book

Pro DNS and BIND

Name: Pro DNS and BIND
Author: Ron Aitchison
ISBN: 9781590594940

by Ron Aitchison

August 2005

Intermediate to advanced

605 pages

15h 9m

English

Apress

Read now

Unlock full access

Copyright
About the Author
About the Technical Reviewer
Acknowledgments
Introduction
Who This Book Is ForHow This Book Is StructuredChapter 1, "An Introduction to DNS"Chapter 2, "Zone Files and Resource Records"Chapter 3, "DNS Operations"Chapter 4, "DNS Types"Chapter 5, "DNS and IPv6"Chapter 6, "Installing BIND"Chapter 7, "BIND Type Samples"Chapter 8, "Common DNS Tasks"Chapter 9, "DNS Diagnostics and Tools"Chapter 10, "DNS Secure Configurations"Chapter 11, "DNSSEC"Chapter 12, "BIND Configuration Reference"Chapter 13, "Zone File Reference"Chapter 14, "BIND APIs and Resolver Libraries"Chapter 15, "DNS Messages and Records"Appendix A, "Domain Name Registration"Appendix B, "DNS RFCs"Additional MaterialConventionsContacting the Author
1. Principles and Overview
1. An Introduction to DNS
1.1. A Brief History of Name Servers1.2. Name Server Basics1.3. The Internet Domain Name System1.3.1. Domains and Delegation1.3.2. Domain Authority1.3.2.1. So What Is www.example.com?1.4. DNS Implementation and Structure1.5. Root DNS Operations1.5.1. Top-Level Domains1.5.1.1. Generic Top-Level Domains1.5.1.2. Country Code Top-Level Domains1.6. DNS System Components1.6.1. Zones and Zone Files1.6.2. Master and Slave DNS Servers1.7. DNS Software1.8. Summary
2. Zone Files and Resource Records
2.1. Zone File Format2.2. Zone File Contents2.3. An Example Zone File2.4. The $TTL Directive2.5. The $ORIGIN Directive2.6. The SOA Resource Record2.7. The NS Resource Record2.8. The MX Resource Record2.9. The A Resource Record2.10. CNAME Resource Record2.10.1. When CNAME Records Must Be Used2.11. Additional Resource Records2.11.1. PTR Resource Records2.11.2. TXT Resource Records2.11.3. AAAA Resource Records2.11.4. NSEC, RRSIG, DS, DNSKEY, and KEY Resource Records2.11.5. SRV Resource Records2.12. Standard Configuration File Scenarios2.13. Summary
3. DNS Operations
3.1. The DNS Protocol3.2. DNS Queries3.2.1. Recursive Queries3.2.1.1. Which Name Server Is Used3.2.2. Iterative (Nonrecursive) Queries3.2.3. Inverse Queries3.3. DNS Reverse Mapping3.3.1. IN-ADDR.ARPA Reverse-Mapping Domain3.3.1.1. The PTR Resource Record3.3.1.2. Reverse-Map Queries3.4. Zone Maintenance3.4.1. Full Zone Transfer (AXFR)3.4.2. Incremental Zone Transfer (IXFR)3.4.3. Notify (NOTIFY)3.4.4. Dynamic Update3.4.5. Alternative Dynamic DNS Approaches3.4.6. Security Overview3.4.6.1. Security Threats3.4.6.2. Security Classification3.5. Summary
4. DNS Types
4.1. Master (Primary) Name Servers4.2. Slave (Secondary) Name Servers4.2.1. Slave (Secondary) DNS Behavior4.2.1.1. Slave vs. Cache4.2.1.2. Change Propagation Using NOTIFY4.3. Caching Name Servers4.3.1. Caching Implications4.4. Forwarding (Proxy) Name Servers4.5. Stealth (DMZ or Split) Name Server4.5.1. Stealth Servers and the View Clause4.5.2. Stealth Server Configuration4.6. Authoritative-only Name Server4.7. Summary

