Unit III - Name Services and Domain Name System
Unit III - Name Services and Domain Name System
Importance:
● Names and name resolution are distributed across a peer-to-peer network, as seen in
blockchain-based naming systems.
Domain Name System (DNS)
DNS is a hierarchical name service used to translate domain names (e.g.,
www.example.com) into IP addresses.
DNS is essential for the operation of the internet, allowing users to access resources
by names instead of numeric IP addresses.
https://www.webnic.cc/wp-content/uploads/2020/05/dns-blog-img01.png
DNS Architecture
Domain Names: Structured into a hierarchy (e.g., com, example.com,
www.example.com).
● Resolvers:
○ Client-side DNS component that initiates the DNS lookup process.
○ Typically built into the operating system or network software.
How DNS Works (Name Resolution Process)
● Step 1: The client sends a query (e.g., www.example.com) to the DNS resolver.
● Step 2: The resolver checks its cache for a recent answer.
● Step 3: If no cached result is available, the resolver contacts a root name server.
● Step 4: The root name server directs the resolver to a TLD name server (e.g.,
for .com).
● Step 5: The TLD name server directs the resolver to the authoritative name server
for the domain (e.g., example.com).
● Step 6: The authoritative name server returns the IP address for the requested
domain.
● Step 7: The resolver caches the result and returns the IP address to the client.
DNS Caching
● Purpose: To reduce the load on DNS servers and speed up resolution for frequently
accessed domains.
● Cache TTL (Time To Live): Each DNS record has a TTL value, specifying how long the
result should be cached.
● Issues:
○ Stale Caches: If DNS records are updated, cached data may be outdated.
○ Cache Poisoning: An attack where incorrect DNS data is inserted into the resolver’s
cache.
Security Concerns with DNS
● DNS Spoofing/Poisoning: Redirecting a domain name to a malicious IP by tampering
with DNS records.
● DDoS (Distributed Denial of Service): DNS servers can be targeted to flood them with
traffic, disrupting services.