Skip to content

DNS

September 29, 2023
July 25, 2015

Domain Name System - Wikiwand
DNS for Rocket Scientists - Contents
A Comparison of DNS Server Types: How To Choose the Right DNS Configuration | DigitalOcean

DNS Checker - DNS Propagation Check & DNS Lookup check DNS propagation status
How to Flush DNS Cache in Microsoft Windows, Linux, and Mac OS

What Happens When Your Domain Expires?
What happens when a domain expires? | Hostinger Help Center domain name lifecycle
The states of domain expiration and redemption – Hover Help Center

RFC 1034 - Domain names - concepts and facilities
RFC 1035 - Domain names - implementation and specification
RFC 2136 - Dynamic Updates in the Domain Name System (DNS UPDATE)
DNS is beautiful - YouTube

An Introduction to Managing DNS | DigitalOcean
Domains and DNS :: DigitalOcean Product Documentation
An Introduction to DNS Terminology, Components, and Concepts | DigitalOcean
What are the differences between Subdomain, Parked Domain and Add-on Domain? | Hostinger Help Center
DNS Concepts - Windows applications | Microsoft Docs
DNS Zones and Records overview - Azure DNS | Microsoft Docs
An Introduction to Learning and Using DNS Records - Tuts+ Code Tutorial
DNS Explained – How Your Browser Finds Websites | Scotch
Anatomy of a Linux DNS Lookup – Part I – zwischenzugs
Anatomy of a Linux DNS Lookup – Part II – zwischenzugs
Hostinger DNS Zone Editor: A Complete Guide for 2021

Get the DNS Migration Checklist: How to migrate DNS for production site for A Record
Minimal downtime for a live site DNS migration - Support / Support Guides - Netlify Support Forums

DNS resolution:
Browser cache
Recursive Name Servers (Name Servers in OS's network setting, /etc/resolv.conf)
Root Name Server
TLD (gTLD, ccTLD)
Authoritative Name Servers (SOA record)
Secondary Name Server (NS record) for second level domains and sub-domains

domain name system - Why does DNS work the way it does? - Server Fault
domain name system - Should we host our own nameservers? - Server Fault
How (and Why) I Run My Own DNS Servers – zwischenzugs

DNS in the cloud: Why and why not | Network World
CloudFlare DNS is simple, fast and flexible
How to Launch a 65Gbps DDoS, and How to Stop One
SAD DNS Explained

Anycast

network#Anycast

Domain Name

Domain name - Wikiwand
New TLDs, five years in - Domain Name Wire | Domain Name News

DNS spoofing/cache poisoning

DNS spoofing - Wikiwand
DNS Cache Poisoning - Computerphile - YouTube

An Illustrated Guide to the Kaminsky DNS Vulnerability
Security Benefits | Public DNS | Google Developers

It's DNS again 😢 Did you know this Malware Hack? - YouTube using DNS TXT record to distribute script

CDN

Cloudflare

Provides free TLS and CDN service

How to manage DNS Zone at Cloudflare | Hostinger Help Center
Managing DNS records in Cloudflare – Cloudflare Help Center

Nameservers

alexa.ns.cloudflare.com
kevin.ns.cloudflare.com

How to Serve a Subdomain as a Subdirectory | CSS-Tricks - CSS-Tricks example.com/blog/ -> blog.example.com

Remote Access: Getting Started with CloudFlare Tunnels (Domains, DNS, Tunnels) - YouTube Zero trust reverse proxy

Price Controls

Top Stories: Domain name price controls - Domain Name Wire | Domain Name News
Breaking: ICANN and Verisign agree to .com extension with 7% price hikes - Domain Name Wire | Domain Name News

DNS Records

These are the records stored in Authoritative Name Servers

How to: Edit DNS records (A, AAAA, CNAME, MX, TXT, SRV) – Hover Help Center
CName VS A Record - YouTube
Use CNAME and subdomain to redirect your domain name to an URL
REDIRECT.CENTER
DNS records Types - YouTube
DNS Record Types - CompTIA Network+ N10-007 - 1.8 - YouTube

A
AAAA for IPv6
CNAME
MX
TXT record - Wikiwand
SRV record - Wikiwand

SOA Start of Authority
NS Name Server

Glue Records

Glue record is used to resolve NS record under the same zone to prevent circular dependencies, they are stored in parent level

domain name system - What is a glue record? - Server Fault
Glue Records and Dedicated DNS

Verifying Domain Name Resolution

# this should show new name server
whois yourdomainname.com
# might show info from old name server due to caching
dig -t NS yourdomainname.com
dig yourdomainname.com NS
dig +trace +additional google.com SOA
# explicitly use a Domain Nameserver
dig -t NS yourdomainname.com @dnserver
# should have yourdomainname in "ANSWER SECTION"

nslookup google.com
host -v google.com
drill google.com

How to Flush DNS in Linux

An Introduction to Managing DNS | DigitalOcean (Series)
How To Set Up a Host Name with DigitalOcean | DigitalOcean

This tool is neat - YouTube nslookup

DiG HOWTO more info than nslookup
Decoding DIG Output
function dy { dig +noall +answer +additional "$1" @dns.toys; }

dog
dog — command-line utility in Rust // Lib.rs

Useful utilities and toys over DNS

SNI

Server Name Identification (SNI), a technology used by servers hosting multiple HTTPS websites. SNI sends the domain name during the TLS 'handshake' that allows an HTTPS connection to be established, during which the domain name is sent in the clear.