5. DNS and IPv6
5.1. IPv65.1.1. IPv6 Address Notation5.1.2. IPv6 Address Types5.1.3. Prefix or Slash Notation5.1.4. Global Unicast IPv6 Address Allocation5.1.5. IPv6 Global Unicast Address Format5.1.5.1. End-User IPv6 Address Format5.2. Status of IPv6 DNS Support5.2.1. The AAAA vs. A6 Resource Record5.2.2. Mixed IPv6 and IPv4 Network Support5.3. IPv6 Resource Records5.4. The AAAA Resource Record5.5. Reverse IPv6 Mapping5.6. The IPv6 PTR Resource Record5.7. Summary
2. Get Something Running
6. Installing BIND
6.1. Fedora Core 2 Installation6.1.1. Upgrading BIND 96.1.1.1. Post FC2 Installation6.1.1.2. Version Upgrade6.1.2. Configuring BIND 96.1.2.1. Fedora DNS GUI6.1.2.2. Configuring BIND Files6.2. FreeBSD Installation6.2.1. BIND 9 Nonbase Install6.2.2. BIND 9 Base Install6.2.3. FreeBSD 5.3 Issues6.3. Building BIND from Source6.4. Windows Server 2000 Installation6.5. Summary
7. BIND Type Samples
7.1. Before We Start7.1.1. Configuration Layout7.1.2. Configuration Conventions7.1.3. Zone File Naming Convention7.1.4. Required Zone Files7.1.4.1. root.servers7.1.4.2. master.localhost7.1.4.2.1. IPv6 Localhost7.1.4.3. Reverse-Map Zone Files7.1.4.4. 0.0.127.IN-ADDR.ARPA7.1.4.5. IPv6 Localhost Reverse Map7.1.5. BIND named.conf File Format and Style7.1.6. Standard Zone Files7.1.7. Common Configuration Elements7.2. Master DNS Server7.2.1. Master Name Server Configuration7.3. Slave DNS Server7.3.1. Slave Name Server Configuration7.4. Caching-only DNS Server7.4.1. Caching-only Name Server Configuration7.5. Forwarding (a.k.a. Proxy, Client, Remote) DNS Server7.5.1. Forwarding Name Server Configuration7.6. Stealth (a.k.a. Split or DMZ) DNS Server7.6.1. Stealth Configuration7.6.1.1. Stealth (Private) Configuration Files7.6.1.2. Public Configuration Files7.7. Authoritative-only DNS Server7.7.1. Authoritative-only Name Server Configuration7.8. View-based Authoritative-only DNS Server7.8.1. View-based Authoritative-only Name Server Configuration7.8.2. Security and the view Section7.9. Summary
8. Common DNS Tasks
8.1. Delegate a Subdomain (Subzone)8.1.1. Domain Name Server Configuration8.1.2. Subdomain Name Server Configuration8.2. Virtual Subdomains8.2.1. Domain Name Server Configuration8.3. Configure Mail Servers Fail-Over8.4. Delegate Reverse Subnet Maps8.4.1. Assignee Zone File8.4.2. Assignor (End-user) Zone File8.5. DNS Load Balancing8.5.1. Balancing Mail8.5.2. Balancing Other Services8.5.3. Balancing Services8.5.4. Controlling the RRset Order8.5.5. Effectiveness of DNS Load Balancing8.6. Define an SPF Record8.6.1. TXT RR Format8.6.1.1. v=spf1 Field8.6.1.2. pre Field8.6.1.3. type Field8.6.1.4. mod Field8.6.1.5. redirect=domain Field8.6.1.6. exp=text-rr Field8.6.2. SPF type Values8.6.2.1. Basic Mechanisms8.6.2.2. Sender Mechanisms8.6.2.2.1. Type ip4 Format8.6.2.2.2. Type ip6 Format8.6.2.2.3. Type a Format8.6.2.2.4. Type mx Format8.6.2.2.5. Type ptr Format8.6.2.2.6. Type exists Format8.6.2.3. Macro Expansion8.6.3. SPF Record Examples8.6.3.1. Single Domain Mail Server8.6.3.2. SMTP Server Offsite8.6.3.3. Virtual Mail Host8.6.3.4. No Mail Domain8.6.3.5. Using Macro Expansion8.7. Supporting http://example.com8.7.1. Apache Configuration8.8. Out-of-Sequence Serial Numbers8.9. Use of Wildcards in Zone Files8.10. Summary
