Book Image

Managing Mission - Critical Domains and DNS

By : Mark E.Jeftovic
Book Image

Managing Mission - Critical Domains and DNS

By: Mark E.Jeftovic

Overview of this book

Managing your organization's naming architecture and mitigating risks within complex naming environments is very important. This book will go beyond looking at “how to run a name server” or “how to DNSSEC sign a domain”, Managing Mission Critical Domains & DNS looks across the entire spectrum of naming; from external factors that exert influence on your domains to all the internal factors to consider when operating your DNS. The readers are taken on a comprehensive guided tour through the world of naming: from understanding the role of registrars and how they interact with registries, to what exactly is it that ICANN does anyway? Once the prerequisite knowledge of the domain name ecosystem is acquired, the readers are taken through all aspects of DNS operations. Whether your organization operates its own nameservers or utilizes an outsourced vendor, or both, we examine the complex web of interlocking factors that must be taken into account but are too frequently overlooked. By the end of this book, our readers will have an end to end to understanding of all the aspects covered in DNS name servers.
Table of Contents (17 chapters)
7
Types and Uses of Common Resource Records

djbdns/tinydns

Written by the colorful and sometimes controversial Dr. Daniel J. Bernstein, who also created the qmail program, djbdns is a package of modular DNS programs created out of a dissatisfaction with what Dr. Bernstein felt were incessant and overly frequent security flaws found in BIND (then in version 4 and later 8).

The authoritative nameserver component of the package is tinydns. The recursor is dnscache. This is unlike BIND, which can be configured to run as authoritative, or configured as a resolver, or misconfigured to run as both.

djbdns is a nice, tight modular package and is generally secure. It doesn't typically use BIND-style zone transfers (AXFR or IXFR) but recommends to sync its data across nodes via rsync over ssh.

There are components to execute AXFR zone transfers to facilitate inter-operations with BIND and other nameserver types.

...