This is an old revision of this page, as edited by Pascal666 (talk | contribs) at 20:23, 14 July 2010 (→Root server addresses: history). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Revision as of 20:23, 14 July 2010 by Pascal666 (talk | contribs) (→Root server addresses: history)(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)A root name server is a name server for the Domain Name System's root zone. It directly answers requests for records in the root zone and answers other requests returning a list of the designated authoritative name servers for the appropriate top-level domain (TLD). The root name servers are a critical part of the Internet because they are the first step in translating (resolving) human readable host names into IP addresses that are used in communication between Internet hosts.
A combination of limits in the DNS and certain protocols, namely the practical size of unfragmented User Datagram Protocol (UDP) packets, resulted in a limited number of root server addresses that can be accommodated in DNS name query responses. This limit has determined the number of name server installations at (currently) 13 clusters, serving the needs of the entire public Internet worldwide.
Root domain
The Domain Name System is a hierarchical naming system for computers, services, or any resource participating in the Internet. The top of that hierarchy is the root domain. The root domain does not have a formal name and its label in the DNS hierarchy is an empty string. All fully qualified domain names (FQDNs) on the Internet can be regarded as ending with this empty string for the root domain, and therefore ending in a full stop character (the label delimiter), e.g., www.example.com.. This is generally implied rather than explicit, as modern DNS software does not actually require that the terminating dot be included when attempting to translate a domain name to an IP address.
The root domain contains all top-level domains of the Internet. As of June 2009, there are 20 generic top-level domains (gTLDs) and 248 country code top-level domains (ccTLDs) in the root domain. In addition, the ARPA domain is used for technical name spaces in the management of Internet addressing and other resources. A TEST domain is used for testing internationalized domain names.
Resolver operation
When a computer on the Internet needs to resolve a domain name, it uses resolver software to perform the lookup. A resolver breaks the name up into its labels from right to left. The first component (TLD) is requeried using a root server to obtain the responsible authoritative server. Queries for each label return more specific name servers until a name server returns the answer of the original query.
In practice, most of this information does not change very often over a period of hours and therefore it is cached by intermediate name servers or by a name cache built into the user's application. DNS lookups to the root nameservers may therefore be relatively infrequent. A survey in 2003 reports that only 2% of all queries to the root servers were legitimate. Incorrect or non-existent caching was responsible for 75% of the queries, 12.5% were for unknown TLDs, 7% were for lookups using IP addresses as if they were domain names, etc. Some misconfigured desktop computers even tried to update the root server records for the TLDs. A similar list of observed problems and recommended fixes has been published in RFC 4697.
Although any local implementation of DNS can implement its own private root name servers, the term "root name server" is generally used to describe the thirteen well-known root name servers that implement the root name space domain for the Internet's official global implementation of the Domain Name System.
Root server addresses
There are currently 13 root name servers specified, with names in the form letter.root-servers.net, where letter ranges from A to M. This does not mean there are 13 physical servers; each operator uses redundant computer equipment to provide reliable service even if failure of hardware or software occur. Additionally, nine of the servers operate in multiple geographical locations using a routing technique called anycast, providing increased performance and even more fault tolerance.
Letter | IPv4 address | IPv6 address | Old name | Operator | Location | Software |
---|---|---|---|---|---|---|
A | 198.41.0.4 | 2001:503:ba3e::2:30 | ns.internic.net | VeriSign | distributed using anycast | BIND |
B | 192.228.79.201 (since January 2004; originally was 128.9.0.107) | 2001:478:65::53 (not in root zone yet) | ns1.isi.edu | USC-ISI | Marina Del Rey, California, U.S. | BIND |
C | 192.33.4.12 | c.psi.net | Cogent Communications | distributed using anycast | BIND | |
D | 128.8.10.90 | terp.umd.edu | University of Maryland | College Park, Maryland, U.S. | BIND | |
E | 192.203.230.10 | ns.nasa.gov | NASA | Mountain View, California, U.S. | BIND | |
F | 192.5.5.241 | 2001:500:2f::f | ns.isc.org | Internet Systems Consortium | distributed using anycast | BIND 9 |
G | 192.112.36.4 | ns.nic.ddn.mil | Defense Information Systems Agency | distributed using anycast | BIND | |
H | 128.63.2.53 | 2001:500:1::803f:235 | aos.arl.army.mil | U.S. Army Research Lab | Aberdeen Proving Ground, Maryland, U.S. | NSD |
I | 192.36.148.17 | 2001:7fe::53 | nic.nordu.net | Autonomica | distributed using anycast | BIND |
J | 192.58.128.30 | 2001:503:c27::2:30 | VeriSign | distributed using anycast | BIND | |
K | 193.0.14.129 | 2001:7fd::1 | RIPE NCC | distributed using anycast | NSD | |
L | 199.7.83.42 (since November 2007; originally was 198.32.64.12) | 2001:500:3::42 | ICANN | distributed using anycast | NSD | |
M | 202.12.27.33 | 2001:dc3::35 | WIDE Project | distributed using anycast | BIND |
Older servers had their own name before the policy of using similar names was established.