9. DNS Diagnostics and Tools
9.1. DNS Utilities9.2. The nslookup Utility9.2.1. nslookup Command Format9.2.2. Quick Examples9.2.2.1. Interactive Format9.2.3. Options9.2.4. Examples: Command Line9.2.5. Example: Interactive Mode9.3. BIND dig Utility9.3.1. Quick Examples9.3.2. dig Syntax9.3.3. dig Options9.3.4. dig Examples9.3.4.1. dig Host Query9.3.4.2. dig Domain Query9.3.4.3. dig Multiple Queries9.3.5. dig Output9.3.6. dig Response Values9.3.6.1. DNS Flags9.3.6.2. DNS Status9.4. BIND named-checkconf Utility9.4.1. named-checkconf Syntax9.4.2. named-checkconf Options9.5. BIND named-checkzone Utility9.5.1. named-checkzone Syntax9.5.2. named-checkconf Options9.6. rndc9.6.1. rndc Syntax9.6.2. rndc Options9.6.3. rndc.conf Clauses and Statements9.6.3.1. The options Clause9.6.3.2. The server Clause9.6.3.3. The key Clause9.6.4. rndc Configuration Examples9.6.5. rndc Commands9.7. rndc-confgen Utility9.7.1. rndc-confgen Syntax9.7.2. rndc-confgen Options9.8. BIND nsupdate Utility9.8.1. nsupdate Syntax9.8.2. nsupdate Options9.8.3. nsupdate Command Format9.8.4. nsupdate Example9.9. dnssec-keygen Utility9.9.1. dnssec-keygen Syntax9.9.2. dnssec-keygen Options9.9.3. dnssec-keygen Examples9.10. dnssec-signzone Utility9.10.1. dnssec-signzone Syntax9.10.2. dnssec-signzone Options9.10.3. dnssec-signzone Examples9.11. Diagnosing DNS Problems9.11.1. Before the Problem Happens9.11.1.1. Log All Changes9.11.1.2. Back Up Files9.11.1.3. Logging9.11.1.4. Tools9.11.1.5. External Sources9.11.2. When the Problem Occurs9.11.2.1. Make No Assumptions9.11.2.2. Describe the Problem9.11.2.3. Scope the Problem9.11.2.4. Check Your Logs9.11.2.5. Start Digging9.11.2.6. Diagnosing the Problem9.12. Summary
3. DNS Security
10. DNS Secure Configurations
10.1. Security Overview and Audit10.1.1. DNS Normal Data Flow10.1.2. Security Classification10.2. Administrative Security10.2.1. Up-to-Date Software10.2.2. Limit Functionality10.2.2.1. Defensive Configuration10.2.2.2. Deny All, Allow Selectively10.2.2.3. Remote Access10.2.3. Limit Permissions10.2.4. Running BIND As Nonroot10.2.4.1. Setting the Run Time UID of BIND10.2.4.2. Setting Permissions for the UID10.2.5. BIND in a Chroot Jail10.2.5.1. Fedora Core 2 bind-chroot Package10.2.5.2. FreeBSD 5.x10.2.5.3. Manual Configuration of Chroot Jail10.2.5.3.1. Linux (Fedora Core 2) Chroot10.2.5.3.2. FreeBSD Chroot10.2.5.4. Dedicated Server10.2.6. Stream the Log10.2.7. Software Diversity10.3. A Cryptographic Overview10.3.1. Symmetric Cryptography10.3.2. Asymmetric Cryptography10.3.3. Message Digests10.3.4. Message Authentication Codes10.3.5. Digital Signatures10.3.6. DNS Cryptographic Use10.4. Securing Zone Transfers10.4.1. Authentication and Integrity of Zone Transfers10.4.2. TSIG Configuration10.5. Securing Dynamic Updates10.5.1. TSIG DDNS Configuration10.5.2. SIG(0) Configuration10.6. Summary
11. DNSSEC
