{"id":234,"date":"2017-12-14T23:50:26","date_gmt":"2017-12-15T04:50:26","guid":{"rendered":"https:\/\/itp.nyu.edu\/networks\/?page_id=234"},"modified":"2025-09-22T17:43:36","modified_gmt":"2025-09-22T21:43:36","slug":"what-we-should-know-about-dns","status":"publish","type":"page","link":"https:\/\/itp.nyu.edu\/networks\/explanations\/what-we-should-know-about-dns\/","title":{"rendered":"What We Should Know about DNS"},"content":{"rendered":"

<\/span>1. What is DNS?<\/span><\/h2>\n

The DNS, which stands for Domain Name System, is a hierarchical decentralized naming system for devices(computers, smartphones, etc), services, or other resources connected to the Internet or a private network. Mainly, the DNS associates domain names to the numerical IP addresses. <\/span>The DNS has been in use since 1985. <\/span>http:\/\/symbolics.com\/<\/span><\/a> is the first and the oldest registered domain name on the Internet.<\/span><\/p>\n

By the way, domain name is is the name of a website. IP address is a number used to indicate the location of a computer or other device on a network. For example, ITP is using a server which has the IP address 128.122.157.181. In addition, ITP has a few domain names like itp.nyu.edu and tisch.nyu.edu\/itp(This is including a directory). The DNS associates the numerical IP address(128.122.157.181) with memorable domain name.<\/span><\/p>\n

\"Breakdown<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Figure 1 The Domain name of ITP<\/span><\/i><\/p>\n

\"Breakdown<\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Figure 2 IP Address structure<\/span><\/i><\/p>\n

All devices which are connected to the Internet have IP addresses. Users can access devices if they know the device\u2019s IP address, but sometimes IP addresses are changed by a system. In this case users need to re-memorize numbers, which are not easy to memorize. Let\u2019s assume two cases in which the \u00a0IP address is changed. The first case is to change a server like when you are migrating \u00a0a site from your current hosting service to another service. In this case, the IP address will be changed because a user needs to use a completely different server. The second case is to use dynamic IP addresses in a private network because an administrator sometimes needs to change router settings or restarts servers. If people need to memorize only a few IP addresses, it will be fine, but in everyday \u00a0life most people use several websites, so memorizing IP addresses is not practical. That is the reason why we have DNS. <\/span><\/p>\n

\"Speaking<\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Figure 3 IP Addresses and Domain Names<\/span><\/i><\/p>\n

2. How DNS Works<\/span><\/p>\n

The authoritative name servers that serve the DNS root zone, commonly known as the \u201croot servers\u201d, are a network of hundreds of servers in many countries around the world. <\/span>The Domain Name System(DNS) is composed of the root servers which are managing TLD(Top Level Domain ex: .com, .edu, .net, .org etc) and name servers. The DNS is a \u00a0hierarchical decentralized system. There are <\/span>13 root servers(A~M)<\/span><\/a>. a.root-servers.net manages root zone and other servers are mirrors of A.<\/span> They are configured in the DNS root zone as 13 named authorities. Why root-servers are so important is that if all of them are down, we can\u2019t use any domains and email addresses. In 2002, someone tried to do a DDoS, aka\u201d<\/span>Distributed Denial of Service<\/span>\u201d attack to 13 root servers, however, fortunately, they were not successful in their attack; the servers did not go down. Recently, B.root-servers.net which is <\/span>one of 13 root servers<\/span> has been renumbered to 199.9.14.201 from 192.228.79.201.(October 24th 2017)<\/span> According to the institution which manages B-root-servers.net, it has been replaced for B-Root DNS service.(<\/span>http:\/\/www.root-servers.org\/news\/b-root-begins-anycast-in-may.txt<\/span><\/a>) The information of changing IP address is very important because DNS servers are using cache, which is a component that stores data so future requests for that data can be served faster, and they store information on a file which is called root hints file. However, a<\/span>s the predetermined time passes after using the information, the system doesn\u2019t work properly. For instance, taking much time to restart cache server and Name Resolution(Details will be described below.) doesn\u2019t work.<\/span><\/p>\n