The choice of 13 nameservers was made because of limitations in the original DNS specification, which specifies a maximum packet size of 512 bytes when using the User Datagram Protocol (UDP). The addition of IPv6 addresses for the root nameservers requires more than 512 bytes, which is facilitated by the EDNS0 extension to the DNS standard. While only 13 names are used for the root nameservers, there are many more physical servers; C, F, I, J, K, L and M servers now exist in multiple locations on different continents, using anycast address announcements to provide decentralized service. As a result most of the physical root servers are now outside the United States, allowing for high performance worldwide.
There are also quite a few alternative namespace systems with their own set of root nameservers that exist in opposition to the mainstream nameservers. The first, AlterNIC, generated a substantial amount of press. See Alternative DNS root for more information.
Root name servers may also be run locally, on provider or other types of networks, synchronized with the US Department of Commerce delegated root zone file as published by ICANN. Such a server is not an alternative root, but a local implementation of A through M.
As the root nameservers function as an important part of the Internet, they have come under attack several times, although none of the attacks have ever been serious enough to severely hamper the performance of the Internet.
Root server supervision
The DNS Root Server System Advisory Committee is an ICANN committee. ICANN's bylaws assign authority over the operation of the root nameservers of the Domain Name System to the DNS Root Server System Advisory Committee.
Root zone file
The root zone file is a small (about 100 kB) computer file whose publication is the primary purpose of Root nameservers, the servers which constitute the essential backbone of the internet.
The root zone file is at the apex of a hierarchical distributed database called the Domain Name System (DNS). This database is used by almost all Internet applications to translate worldwide unique names like www.wikipedia.org into other identifiers such as IP addresses.
The contents of the root zone file is a list of names and numeric IP addresses of the authoritative DNS servers for all top-level domains (TLDs) such as .com, .org, .edu, or .nz, .fr, .ro. On 12 December 2004, there were 258 TLDs and 773 different authoritative servers for those TLDs listed. Other name servers forward queries for which they do not have any information about authoritative servers to a root name server. The root name server, using its root zone file, answers with a referral to the authoritative servers for the appropriate TLD or with an indication that no such TLD exists.
See also
- Anycast
- Distributed denial of service attacks on root nameservers
- EDNS0 (Extended DNS, version 0)
- Domain Name System
- Internet backbone
- Open Root Server Network
- Blackhole server
References
- "List of top-level domains". ICANN.
- "Wow, That's a Lot of Packets" (PDF). 2003. Retrieved 2008-02-05.
{{cite web}}
: Unknown parameter|coauthors=
ignored (|author=
suggested) (help) - "New IPv4 address for b.root-servers.net".
- F-root | Internet Systems Consortium
- K-root Homepage
- "Advisory — "L Root" changing IP address on 1st November". ICANN.
- l.root-servers.net
- RFC 1035 Domain names - implementation and specification
- ICANN: Accommodating IP Version 6 Address Resource Records for the Root of the Domain Name System
- ICANN Bylaws XI-2.3
- ISOC, "DNS Root Name Servers explained for the non-expert". (Available online, accessed 19 March 2010.)
- Notes
- Root Server Technical Operations Association
- Root Servers' Geographical Locations on Google Maps
- DNS Root Server System Advisory Committee
- DNS Root Name Servers Explained For Non-Experts
- DNS Root Name Servers Frequently Asked Questions
- Location of Root servers in Asia-Pacific
- Bogus Queries received at the Root Servers
- ORSN, Open Root Server Network with IPv6 support in europe
- RFC 2826 - IAB Technical Comment on the Unique DNS Root
- RFC 2870 - Root Name Server Operational Requirements
- RFC 4697 - Observed DNS Resolution Misbehavior (from observations on the Root Servers)
External links
- Root Server Technical Operations Association
- ftp://ftp.internic.net/domain/
- http://private.dnsstuff.com/info/roottimes.htm Root Server response times
- DNS root nameservers explained for non-experts