Book Image

Managing Mission - Critical Domains and DNS

By : Mark E.Jeftovic
Book Image

Managing Mission - Critical Domains and DNS

By: Mark E.Jeftovic

Overview of this book

Managing your organization's naming architecture and mitigating risks within complex naming environments is very important. This book will go beyond looking at “how to run a name server” or “how to DNSSEC sign a domain”, Managing Mission Critical Domains & DNS looks across the entire spectrum of naming; from external factors that exert influence on your domains to all the internal factors to consider when operating your DNS. The readers are taken on a comprehensive guided tour through the world of naming: from understanding the role of registrars and how they interact with registries, to what exactly is it that ICANN does anyway? Once the prerequisite knowledge of the domain name ecosystem is acquired, the readers are taken through all aspects of DNS operations. Whether your organization operates its own nameservers or utilizes an outsourced vendor, or both, we examine the complex web of interlocking factors that must be taken into account but are too frequently overlooked. By the end of this book, our readers will have an end to end to understanding of all the aspects covered in DNS name servers.
Table of Contents (17 chapters)
7
Types and Uses of Common Resource Records

DNS and DDoS Attacks

Because of the pivotal role DNS plays in all things internet, remember absolutely nothing happens without it, the DNS system provides a tempting attack vector to those bad actors who want to knock targets inoperable or offline.

If you take out somebody's authoritative nameservers, you take that somebody right off the internet.

Alas, DNS attacks against nameservers aren't exactly surgical strikes. As a rule, there is a lot of collateral damage.

Given a target domain example.dom using nameservers: dns1.someisp.com and dns2.someisp.com, and someisp happens to have thousands, or even millions of other downstream domains on those same nameservers (and only those same nameservers). If the attackers are successful in knocking over those nameservers, not only will example.dom go offline, so will every other domain using the same nameserver set.

Statistically...