Resolving domain

Chris's Wiki :: blog/linux/SystemdResolvedNotes
nss(5) - Linux manual page

Registrars

Hover - domain name and email management made simple
Namecheap.com • Cheap Domain Name Registration & Web Hosting
香港域名註冊有限公司

Freenom - A Name for Everyone many TLDs, at most one year
Dot TK - Find a new FREE domain under Freenom

gTLD Extensions | Discover Your Next Domain - GoDaddy
Domain name registrar and VPS cloud hosting - Gandi.net
Domain Names | Search and Register New Domains, Web Hosting, Website Builder, SSL Certificates | Name.com
DNSPod-免费智能 DNS 解析服务商-电信网通教育网,智能 DNS

FreeDNS - Free DNS - Dynamic DNS - Static DNS subdomain and domain hosting
Free DNS hosting with freedns.afraid.org
JS.ORG | DNS

Namechk | Username, Domain & Trademark Search

AnalogJ/lexicon: Manipulate DNS records on various DNS providers in a standardized way.

Migration

How to Transfer Your Domain to Hostinger | Hostinger Help Center
How to Point a Domain to Hostinger | Hostinger Help Center

DNS Migration: How To Migrate Your DNS Successfully In 6 Steps - RedSwitches

DDNS

Free Dynamic DNS - No-IP.com - Managed DNS Services
5 Best Dynamic DNS Providers You Can Lookup for Free Today
花生壳官网|动态域名|免费域名建站|DDNS|向日葵远程控制|蒲公英路由器-Oray 开放的互联网应用服务引领者

xip.io: wildcard DNS for everyone resolves [*.]<IP>.xip.io to <IP>.

Duck DNS

DDNS - Debian Wiki
Linux-Fu: Your Own Dynamic DNS | Hackaday

Private DNS Server

integrating Let's Encrypt client into a private DNS server is cool

Linux DNS Server - How To Set Up Static or Dynamic DNS for Your Internet Servers

BIND 9 Open Source DNS Server | Internet Systems Consortium
BIND - Wikiwand
Deploying a DNS Server using Docker - SAMEER NAIK
sameersbn/docker-bind: Dockerize BIND DNS server with webmin for DNS administration
You want a real DNS Server at home? (bind9 + docker) - YouTube

miekg/coredns: CoreDNS is a DNS server that runs middleware

Dnsmasq - network services for small networks.

DNS clients

nsupdate(8): Dynamic DNS update utility - Linux man page
Dynamic DNS - ArchWiki

Secure DNS

Check if your browser uses Secure DNS, DNSSEC, TLS 1.3, and Encrypted SNI - gHacks Tech News
DNS Security and Privacy — Choosing the right provider

DNS over HTTPS (DoH)/DNS over TLSs (DoT)

use HTTPS/TLS connection for DNS resolution to prevent eavesdropping and tempering from MITM

DNS over HTTPS is coming whether ISPs and governments like it or not – Naked Security
DNS Over HTTPS Proxy | DOH Proxy
How to enable DNS-over-HTTPS (DoH) in Firefox | ZDNet
DNS-over-HTTPS (DoH) | Public DNS | Google Developers
Configuring DNS-Over-HTTPS on Pi-hole - Pi-hole documentation

Using NGINX as a DoT or DoH Gateway - NGINX

LINUX Unplugged 309: The Future is Open

RFC 7626 - DNS Privacy Considerations
RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
RFC 8310 - Usage Profiles for DNS over TLS and DNS over DTLS

DNSSEC

ensure the authoritative name servers can be trusted, preventing cache-poisoning attack

Domain Name System Security Extensions - Wikiwand
How DNSSEC Works | Cloudflare
DNSSEC – What Is It and Why Is It Important? - ICANN

RFC 4033 - DNS Security Introduction and Requirements
RFC 4034 - Resource Records for the DNS Security Extensions
RFC 4035 - Protocol Modifications for the DNS Security Extensions


Public DNS

Google DNS

Public DNS | Google Developers

8.8.8.8
8.8.4.4

Cloudflare DNS

1.1.1.1 — the Internet’s Fastest, Privacy-First DNS Resolver
Announcing 1.1.1.1: the fastest, privacy-first consumer DNS service
CloudFlare DNS is simple, fast and flexible
Announcing experimental DDR in 1.1.1.1 Discovery of Designated Resolvers

1.1.1.1

OpenDNS

Home Internet Security | OpenDNS
OpenDNS > System (also available at http://208.69.38.170/)
Allows you to link IPs to your predefined filters.

208.67.222.222
208.67.220.220

Freenom

80.80.80.80
80.80.81.81