Managing Mission-Critical Domains and DNS
Demystifying nameservers, DNS, and domain names
Mark E. Jeftovic
BIRMINGHAM - MUMBAI
Managing Mission-Critical Domains and DNS
Copyright 2018 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author(s), nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
Commissioning Editor: Gebin George
Acquisition Editor: Noyonika Das
Content Development Editor: Mohammed Yusuf Imaratwale
Technical Editor: Shweta Jadhav
Copy Editor: Safis Editing
Project Coordinator: Hardik Bhinde
Proofreader: Safis Editing
Indexer: Mariammal Chettiyar
Graphics: Jason Monteiro
Production Coordinator: Shantanu Zagade
First published: June 2018
Production reference: 1300618
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.
ISBN 978-1-78913-507-7
www.packtpub.com
To my wife Angela, whose resiliency and focus is an inspiration.
To my daughter Emily,
who never ceases to amaze.
Mark
mapt.io
Mapt is an online digital library that gives you full access to over 5,000 books and videos, as well as industry leading tools to help you plan your personal development and advance your career. For more information, please visit our website.
Why subscribe?
Spend less time learning and more time coding with practical eBooks and Videos from over 4,000 industry professionals
Improve your learning with Skill Plans built especially for you
Get a free eBook or video every month
Mapt is fully searchable
Copy and paste, print, and bookmark content
PacktPub.com
Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.
At www.PacktPub.com , you can also read a collection of free technical articles, sign up for a range of free newsletters, and receive exclusive discounts and offers on Packt books and eBooks.
Contributors
About the author
Mark E. Jeftovic is the cofounder and CEO of easyDNS Technologies Inc, the managed DNS provider and domain name registrar. He was formerly a director to the Canadian Internet Registration Authority (CIRA) and is currently a director to the Internet Society Canada Chapter.
Mark entered the internet space in the early '90s as a computer programmer and Unix sysadmin, working for the early dial-up ISPs in Toronto before cofounding a web development firm in 1995 that later morphed into easyDNS.
A lifelong guitarist and avid bookworm, Mark lives in Toronto with wife Angela and daughter Emily.
This book would not have been possible without the generous help from the following people: Tamas Acs, Ranko Rodic, Peter Van Dijk, Matt Pounsett, Patrik Lundin, Cricket Liu, John Demco, George Kirikos, Russ Nelson, Jan-Piet Mens, Jaques Latour, Joe Abley, Bert Hubert, Paul Vixie, Steve Job, Jim Carroll, Rick Broadhead, Richard Lau, Jothan Frakes, Dan Blais, Douglas Patterson, Noyonika Das, Mohammed Imaratwale, and Sandro Pasquale.
Packt is searching for authors like you
If you're interested in becoming an author for Packt, please visit authors.packtpub.com and apply today. We have worked with thousands of developers and tech professionals, just like you, to help them share their insight with the global tech community. You can make a general application, apply for a specific hot topic that we are recruiting an author for, or submit your own idea.
Table of Contents
Preface
Domain names and DNS can be thought of as the basic foundation of the internet. If you want to explain how important DNS is to somebody, you might find the following useful; this has been my "30-second elevator pitch" about DNS for close to 20 years now:
"Everytime you send an email; visit a web page; type or receive an instant message, text or SMS; place a VoIP call (or a Skype call), or do anything else involving the internet, it cannot happen until a bunch of computers around the internet have a conversation about it:
- Where does this email need to be delivered?
- What server is holding the file that this web browser is asking for?
- Where is the VoIP gateway that needs to route this call?
These conversations happen very quickly, typically in under 100 milliseconds (less than a quarter of the time it takes you to blink), and typically involve, at a minimum, 3 or 4 disparate servers around the globe. None of those servers have anything to do with the actual email, web page, or application being routed.
These special computers are called
nameservers, and without them, absolutely nothing would happen on the internet.
What is interesting about DNS, given its importance, is how overlooked it is in the overall scheme of IT. Similarly, domain names (the logical naming entities that anchor DNS lookups) are often the most profoundly misunderstood facets of IT as well, even by otherwise advanced technical personnel.
For some reason, DNS and domain names seem to be a blind spot in many organizations' infrastructure. As we have fondly quipped since our early days as a managed DNS provider, "DNS is something nobody cares about until it stops working".
It never fails to amaze me that a company can spend thousands, hundreds of thousands, even millions of dollars on redundancy, high availability, firewalls, disaster recovery plans, and even cyberthreat insurance, and yet the entire technical infrastructure of the organization is held up by a couple of unpatched, forgotten nameservers gathering mold in a closet somewhere. Often, this can be the case without a given company being aware of it, because they simply allow their (pick one) web host, registrar, ISP, data center, or some other vendor to handle the DNS for them, perhaps as part of a bundled offering, and they have absolutely no knowledge of the state of the DNS infrastructure deployed by that vendor.
Following on from that theme, perhaps the DNS infrastructure may be beyond solid: anycast deployments, DDoS mitigation, hot spares, uptime monitoring, and 24x7 NOC support; but the portfolio of domain registrations are managed haphazardly or on an ad hoc basis. The smooth running underpinning of the organization is ripe for disruption by an unintentional domain expiry or a domain registration getting "slammed".