Domain Name System (DNS) is an Internet-based directory system that returns a destination IP address, given a domain name (such as www.cisco.com). DNS is a distributed database. Separate, independent organizations administer their assigned domain name spaces and can break their domains into a number of subdomains. For example, given www.cisco.com, DNS returns the IP address 198.133.219.25. DNS was first specified in RFCs 882 and 883. The current specifications are provided in RFCs 1034 and 1035. DNS has also been updated by RFCs 1101, 1122, 1183, 1706, 1876, 1982, 1995, 1996, 2136, 2137, 2181, 2308, 2535, 2782, 2845, 3425, 3658, 3755, 4033, 4034, 4035, 6014, and 6840. As you can see, a lot of work has gone into making DNS efficient and secure.

Figure 1-8 shows a simplified view of the DNS process for name resolution. The client device queries its configured DNS server (the resolver) for the IP address of a fully qualified domain name (FQDN; for example, www.cisco.com). The resolver in turn queries the DNS server of the foreign or remote DNS server, which responds with the IP address of www.cisco.com. This response is stored in cache on the resolver so that it can be used for future queries. The resolver provides the response to the client machine, which can then communicate via the IP address to the destination.

Figure 1-8 DNS Name Resolution

DNS was implemented to overcome the limitations of managing a single text host table. Imagine creating and maintaining text files with the names and IP addresses of all the hosts on the Internet! DNS scales hostname-to-IP-address translation by distributing responsibility for the domain name space. DNS follows a reverse tree structure for domain name space, as shown in Figure 1-9. IANA (www.iana.org) manages the tree’s root.

Figure 1-9 DNS Tree

DNS data is called resource records (RRs). Resource records are the data within a DNS zone. Table 1-31 lists some common resource records.

Table 1-31 DNS Resource Records

DNS RRDescription
AAddress. Provides the name-to-address mapping. It contains the IP address in dotted-decimal form.
AAAASecure IPv6 address.
CNAMECanonical name. Used for aliases or nicknames.
MXMail Exchanger. Specifies the IP of the server where mail should be delivered.
NSName server. Specifies the name of the device that provides DNS for a particular domain.
PTRPointer. Used for reverse mapping from the translation of IP addresses to names.
SOAStart of Authority. Designates the start of a zone. This is the device that is the master of DNS data for a zone.

DNS uses TCP and UDP port 53. UDP is the recommended transport protocol for DNS queries. TCP is the recommended protocol for zone transfers between DNS servers. A zone transfer occurs when you place a secondary server in the domain and transfer the DNS information from the primary DNS server to the secondary server. A DNS query searches for the IP address of an FQDN, such as www.cnn.com.

One important note for the CCNP to remember is to place DNS servers in the enterprise campus server farm module and enterprise branch of the enterprise campus architecture (see Figure 1-10).

Figure 1-10 DHCP and DNS Servers in the Network

Table 1-32 summarizes the placement of DHCP and DNS servers on a Cisco enterprise network.

Table 1-32 DHCP and DNS Servers

Network LocationServer Type
Campus data centerDHCP and internal DNS
Enterprise branchDHCP and internal DNS
E-commerceExternal DNS
InternetExternal DNS
SP edge premisesExternal DNS
Remote enterprise data centerInternal and external DNS

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *