About the Book
Pro DNS and BIND guides you through the challenging array of features surrounding DNS, with a special focus on BIND, the worlds most popular DNS implementation. This book unravels the mysteries of DNS, offering insight into origins, evolution, and key concepts like domain names and zone files. This book focuses on running DNS systems based on BIND 9.3.0the first stable release that includes support for the latest DNSSEC (DNSSEC.bis) standards and a major functional upgrade from previous BIND 9 releases. If you administer a DNS system or are thinking about running one, or if you need to upgrade to support IPv6 DNS, need to secure a DNS for zone transfer, dynamic update, or other reasons, or if you need to implement DNSSEC, or simply want to understand the DNS system, then this book provides you with a single point of reference. Pro DNS and BIND starts with simple concepts, then moves on to full security-aware DNSSEC configurations. Various features, parameters, and resource records are described and, in the majority of cases, illustrated with one or more examples. The book contains a complete reference to zone files, Resource Records, and BINDs configuration file parameters. You can treat the book as as a simple paint-by-numbers guide to everything from a simple caching DNS, to the most complex secure DNS (DNSSEC) implementation. Background information is still included for when you need to know what to do and why you have to do it, and so that you can modify processes to meet your unique needs. Topics Include: Introduction to the DNS Basic DNS types with complete configuarion examples DNS and IPv6 Installing BIND on Linux, FreeBSD and Windows Subdomain delegation DNS and load balancing Reverse map delegation DNSSEC (DNSSEC.bis) and the DLV experimental service Key rollover and DNSSEC maintenance DNS tools and diagnostics
Table of Contents:
Pro DNS and BIND Ron Aitchison Pro DNS and BIND Copyright (c) 2005 by Ron Aitchison All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and the publisher. ISBN (pbk): 1-59059-494-0 Library of Congress Cataloging-in-Publication data is available upon request. Printed and bound in the United States of America 9 8 7 6 5 4 3 2 1 Trademarked names may appear in this book. Rather than use a trademark symbol with every occurrence of a trademarked name, we use the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. Lead Editor: Jason Gilmore Technical Reviewer: Brian Wilson Editorial Board: Steve Anglin, Dan Appleman, Ewan Buckingham, Gary Cornell, Tony Davis, Jason Gilmore, Jonathan Hassell, Chris Mills, Dominic Shakeshaft, Jim Sumser Associate Publisher: Grace Wong Project Manager: Kylie Johnston Copy Edit Manager: Nicole LeClerc Copy Editor: Ami Knox, Susannah Pfalzer Assistant Production Director: Kari Brooks-Copony Production Editor: Ellie Fountain Compositor: Linda Weidemann, Wolf Creek Press Proofreader: Linda Seifert Indexer: Valerie Perry Artist: Kinetic Publishing Services, LLC Interior Designer: Van Winkle Design Group Cover Designer: Kurt Krames Manufacturing Manager: Tom Debolski Distributed to the book trade worldwide by Springer-Verlag New York, Inc., 233 Spring Street, 6th Floor, New York, NY 10013. Phone 1-800-SPRINGER, fax 201-348-4505, e-mail orders-ny@springer-sbm.com, or visit http://www.springeronline.com. For information on translations, please contact Apress directly at 2560 Ninth Street, Suite 219, Berkeley, CA 94710. Phone 510-549-5930, fax 510-549-5939, e-mail info@apress.com, or visit http://www.apress.com. The information in this book is distributed on an as is basis, without warranty. Although every precaution has been taken in the preparation of this work, neither the author(s) nor Apress shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this work. The sample files and source code for this book is available to readers at http://www.apress.com in the Downloads section. Contents at a Glance About the Author ... xxi About the Technical Reviewer ... xxiii Acknowledgments ... xxv Introduction ... xxvii PART 1 Principles and Overview CHAPTER 1 An Introduction to DNS... 3 CHAPTER 2 Zone Files and Resource Records ... 21 CHAPTER 3 DNS Operations... 39 CHAPTER 4 DNS Types... 61 CHAPTER 5 DNS and IPv6... 77 PART 2 Get Something Running CHAPTER 6 Installing BIND... 95 CHAPTER 7 BIND Type Samples ... 121 CHAPTER 8 Common DNS Tasks ... 155 CHAPTER 9 DNS Diagnostics and Tools ... 183 PART 3 DNS Security CHAPTER 10 DNS Secure Configurations ... 235 CHAPTER 11 DNSSEC ... 283 PART 4 Reference CHAPTER 12 BIND Configuration Reference... 331 CHAPTER 13 Zone File Reference ... 405 iv CONTENTS AT A GLANCE v PART 5 Programming CHAPTER 14 BIND APIs and Resolver Libraries... 475 CHAPTER 15 DNS Messages and Records ... 507 PART 6 Appendixes APPENDIX A Domain Name Registration... 533 APPENDIX B DNS RFCs ... 541 INDEX ... 547
About the Author :
Ronald Aitchison is the founder of Zytrax, Inc., a company that specializes in the design, development, and marketing of IP network solutions and services.
