNS

• http://opennamesystem.org/ [9]

GNS

• https://www.youtube.com/watch?v=uhIybhAQ8lY - gnu

Basic DNS Records

From DreamHost wiki;

A

Forward mapping of hostname to an IP address (66.33.201.141).

AAAA

Forward mapping of hostname to an IPv6 address.

PTR

Reverse mapping of an IP address (66.33.201.141) to a hostname (dreamhost.com).

MX

Mail eXchange records tell you which hostname to connect to for sending email.

CNAME

Say it, See Name, it points one domain name to another domain name, including mail service.

TXT

Text records, these are free form text strings, used for things like SPF.

SRV

Service records advertise a specific service a server offers. Zeroconf and XMPP Federation (Jabber and Google Apps) use SRV records in addition to PTR records.

NS

Delegates a domain or subdomain to another DNS server.