DNS and BIND tells you everything you need to work with one of the Internet's fundamental building blocks: the distributed host information database that's responsible for translating names into addresses, routing mail to its proper destination, and even listing phone numbers with the new ENUM standard. This book brings you up-to-date with the latest changes in this crucial service.
The fifth edition covers BIND 9.3.2, the most recent release of the BIND 9 series, as well as BIND 8.4.7. BIND 9.3.2 contains further improvements in security and IPv6 support, and important new features such as internationalized domain names, ENUM (electronic numbering), and SPF (the Sender Policy Framework).
Whether you're an administrator involved with DNS on a daily basis or a user who wants to be more informed about the Internet and how it works, you'll find that this book is essential reading.
What DNS does, how it works, and when you need to use it
How to find your own place in the Internet's namespace
Setting up name servers
Using MX records to route mail
Configuring hosts to use DNS name servers
Subdividing domains (parenting)
Securing your name server: restricting who can query your server, preventing unauthorized zone transfers, avoiding bogus servers, etc.
The DNS Security Extensions (DNSSEC) and Transaction Signatures (TSIG)
Mapping one name to several servers for load sharing
Dynamic updates, asynchronous notification of change to a zone, and incremental zone transfers
Troubleshooting: using nslookup and dig, reading debugging output, common problems
DNS programming using the resolver library and Perl's Net::DNS module
Chapter 1 Background
A (Very) Brief History of the Internet
On the Internet and Internets
The Domain Name System, in a Nutshell
The History of BIND
Must I Use DNS?
Chapter 2 How Does DNS Work?
The Domain Namespace
The Internet Domain Namespace
Nameservers and Zones
Chapter 3 Where Do I Start?
Choosing a Domain Name
Chapter 4 Setting Up BIND
Setting Up Zone Data
Setting Up a BIND Configuration File
Running a Primary Nameserver
Running a Slave Nameserver
Adding More Zones
Chapter 5 DNS and Electronic Mail
Movie.edu's Mail Server
What's a Mail Exchanger, Again?
The MX Algorithm
DNS and Email Authentication
Chapter 6 Configuring Hosts
Sample Resolver Configurations
Minimizing Pain and Suffering
Additional Configuration Files
The Windows XP Resolver
Chapter 7 Maintaining BIND
Controlling the Nameserver
Updating Zone Datafiles
Organizing Your Files
Changing System File Locations
Keeping Everything Running Smoothly
Chapter 8 Growing Your Domain
How Many Nameservers?
Adding More Nameservers
Planning for Disasters
Coping with Disaster
Chapter 9 Parenting
When to Become a Parent
How Many Children?
What to Name Your Children
How to Become a Parent: Creating Subdomains
Subdomains of in-addr.arpa Domains
Managing the Transition to Subdomains
The Life of a Parent
Chapter 10 Advanced Features
Address Match Lists and ACLs
DNS Dynamic Update
DNS NOTIFY (Zone Change Notification)
Incremental Zone Transfer (IXFR)
Round-Robin Load Distribution
Nameserver Address Sorting
Preferring Nameservers on Certain Networks
A Nonrecursive Nameserver
Avoiding a Bogus Nameserver
The ABCs of IPv6 Addressing
Addresses and Ports
Chapter 11 Security
Securing Your Nameserver
DNS and Internet Firewalls
The DNS Security Extensions
Chapter 12 nslookup and dig
Is nslookup a Good Tool?
Interactive Versus Noninteractive
Avoiding the Search List
Less Common Tasks
Troubleshooting nslookup Problems
Best of the Net
Chapter 13 Reading BIND Debugging Output
Turning On Debugging
Reading Debugging Output
The Resolver Search Algorithm and Negative Caching (BIND 8)
The Resolver Search Algorithm and Negative Caching (BIND 9)
Chapter 14 Troubleshooting DNS and BIND
Is NIS Really Your Problem?
