Domain Name System

(DNS)
Siddhartha Pal-22BIT0024
Madhuvanthi S-22BIT0103
Saloni Sinha-22BIT0445
Priyanshu Das-22BIT0539
What is DNS?
Function Importance

DNS is a distributed database system that maps Without DNS, we'd have to memorize IP
domain names to IP addresses, enabling users addresses. It enables seamless browsing and
to access websites and services using access to essential online services. DNS
memorable names instead of complex numerical ensures redundancy and load balancing,
addresses. Think of it as the internet’s guaranteeing high availability and reliable
address book, making navigation simple. service delivery across the web.
DNS Architecture: A Hierarchical
System
Root Servers
The foundation of the DNS hierarchy, directing queries to the appropriate TLD servers.

TLD Servers
Manage domain extensions like .com, .org, and .net.

Authoritative
Servers
Hold the final DNS records for specific domains.
Types of DNS
Records
A Record AAAA Record MX Record CNAME Record
Maps domain names to Maps domain names to Directs email traffic Creates an alias for
IPv4 addresses (e.g., IPv6 addresses, to the appropriate another domain name,
example.com → supporting modern mail servers, ensuring useful for subdomains
192.0.2.44). internet protocols. reliable email or load balancing.
delivery.
How DNS Works: The Query
Process
User Request
User enters a domain name in browser. Browser checks its cache.

Recursive Resolver
Query checks local cache; if not found, queries root server.
Resolver

Root DNS Server

Directs resolver to TLD name server; doesn't provide final IP.

TLD Name Server

Returns address of authoritative name server for domain.

Authoritative Name
Server
Holds DNS records and provides corresponding IP address.

Response to
Browsersends IP address to browser, which connects to web server.
Resolver
Role of Root Name
Servers in DNS
Root name servers are critical to the DNS
infrastructure. They are the starting point for DNS
resolution.
1 Authoritative 2 Referral to TLD
Information Servers
Provide authoritative Direct queries to the
information about appropriate TLD name
top-level domains, servers for specific
such as .com domain information.
and .org.
3 Global Network
Operate on a globally distributed network to
ensure high availability and low latency.
Why DNS is
Indispensable
Simplifies Web Supports Critical Ensures Redundancy
Navigation Services and Load Balancing
Transforms complex IP • Email routing Maintains high availability
addresses into easy-to- • Cloud services and optimal performance.
remember domain names. • Content delivery networks
(CDNs)
Challenges of DNS in
Distributed Systems
DNS faces significant challenges in distributed environments.
Consistency, scalability, failure handling, and security are key
concerns.
Consistency
Maintaining consistent DNS records across distributed zones is
crucial.

Scalability
DNS must handle high query volumes and frequent updates efficiently.

Failure Handling
DNS infrastructure should gracefully handle server failures and
network partitions.

Security
Protecting DNS from attacks like hijacking and DDoS is essential.
Navigating DNS Security
Risks
DNS Hijacking
Redirects queries through rogue DNS
1
servers.

DDoS Attacks
2 Overloads DNS servers with excessive
traffic.

DNS Spoofing

3 Corrupts DNS records, redirecting users to

malicious sites.
DNS Load Balancing and Performance
Optimization
1 Multiple Servers 2 Round-Robin DNS
Employ primary and secondary servers. This Rotate multiple IP addresses for a domain.
ensures redundancy if one server fails. Distribute traffic across different servers
evenly.
3 Anycast Routing 4 DNS Failover
Share the same IP across multiple DNS servers. Some DNS services monitor the health of
Route requests to the nearest server to reduce backend servers. If a server becomes
latency. unresponsive, the DNS automatically removes it
from responses.

5 Load-Balancing
ServicesDNS services integrate with CDNs or cloud-based global load balancers. Policies like
Advanced
geolocation-based routing direct users to the closest or least-loaded server.
DNS Load Balancing and Performance
Optimization (…cntd)
Caching Techniques Load Balancing
Methods
ISP-level, browser, and OS-level caching for Geographical load balancing directs users to
reduced latency and faster response times. the nearest server, while round-robin DNS
Caching stores DNS records temporarily to alternates responses between multiple IP
speed up future queries, enhancing user addresses. Load balancing distributes network
experience by reducing the need to repeatedly traffic across multiple servers, preventing
fetch the same information. overload and ensuring high availability and
optimal performance.
Handling DNS Server
Failures
1 Cached Records 2 Service
Clients will continue using cached DNS Disruption
New DNS lookups will fail, causing service
records for a limited time. This helps to disruptions. Users may experience
minimize immediate disruptions, as clients inability to access websites or services
can still access previously resolved until the DNS issue is resolved.
domains.
3 Redundancy 4 Monitoring
Implement multiple geographically diverse Continuous monitoring and alerts for
DNS servers for redundancy. Distributing prompt issue resolution. Real-time
servers across different locations monitoring allows for quick detection and
minimizes the impact of regional outages mitigation of potential DNS server
and improves overall resilience. failures.
Mitigating Security Risks with Robust
Protocols
DNSSEC
Prevent DNS spoofing with digital signatures.

DNS-over-HTTPS
(DoH)
Encrypt DNS queries to protect user privacy.

Monitor DNS
Traffic
Detect anomalies indicative of security breaches.

Regular Updates
Patch DNS infrastructure to address vulnerabilities.
DNS Setup Best
PracticesMultiple Servers
Deploy DNS servers across various
geographical regions to ensure
Anycast DNS
redundancy and minimize latency.
Implement Anycast to efficiently route
user requests to the closest available
Load Balancing
server, optimizing response times.
Distribute DNS traffic effectively using
Round-Robin DNS or GeoDNS to prevent
DNSSEC
server overloads and ensure high
Enable DNSSEC to protect against DNS
availability.
spoofing and ensure the integrity of DNS
responses, enhancing overall security.