When DNS client gets information, it traces a path like the following image. First, it accesses \u00a0a root server to understand that which TDL server associated with the \u00a0.edu domain. Next, the client needs to follow the path which is associated with nyu.edu, in order to access a server which is related to itp.nyu.edu. Then it can get the subdomain information, if the client wants to know information on \u201chttp:\/\/nyu.edu.\u201d \u00a0\u00a0<\/span><\/p>\n

\"Diagram<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>Figure 4 The Root Server and Name Servers.<\/span><\/i><\/p>\n

<\/span>3.How Web Browser and DNS work together<\/span><\/h2>\n

In this section, let\u2019s see how to a web browser gets IP address when you type a domain in the browser. First, a user inputs a domain on a web browser’s address bar. The browser calls a function which is called Resolver.<\/span><\/p>\n

The resolver sends a request to a DNS server saying that \u00a0\u201cI would like to access google.com, so tell me the domain’s IP address.\u201d<\/span><\/p>\n

Then the DNS server responds with the IP address of the domain for which the Resolver asked. This process is called “Name Resolution”. For this process, they are using UDP because packets each of them sends are not so big and UDP’s process is lighter than TCP. User Datagram Protocol (UDP) is one of main internet protocols. UDP uses a simple connectionless communication model with a minimum of protocol mechanism. Moreover, this process doesn’t take so much time.<\/span><\/p>\n

In the above, I have described the process as if it were \u00a0one-to-one communication to simplify it. However, there are several DNS servers and “Name Resolution” could go through <\/span>multiple<\/span> DNS servers. Before explaining the steps, I would like to mention to the general hierarchy of DNS servers. A nonprofit public benefit corporation, <\/span>The Internet Corporation for Assigned Names and Numbers<\/span>(ICANN) manages \u00a0IPs and domain names and they commission Internet Assigned Numbers Authority(IANA). Their activities can be broadly grouped into three categories:<\/span>management of the DNS Root<\/span><\/a>, <\/span>coordination of the global pool of IP<\/span><\/a>, and <\/span>protocol assignments<\/span><\/a>. <\/span>IANA delegates its management to five regional Internet Registries (RIRs).<\/span> There are 5 institutions; African Network Information Center (AFRINIC) is for Africa. American Registry for Internet Numbers (ARIN) is for the United States, Canada, several parts of the Caribbean region, and Antarctica. Asia-Pacific Network Information Centre (APNIC) is for Asia, Australia, New Zealand, and neighboring countries. Latin America and Caribbean Network Information Centre (LACNIC) is for Latin America and parts of the Caribbean region. R\u00e9seaux IP Europ\u00e9ens Network Coordination Centre (RIPE NCC) is for Europe, Russia, the Middle East, and Central Asia.<\/span><\/p>\n

\"Map<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Figure 5 Map of Regional Internet Registries \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/i>
\n<\/span><\/i> \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0https:\/\/en.wikipedia.org\/wiki\/Regional_Internet_registry<\/span><\/i><\/p>\n

Then National Internet Registry and ISPs manage IPs and domain names for their regions or countries.<\/span><\/p>\n

Here is the details of ISP\u2019s job. The first step is the same as the first paragraph. Resolver send a request to a server which is called \u201cLocal Server\u201d which is generally prepared by ISPs. The local server is working as a cache server which means it has information about IP addresses and domains. The cache server is controlled by an ISP and the cache expiration depends on \u201cStart of <\/span>Authority(<\/span>SOA)\u201d. Generally, the expiration of cache is a few days. If the local server has information which the browser\u2019s resolver is looking for, it sends back the information. If the local server doesn\u2019t have info, the local server\u2019s resolver will start looking for information. Then, the local server responds to the request from the browser\u2019s resolver. The difference between a browser\u2019s resolver and a local server\u2019s resolver is that the local server\u2019s resolver <\/span>communicates with many dns servers until it finds the IP address. <\/span><\/p>\n

\"Diagram<\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u00a0<\/span>Figure 6 Web browser\u2019s request path<\/span><\/i><\/p>\n

