DNS Management
The distributive nature of DNS makes it difficult for a single entity to control. Instead, different organizations are responsible for different levels of servers. Each of the root servers operates under the guidance of the Internet Corporation for Assigned Names and Numbers (ICANN) (http://www.icann.org/). ICANN accredits the root servers to ensure that they maintain compatibility. ICANN also defines the gTLD and ccTLD suffixes and authorizes domain registration providers. Each of the domain registrants can allocate new domain names and insert primary name server information into the TLDs. The InterNIC Web site (http://www.internic.net/) includes a list of more than 500 accredited registrars.
Domain names are closely associated with network addresses. The Internet Assigned Numbers Authority (IANA) is responsible for allocating blocks of network addresses to organizations. One person, Jonathan (Jon) Postel, effectively operated IANA until his untimely death in 1998. Pastel was one of the most important pioneers for the Internet (and the author of many RFCs that define the Internet). Since his passing, the duties of IANA have been distributed among a set of Regional Internet Registry (RIR) providers.
Each RIR provides network address allocations, domain registration (DNS and WHOIS), and reverse DNS for a global region. For example, the American Registry for Internet Numbers (ARIN) provides support for the United States and Canada. Other RIRs include AfriNIC (Africa), APNIC (Asia and Pacific), LACNIC (Mexico and Latin America), and RIPE (Europe, the Middle East, and parts of Asia).
Individuals, companies, and other online entities submit domain names to local DNS registrars. The local registrars update the RIR, and the RIR informs the TLD providers. However, the individuals, companies, and online entities are responsible for their own primary DNS servers. In many cases, the primary and secondary DNS hosting is outsourced to third-party providers. Determining the group responsible for managing DNS depends on the level within the DNS hierarchy.
In this tutorial:
- Domain Name System (DNS)
- DNS Common Uses
- Hostname-to-Address Mapping
- Common Lookup Tools
- Naming Confusion Attack Vectors
- Dotted Names
- Name Formatting
- Exploited Anonymity
- Mail Servers
- Sender Policy Framework Overloading
- Domain Keys Overloading
- DNS Protocol
- Packet Information
- Simple DNS Server
- Distributed Architecture
- Top Level Domain Servers
- Generic Top Level Domain (gTLD)
- Secondary Level Domain (SLD)
- Primary and Secondary Servers
- Caching Servers
- DNS Management
- DNS Direct Risks
- DNS Performance versus Security
- DNS Cache Poisoning
- Corrupt DNS Packets
- DNS Domain Hijacking
- DNS Server Hijacking
- Dynamic DNS
- Similar Hostnames
- Domain Renewals
- Hostnames
- Zone Transfers
- Host Listing
- DNS Fields
- Mitgation Option
- Technical Threat Mitigation
- Social Threat Mitigation
- Defining Trusted Replies