11.1. The DNSSEC Environment11.1.1. Islands of Security11.1.2. Chains of Trust11.1.3. Securing or Signing the Zone11.1.4. Secure Zone Maintenance11.1.4.1. The Prepublish Method11.1.4.2. The Double-Signing Method11.1.4.3. Key Rollover Summary11.1.5. Secure Delegation11.1.6. Dynamic DNS and DNSSEC11.2. DNSSEC Implementation11.2.1. Securing the example.com Zone11.2.1.1. Verifying the Signed Zone11.2.2. Establishing a Trusted Anchor11.2.2.1. Using a Trusted Anchor11.2.2.2. DNSSEC Logging11.2.3. Signing the sub.example.com Zone11.2.4. Creating the Chain of Trust11.2.5. Key Rollover11.2.5.1. Prepublish ZSK Rollover11.2.5.2. Double-signing KSK Rollover11.3. DNSSEC Lookaside Validation11.3.1. DLV Configuration11.3.2. DLV Service11.4. Summary
4. Reference
12. BIND Configuration Reference
12.1. BIND Command Line12.1.1. BIND Debug Levels12.1.2. BIND Signals12.2. BIND Configuration Overview12.2.1. Layout Styles12.2.2. named-checkconf Is Your Friend12.3. BIND Clauses12.3.1. BIND address_match_list Definition12.3.2. BIND acl Clause12.3.2.1. acl Clause Syntax12.3.3. BIND controls Clause12.3.4. BIND include Statement12.3.5. BIND key Clause12.3.5.1. key Clause Syntax12.3.6. BIND logging Clause12.3.6.1. logging Clause Syntax12.3.7. BIND lwres Clause12.3.7.1. lwres Clause Syntax12.3.8. BIND masters Clause12.3.8.1. masters Clause Syntax12.3.9. BIND options Clause12.3.9.1. options Clause Syntax12.3.10. BIND server Clause12.3.10.1. server Clause Syntax12.3.11. BIND trusted-keys Clause12.3.12. BIND view Clause12.3.12.1. view Clause Syntax12.3.13. BIND zone Clause12.3.13.1. zone Clause Syntax12.4. BIND Statements12.5. BIND controls Statements12.5.1. inet Statement12.5.1.1. inet Statement Syntax12.6. BIND logging Statements12.6.1. channel Statement12.6.1.1. channel Statement Syntax12.6.2. category Statement12.6.2.1. category Statement Syntax12.7. BIND Resolver Statements12.7.1. view12.7.2. search12.7.3. ndots12.8. BIND Transfer Statements12.8.1. allow-notify12.8.2. allow-transfer12.8.3. allow-update12.8.4. allow-update-forwarding12.8.5. also-notify12.8.6. alt-transfer-source, alt-transfer-source-v612.8.7. ixfr-from-differences12.8.8. max-journal-size12.8.9. max-refresh-time, min-refresh-time12.8.10. max-retry-time, min-retry-time12.8.11. max-transfer-idle-in12.8.12. max-transfer-idle-out12.8.13. max-transfer-time-in12.8.14. max-transfer-time-out12.8.15. multi-master12.8.16. notify12.8.17. notify-source, notify-source-v612.8.18. provide-ixfr12.8.19. request-ixfr12.8.20. serial-query-rate12.8.21. transfer-format12.8.22. transfer-source, transfer-source-v612.8.23. transfers-in12.8.24. transfers-per-ns12.8.25. transfers-out12.8.26. update-policy12.8.27. use-alt-transfer-source12.9. DNS BIND