<\/span>4. IANA and ICANN<\/span><\/h2>\n

IANA<\/span><\/a> stands for Internet Assigned Numbers Authority. The IANA was a project group headed by Jon Postel at the Information Sciences Institute (ISI) of the University of Southern California (USC) started in 1988. They were a volunteer group that managed domains, IPs, and ports. The group had \u00a0financial support from the US government. In 1998, the IANA functions were transferred to The Internet Corporation for Assigned Names and Numbers(<\/span>ICANN<\/span><\/a>). The ICANN is a nonprofit public benefit corporation. ICANN manages addresses, port assignments, and stability of UIDs, and IANA manages DNS Root, IP addressing, and other protocol resources. IANA reports to ICANN because IANA is a lower branch of ICANN.<\/span><\/p>\n

<\/span>5.Social Media and DNS<\/span><\/h2>\n

Lastly, I would like to mention to a case I found. I was asked about web hosting by 2 people who required to change settings which were related to DNS. The first case was to need to change A record and nameserver info because she got hacked and she wanted to change a hosting service. The other case was to need create a website because he wanted to promote his project. They have one common issue which Facebook doesn\u2019t allow them to share their links on Facebook feed and Messenger. \u00a0The following table shows each site\u2019s condition.<\/span><\/p>\n\n\n\n\n\n\n
<\/td>\nSite 1(got hacked)<\/span><\/td>\nSite 2<\/span><\/td>\nextratorrent.cc<\/span><\/td>\n<\/tr>\n
Security issue<\/span><\/td>\n\u25cb(ranked caution level)<\/span><\/td>\n\u00d7 (untested)<\/span><\/td>\n\u25b3<\/span><\/td>\n<\/tr>\n
DNS problem<\/span><\/td>\n\u00d7<\/span><\/td>\n\u25cb(the domain didn\u2019t work properly for a week)<\/span><\/td>\n\u00d7<\/span><\/td>\n<\/tr>\n
Facebook share<\/span><\/td>\n\u00d7<\/span><\/td>\n\u00d7<\/span><\/td>\n\u25b3(requires user\u2019s confirmation)<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Table 1 The sites\u2019 conditions<\/span><\/i><\/p>\n

From this table, a couple of things are assumed. The first thing is that Facebook may check data from security companies and another is they have own criteria on shared information because basically, torrent sites aren\u2019t pretty safe, but actually there might be demand for torrent information from some users. The other thing is that some degree they care about DNS information from site2 because site2 is built by WordPress and most information the site has is from itself and one movie is from <\/span>Vimeo<\/span><\/a>. These are very interesting because I thought Facebook just checks a link is broken or not with The Open Graph Protocol(OGP) protocol. The <\/span>Open Graph protocol<\/span><\/a> enables any web page to become a rich object in a social graph. For instance, this is used on Facebook to allow any web page to have the same functionality as any other object on Facebook. The OGP is composed of basic metadata like below.<\/span><\/p>\n

\"Basic<\/p>\n

\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Figure 7 The OGP Basic Metadata<\/span><\/i><\/p>\n

In addition, Facebook publishes a tool which is called \u201c<\/span>Sharing Debugger<\/span><\/a>.\u201d I checked 4 sites: Site1, Site2, Google.com, and Facebook.com.<\/span><\/p>\n

\"Screenshot<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Figure 8 Sharing Debugger <\/span><\/i>https:\/\/www.google.com<\/span><\/i><\/a><\/p>\n

So far in my understanding, Facebook gathers IP address, OGP meta information, redirect path, Canonical URL, and probably security information which security companies published. I guess they don\u2019t open but, they collect data from Facebook users. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

1. What is DNS? The DNS, which stands for Domain Name System, is a hierarchical decentralized naming system for devices(computers, smartphones, etc), services, or other resources connected to the Internet or a private network. Mainly, the DNS associates domain names to the numerical IP addresses. The DNS has been in use since 1985. http:\/\/symbolics.com\/ is … Continue reading “What We Should Know about DNS”<\/span><\/a><\/p>\n","protected":false},"author":16,"featured_media":0,"parent":19,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-234","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/pages\/234"}],"collection":[{"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/comments?post=234"}],"version-history":[{"count":9,"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/pages\/234\/revisions"}],"predecessor-version":[{"id":1376,"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/pages\/234\/revisions\/1376"}],"up":[{"embeddable":true,"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/pages\/19"}],"wp:attachment":[{"href":"https:\/\/itp.nyu.edu\/networks\/wp-json\/wp\/v2\/media?parent=234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}