DNS recursive Resolution Process

Source: Internet
Author: User


This title is too big to be written, but I am afraid to forget it. Simply remember a bit and let's talk about the whole process of DNS resolution. The DNS resolution process is like this. First, we request the DNS server we entered. The server first queries its own cache. If no, we directly ask the top-level domain name. What about the top-level domain name, if you do not directly tell you the answer, an IP address is returned to allow you to access this IP address. This IP address is not the real IP address of the domain name you want to request, the server corresponding to this IP address may know the IP address of the I domain name you want to request.
Www.2cto.com is actually like this. You ask where your server A is, where it asks the top-level domain name B, and B says you go to the IP address C, and it will tell you, then I asked C and C, and I may ask D, and D will know that it continues until a DNS server tells you the answer. This method is called recursive resolution. There are 13 top-level domain names, and the domain names will go on layer by layer until they are resolved. This is not intuitive. Let's use the dig command to see the effect.
First, the DNS server accesses the top-level domain name. 13 In total, from a ~ J.root-servers.net. The figure tells us that through our own DNS server 10.0.0.1, it tells us that we have accessed the top-level domain name to find the domain name we requested to resolve. Www.2cto.com
Then, return N entries from the B .root-servers.net, telling us that through these entries you can know the answer you want, in turn, all of the following, our request is mediated by it, I asked A, but A asked B. let's take a look at the final result. Finally, through dns.uestc.edu.cn, we know that the domain name address is 202.112.14.184. it should be noted that there may be multiple addresses that the domain name on the machine returns to us for our query. From the above example, we can see that we may send a request to multiple servers, finally, these addresses are returned. From the last entry, we can see that a server returns an ns record, which is dns.uestc.edu.cn. this address is exactly the server we accessed last time. That is to say, some servers have already given us the answer, while some may still be slow in parsing, and they are constantly giving NS records. Www.2cto.com
Finally, I posted a strange figure. I went to dig to find a non-existent domain name with the suffix zzq. Finally, I got an IP address of Guangdong Telecom and attached the whole process of resolution, in addition, the record type is an SOA that has never been seen. This is used for later research on the AD domain.

 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.