Operations12.9.1. avoid-v4-udp-ports, avoid-v6-udp-ports12.9.2. check-names12.9.3. cleaning-interval12.9.4. coresize12.9.5. database12.9.6. datasize12.9.7. dialup12.9.8. directory12.9.9. dual-stack-server12.9.10. dump-file12.9.11. edns-udp-size12.9.12. files12.9.13. heartbeat-interval12.9.14. hostname12.9.15. interface-interval12.9.16. lame-ttl12.9.17. listen-on12.9.18. listen-on-v612.9.19. match-mapped-addresses12.9.20. max-cache-size12.9.21. max-cache-ttl12.9.22. max-ncache-ttl12.9.23. memstatistics-file12.9.24. pid-file12.9.25. port12.9.26. preferred-glue12.9.27. querylog12.9.28. recursing-file12.9.29. server-id12.9.30. stacksize12.9.31. statistics-file12.9.32. tcp-clients12.9.33. tcp-listen-queue12.9.34. version12.9.35. zone-statistics12.10. DNS BIND Query Statements12.10.1. additional-from-auth, additional-from-cache12.10.2. allow-query12.10.3. allow-recursion12.10.4. auth-nxdomain12.10.5. blackhole12.10.6. delegation-only12.10.7. forward12.10.8. forwarders12.10.9. minimal-responses12.10.10. query-source, query-source-v612.10.11. recursion12.10.12. recursive-clients12.10.13. root-delegation-only12.10.14. rrset-order12.10.15. sortlist12.10.15.1. sortlist Statement Syntax12.11. DNS BIND Security Statements12.11.1. algorithm12.11.2. disable-algorithms12.11.3. dnssec-enable12.11.4. dnssec-lookaside12.11.5. dnssec-must-be-secure12.11.6. key-directory12.11.7. random-device12.11.8. secret12.11.9. sig-validity-interval12.11.10. tkey-dhkey12.11.11. tkey-domain12.11.12. tkey-gssapi-credential12.12. DNS BIND server Statements12.12.1. bogus12.12.2. edns12.12.3. keys12.12.4. transfers12.13. DNS BIND view Statements12.13.1. match-clients12.13.2. match-destinations12.13.3. match-recursive-only12.14. DNS BIND zone Statements12.14.1. check-names12.14.2. file12.14.3. masters12.14.4. type12.15. Summary
13. Zone File Reference
13.1. DNS Zone File Structure13.2. DNS Directives13.2.1. The $ORIGIN Directive13.2.1.1. The $ORIGIN Substitution Rule13.2.1.2. $ORIGIN Syntax13.2.2. The $INCLUDE Directive13.2.2.1. $INCLUDE Syntax13.2.3. The $TTL Directive13.2.3.1. $TTL Syntax13.2.4. The $GENERATE Directive13.2.4.1. $GENERATE Syntax13.3. DNS Resource Records13.3.1. Resource Record Common Format13.3.1.1. The name Field13.3.1.2. The ttl Field13.3.1.3. The class Field13.3.1.4. The type Field13.3.1.5. The type-specific-data Field13.3.1.6. Bit Labels13.3.1.6.1. Bit Label Syntax13.3.2. RRsets13.4. Resource Record Descriptions13.4.1. IPv4 Address (A) Record13.4.1.1. A RR Syntax13.4.2. Experimental IPv6 Address (A6) Record13.4.2.1. A6 RR Syntax13.4.3. IPv6 Address (AAAA) Record13.4.3.1. AAAA RR Syntax13.4.4. AFS Database (AFSDB) Record13.4.4.1. AFSDB RR Syntax13.4.5. Address Prefix List (APL) Record13.4.5.1. APL RR Syntax13.4.6. ATM Address (ATMA) Record13.4.7. Certificate (CERT) Record13.4.7.1. CERT RR Syntax13.4.8. Canonical Name (CNAME) Record13.4.8.1. CNAME RR Syntax13.4.9. Delegation of Reverse Names (DNAME) Record13.4.9.1. DNAME RR Syntax13.4.10. DNSKEY Record13.4.10.1. DNSKEY RR Syntax13.4.11. Delegation Signer (DS) Record13.4.11.1. DS RR Syntax13.4.12. System Information (HINFO) Record13.4.12.1. HINFO RR Syntaxt13.4.13. Integrated Services Digital Network (ISDN) Record13.4.13.1. ISDN RR Syntax13.4.14. IPSEC Key (IPSECKEY) Record13.4.14.1. IPSECKEY RR Syntax13.4.15. Public Key (KEY) Record13.4.15.1. KEY RR Syntax13.4.16. Key Exchanger (KX) Record13.4.16.1. KX RR