1 / 44

DNS & BIND

DNS & BIND. SPARCS 12 coffee. ara.kaist.ac.kr. 143.248.234.103. ara.kaist.ac.kr. DNS. 143.248.234.103. DNS. Domain Name System Hierarchical distributed naming system Translate b/t two principal namespaces domain name hierarchy Internet Protocol(IP) address

meryle
Download Presentation

DNS & BIND

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. DNS & BIND SPARCS 12 coffee

  2. ara.kaist.ac.kr 143.248.234.103

  3. ara.kaist.ac.kr DNS 143.248.234.103

  4. DNS • Domain Name System • Hierarchical distributed naming system • Translate b/t two principal namespaces • domain name hierarchy • Internet Protocol(IP) address • Maintains the domain name hierarchy 192.0.43.10 (IPv4) 2620:0:2d0:200::10 (IPv6) www.example.com domain name hierarchy IP address

  5. Architecture of DNS

  6. Domain Name Space

  7. Domain Name Space DNS is maintained by a distributed database system

  8. Domain Name Space Each node or leaf in the tree has zero or more resource records.

  9. Domain Name Space Sub domain Top level http://www.example.co.kr/ Label : letter(a-z or A-Z), digits(0-9), hyphen(-), cannot use hyphen in first letter Sub domain Second level Each label may contain up to 63 characters. The full domain name may not exceed a total length of 253 characters in its external dotted-label specification. Domain name consists of one or more labels Each label is delimited by dots This tree of subdivisions may have up to 127 levels.

  10. TLD(Top Level Domain) • 일반 도메인(generic domain, gTLD) • com, net, org, info, … • 국가 도메인(country code domain, ccTLD) • kr, us, eu, jp, … • 인터넷 인프라 도메인(infrastructure domain)

  11. FQDN(Fully Qualified Domain Name) • 도메인 네임을 루트 도메인으로부터시작하는 전체 이름의 표기를 사용한 것. • 끝에 root domain의 null label까지 완전히 표기(끝에 .으로 끝남) • ara.kaist.ac.kr (x) • ara.kaist.ac.kr.(o)

  12. PQDN(Partially Qualified Domain Name) • Label doesn’t end with null string. • 시스템 기본 도메인이 kaist.ac.kr일경우 www.example.co.kr은 www.example.co.kr.kaist.ac.kr로 해석될 수 있다. • Resolver가 www.example.co.kr.(FQDN)으로 해석하여 name server에 전달 -> 없으면 www.example.co.kr.kaist.ac.kr로 전달

  13. DNS zone

  14. DNS zone • Portion of a domain name space. kaist.ac.kr zone aaaaaaaaa ac.kr zone s postech.ac.kr zone aaaaaa

  15. Resource Records

  16. Resource Records(RR) • Name – Domain name as key index • TTL – Time to Live on cache table • Class – only IN(internet) • Type – A-1, NS-2, SOA-6, etc. • RDATA – Raw data, depends on the type

  17. Resource Records - Types http://en.wikipedia.org/wiki/List_of_DNS_record_types

  18. Resource Records

  19. DNS protocol

  20. Querying google.com?

  21. Querying google.com?

  22. Querying google.com?

  23. Querying google.com?

  24. Update new resource record (sparcs.kaist.ac.kr)

  25. Update

  26. 실습! sudo apt-get install dnsutils

  27. Hosts? • windows/system32/drivers/etc/hosts • /etc/resolv.conf – in Linux

  28. dig(domain information grouper) • dig [@global-server] [domain] [q-type] {q-opt} … • Ex) dig @ns.kaist.ac.kr otl.kaist.ac.kr A

  29. nslookup

  30. 쉬었다가 합시다

  31. BIND? • Berkeley Internet Name Domain • 현재 전 세계에서 가장 많이 사용되는 DNS용 응용프로그램 • 1980년대 초 UCBerkeley 대학원생 4명에 의해 시작됨

  32. BIND • BIND 4 by the Computer Systems Research Group(CSRG) at UC Berkeley. • BIND 8 by the Internet Systems Consortium(ISC) • BIND 9 was released in September 2000

  33. master & slave? • 같은 내용을 가진 두 개 이상의 DNS 서버를 운영하는 경우 • slave가 master로부터 일정한 주기마다 데이터를 가져오도록 설정할 수 있음 • zone에 따라 한 서버가 master일 수도, slave일 수도 있음

  34. RDATA of SOA • mname – 해당 zone의 primary master name server domain name • rname – zone을 관리하는 관리자 이메일 • serial – zone의 변경에 따른 버전번호 정보 필드(YYYYMMDDNN) • refresh, retry, expire – 변경여부 확인, 갱신 재시도, 유효기간 • minimum – dafault TTL

  35. NS, A • @ IN NS ns.mazic.org. • coffee IN A 134.248.234.103

  36. 바로 실습 sudo apt-get install bind9

  37. 이걸 보고 따라하면 됩니다 • 스팍스 서버에 /etc/bind/에 있는 • named.conf • sparcs.conf • db.SPARCS.ORG

  38. db.SPARCS.ORG

  39. db.SPARCS.ORG

  40. 어디까지 따라해야 하나..?

  41. 해보자! • 각자의 휠 세미나 실습 서버에 DNS서버를 구현해보자! • (자기ID).wseminar#.sparcs.org로 연결하면 아라가 뜨게 해보자 ㅋ

  42. Reference • SPARCS seminar – hodduc - 20100705 • SPARCS seminar – boolgom – 20110629 • SPARCS seminar – gangok – 20110701 • http://en.wikipedia.org/wiki/Domain_Name_System • http://dns.kisa.or.kr/kor/main.jsp • DNS서버운영지침서.pdf

  43. Reference • http://blog.naver.com/une4535?Redirect=Log&logNo=140055620130 • http://www.freesoft.org/CIE/Topics/77.htm

  44. 감사합니다!

More Related