Book Image

Managing Mission - Critical Domains and DNS

By : Mark E.Jeftovic
Book Image

Managing Mission - Critical Domains and DNS

By: Mark E.Jeftovic

Overview of this book

Managing your organization's naming architecture and mitigating risks within complex naming environments is very important. This book will go beyond looking at “how to run a name server” or “how to DNSSEC sign a domain”, Managing Mission Critical Domains & DNS looks across the entire spectrum of naming; from external factors that exert influence on your domains to all the internal factors to consider when operating your DNS. The readers are taken on a comprehensive guided tour through the world of naming: from understanding the role of registrars and how they interact with registries, to what exactly is it that ICANN does anyway? Once the prerequisite knowledge of the domain name ecosystem is acquired, the readers are taken through all aspects of DNS operations. Whether your organization operates its own nameservers or utilizes an outsourced vendor, or both, we examine the complex web of interlocking factors that must be taken into account but are too frequently overlooked. By the end of this book, our readers will have an end to end to understanding of all the aspects covered in DNS name servers.
Table of Contents (17 chapters)
7
Types and Uses of Common Resource Records

Conclusion

In this chapter, we took at look at the more common alternative nameservers to the default BIND. Because we consider nameserver diversity a best practice, we considered these alternatives from the perspective of using them in tandem with BIND or with each other, as opposed to deciding between them.

Of the nameservers we looked at, PowerDNS, NSD, and KnotDNS look to be the easiest drop-in replacements for BIND. PowerDNS is attractive because of its ability to automagically add new domains from trusted masters a way to more easily import large numbers of zones, and the versatility to be obtained from combining multiple, programmable backends.

Knot DNS' dynamically scriptable configuration took a while to get my head around, but it's powerful and lends itself well to complex environments and portfolios.

PowerDNS, NSD, and Knot have all done well to simplify DNSSEC...