Syntax13.4.17. Location (LOC) Record13.4.17.1. LOC RR Syntax13.4.18. Mailbox (MB) Record13.4.18.1. MB RR Syntax13.4.19. Mail Group (MG) Record13.4.19.1. MG RR Syntax13.4.20. Mailbox Renamed (MR) Record13.4.20.1. MR RR Syntax13.4.21. Mailbox Mail List Information (MINFO) Record13.4.21.1. MINFO RR Syntax13.4.22. Mail Exchange (MX) Record13.4.22.1. MX RR Syntax13.4.22.2. Subdomain MX Records13.4.23. Naming Authority Pointer (NAPTR) Record13.4.23.1. NAPTR RR Syntax13.4.24. Name Server (NS) Record13.4.24.1. NS RR Syntax13.4.25. Network Service Access Point (NSAP) Record13.4.25.1. NSAP RR Syntax13.4.26. Next Secure (NSEC) Record13.4.26.1. NSEC RR Syntax13.4.27. Pointer (PTR) Record13.4.27.1. PTR RR Syntax13.4.28. X.400 to RFC 822 E-mail (PX) Record13.4.28.1. PX RR Syntax13.4.29. Responsible Person (RP) Record13.4.29.1. RP RR Syntax13.4.30. Resource Record Signature (RRSIG) Record13.4.30.1. RRSIG RR Syntax13.4.31. Route Through (RT) Record13.4.31.1. RT RR Syntax13.4.32. Signature (SIG) Record13.4.32.1. SIG RR Syntax13.4.33. Start of Authority (SOA) Record13.4.33.1. SOA RR Syntax13.4.34. Services (SRV) Record13.4.34.1. SRV RR Syntax13.4.35. SSH Key Fingerprint (SSHFP) Record13.4.35.1. SSHFP RR Syntax13.4.36. Text (TXT) Record13.4.36.1. TXT RR Syntax13.4.37. Well-Known Service (WKS) Record13.4.37.1. WKS RR Syntax13.4.38. X.25 Address (X25) Record13.4.38.1. X25 RR Syntax13.4.39. Alternative Cryptographic Algorithms13.5. User-Defined RRs13.6. Summary
5. Programming
14. BIND APIs and Resolver Libraries
14.1. BIND API Overview14.1.1. Advanced Database API (adb)14.1.2. Simple Database API (sdb)14.2. The Simple Database API (sdb)14.2.1. Callback Overview14.2.1.1. create()14.2.1.2. destroy()14.2.1.3. lookup()14.2.1.4. authority()14.2.1.5. allnodes()14.2.2. Registering the Callbacks14.2.2.1. dns_sdb_register() Function14.2.2.2. dns_sdc_unregister() Function14.2.2.3. isc_result_t Return Codes14.2.3. Adding the Driver to BIND14.2.3.1. Header File Insertion14.2.3.2. Initialization Function Insertion14.2.3.3. Termination Function Insertion14.2.3.4. Makefile.in Insertion14.2.4. The Callback Functions14.2.4.1. create() Callback Function14.2.4.2. destroy() Callback Function14.2.4.3. lookup() Callback Function14.2.4.4. authority() Callback Function14.2.4.5. allnodes() Callback Function14.2.5. Returning RRs14.2.5.1. dns_sdb_putrr() Function14.2.5.2. dns_sdb_putrdata() Function14.2.5.3. dns_sdb_putsoa() Function14.2.5.4. dns_sdb_putnamedrr() Function14.2.5.5. dsn_sdb_putnamedrdata() Function14.2.6. Memory Management for Drivers14.2.6.1. isc_mem_get() Function14.2.6.2. isc_mem_free() Function14.2.7. Logging for Drivers14.2.7.1. isc_log_write() Function14.2.8. Testing the Driver14.2.8.1. lBuilding BIND14.2.9. sdb Sample Driver14.2.9.1. Source Module (example.c)14.2.9.2. Header File (example.h)14.3. Resolver Libraries14.3.1. POSIX Library Status14.4. The RES Library Set14.4.1. Invoking the RES Library14.4.2. The _res Structure14.4.3. RES Library Functions14.4.3.1. dn_comp Function14.4.3.2. dn_expand Function14.4.3.3. dn_skipname Function14.4.3.4. ns_get16 Function14.4.3.5. ns_get32 Function14.4.3.6. ns_put16 Function14.4.3.7. ns_put32 Function14.4.3.8. res_init() Function14.4.3.9. res_mkquery Function14.4.3.10. res_query Function14.4.3.11. res_search Function14.4.3.12. res_send Function14.5. Summary