Troubleshooting Tools and Techniques
Potential Problem List
Interoperability and Version Problems
Chapter 15 Programming with the Resolver and Nameserver Library Routines
Shell Script Programming with nslookup
C Programming with the Resolver Library Routines
Perl Programming with Net::DNS
Chapter 16 Architecture
External, Authoritative DNS Infrastructure
Internal DNS Infrastructure
Keeping Up with DNS and BIND
Chapter 17 Miscellaneous
Using CNAME Records
A Limitation of MX Records
Network Names and Numbers
Additional Resource Records
Internationalized Domain Names
DNS and WINS
DNS, Windows, and Active Directory
Appendix DNS Message Format and Resource Records
Master File Format
Resource Record Data
Appendix BIND Compatibility Matrix
Appendix Compiling and Installing BIND on Linux
Instructions for BIND 8
Instructions for BIND 9
Appendix Top-Level Domains
Appendix BIND Nameserver and Resolver Configuration
BIND Nameserver Boot File Directives and Configuration File Statements
Cricket Liu graduated from the University of California, Berkeley, that great bastion of free speech, unencumbered Unix, and cheap pizza. He joined Hewlett-Packard after graduation and worked for HP for nine years.Cricket began managing the hp.com zone after the Loma Prieta earthquake forcibly transferred the zone's management from HP Labs to HP's Corporate Offices (by cracking a sprinkler main and flooding a Labs computer room). Cricket was firstname.lastname@example.org for over three years, and then joined HP's Professional Services Organization to co-found HP's Internet Consulting Program.Cricket left HP in 1997 to form Acme Byte & Wire, a DNS consulting and training company, with his friend Matt Larson. Network Solutions acquired Acme in June 2000, and later the same day merged with VeriSign. Cricket worked for a year as Director of DNS Product Management for VeriSign Global Registry Services.Cricket joined Infoblox, a company that develops DNS and DHCP appliances, in March, 2003. He is currently their Vice President of Architecture.Cricket, his wife, Paige, their son, Walt, and daughter, Greta, live in California with their two Siberian Huskies, Annie and Dakota.
Paul Albitz is a software engineer at Hewlett-Packard. Paul earned a Bachelor of Science degree from the University of Wisconsin, LaCrosse, and a Master of Science degree from Purdue University.Paul worked on BIND for the HP-UX 7.0 and 8.0 releases. During this time he developed the tools used to run the hp.com domain. Since then Paul has worked on various HP products during his 19 year career: HP JetDirect software, HP OfficeJet fax firmware, HPPhoto web site, and HP Photosmart Premier software.Paul and his wife Katherine live in San Diego California with their two cats, Gracie and Tiffany.
This book was the best I have seen on practical DNS. There is no question that users are geared towards using BIND as their DNS server (the exmaples themselves are taken directly from BIND script and configuration files); however, the book is written in such a way as to teach how DNS works very effectively. Although other DNS servers are not covered, the thoery behind DNS and the DNS protocol is reviewed carefully and the reader should find this useful to apply to any DNS server setup. Examples are clear and provided to reinforce discussions on theory. The book essentially teaches DNS by walking the reader through the steps needed to set up a fully functional BIND server.
While taking the Red Hat course( RHA-230 )that covers many aspects of System administration I began my study of Bind and the nmaed service.
I decided I would set up a couple of DNS servers, each with a corresponding web and ftp sites. I used Red Hat Linux AS on one and the Centos clone ES4 on the other.
The web sites were easy enough to get going, but in order to get DNS working took more effort. After I read the manuals that ship with the Bind software, I spent many hours searching the web on DNS, but was unable to get my DNS servers working properly.
I googled for a good book on the subject and of course, O'Reilly was at the top of the list.
After looking at the various options here, I bought DNS and Bind , 5th edition from Borders Books.
This book is a great resource that covers Bind in a way that I could understand.It has very descriptive examples that cleared up many misconceptions I had from the internet and my studies.
The book gives a good introduction to the subject of DNS. It explains the use and workings of the many tools used by Sysops to verify the operation of the service.
It gives real world examples on how to use dig, nslookup and host in ways never covered by the man pages.
After reading just 100 pages I was able to get both servers up and pointing to the correct web sites.
If you need working DNS servers and do not yet possess the expertise to build them, buy this book.