LAN中名称解析.pdf

New DNS Technologies in the LAN Everything you always wanted to know about mDNS, DNS-SD, LLMNR and similar technologies but were too afraid to ask Carsten Strotmann, Men Mice Services Whats in it? – Overview on DNS related technologies for Name- and Service- Resolution – Multicast DNS (mDNS) – DNS based Service Discovery (DNS-SD) – Link Local Multicast Name Resolution (LLMNR) – Peer Name Resolution Protocol (PNRP) Motivation?? – Men Mice is not in the Ad-Hoc Network or P2P Business – ... and is not involved in the team creating these protocols – ... but we do DNS Audits and DNS Troubleshooting – ... we want to know how these new technologies can affect networks and DNS in “real-life” – Phase 1: Research and Lab-Testing – Phase 2: Real World numbers mDNS (Multicast DNS) mDNS – Multicast DNS – Multicast DNS is used to resolve DNS Records in link-local networks without a central DNS Server – Uses port 5353 – Uses multicast addresses – 51 (IPv4) – FF02::FB (IPv6) – mDNS Packet Format 99% compatible with “Plain-Old-DNS” mDNS – Multicast DNS – 3 different Query behaviours – One-Shot queries – Multiple responses – Ongoing queries – One-Shot queries can be done with “DIG” dig -p 5353 @51 _ssh._tcp.local ptr mDNS – Multicast DNS Paula Bill John Lilly Bill? Multi-Cast Bob mDNS – Multicast DNS Paula Bill John Lilly Bill! Multi-Cast Bob mDNS – Multicast DNS – Prevent “chattiness” – Known Answer List (with TC Bit set, it can stretch multiple packets), –“Known Answer List” is not au