15. DNS Messages and Records
15.1. DNS Message Formats15.1.1. DNS Message Overview15.1.2. DNS Message Format15.1.3. DNS Message Header15.1.4. DNS QUESTION SECTION15.1.5. DNS ANSWER, AUTHORITY, and ADDITIONAL SECTIONS15.1.5.1. NAME Field Format15.1.5.2. Non-EDNS0 Record Format15.1.6. EDNS0 Transactions15.1.7. OPT Pseudo RR Format15.2. DNS Binary RR Format15.2.1. Security Algorithm Formats15.2.1.1. Algorithm 5 (RSA-SHA-1)15.2.2. NSEC Bitmap Format15.3. Summary
6. Appendixes
A. Domain Name Registration
A.1. AnswersA.1.1.A.1.1.1.A.1.1.1.1. What is a TLD (or gTLD or ccTLD or sTLD) domain name?A.1.1.1.2. Who is responsible for domain names?A.1.1.1.3. What TLDs are available?A.1.1.1.4. I thought www.example.com was my domain name.A.1.1.1.5. What is a URL (or URI or URN)?A.1.1.1.6. What is an SLD?A.1.1.1.7. How do I register a .com or .org or .net domain name?A.1.1.1.8. How do I register a domain in Malaysia (or any other country)?A.1.1.1.9. Can I register a domain name in any country?A.1.1.1.10. How do I register a US (.us) or state (for instance, ny.us) domain name?A.1.1.1.11. How do I register a Canadian (.ca) or provincial (for instance, bc.ca) domain name?A.1.1.1.12. If I register a .com, do I automatically register in every country?A.1.1.1.13. What happens when I register a domain name?A.1.1.1.14. What do the Primary and Secondary DNS server names do and why are they necessary?A.1.1.1.15. How do I change my domain name information?A.1.1.1.16. How do I register an .edu (or .mil or .gov or .int) name?A.1.1.1.17. How do I check my (or some else's) registration information?A.1.1.1.18. What is IANA and how does it relate to ICANN and the IETF?A.1.1.1.19. Who controls the .ARPA domain name?
B. DNS RFCs

Content preview from Pro DNS and BIND

Appendix A. Domain Name Registration

In order to use a domain name, it must be registered. Where and how it is registered depends on the Top-Level Domain (TLD), for example, in example.com, .com is the TLD. The following information may be useful when registering or planning to register domain names and is presented in the form of frequently asked questions (FAQs).

What is a domain name?
What is a TLD (or gTLD or ccTLD or sTLD) domain name?
Who is responsible for domain names?
What TLDs are available?
I thought www.example.com was my domain name.
What is a URL (or URI or URN)?
What is an SLD?
How do I register a .com or .org or .net domain name?
How do I register a domain in Malaysia (or any other country)?
Can I register my domain name in any country? ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781590594940Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Pro DNS and BIND

by Ron Aitchison

Appendix A. Domain Name Registration

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.