DNS和DHCP在IPv6双堆栈网络中的应用.pdfVIP

DNS and DHCP in Dual Stack Networks Lawrence E. Hughes Chairman, InfoWeapons Inc. Your Speaker • 35+ years in IT field, including: • 2 years with VeriSign (PKI, crypto) • Co-founder CipherTrust (e-mail security) • Founder InfoWeapons (IPv6 Infrastructure) • I’ve personally invested US$5M+ in IPv6 • Built team with large number of IPv6 and security experts (development, testing, Q/A, etc.) • Member of US IPv6 Consortium • My company (InfoWeapons) has been running production dual stack in-house networks for 4 years (mostly using our own designs and products) • Many future IPv6 products planned (VoIP, translator, etc.) What is DNS? • DNS = Domain Name System (RFC1034/5 with updates) • Invented by Paul Mockapetris, November 1987 • Basically maps Fully Qualified Domain Names (FQDNS) to and from numeric IP addresses What is DNS? • Also publishes name of key servers for a given domain (MX record for e-mail, SRV record for LDAP, SIP, etc.) • Implemented as a globally distributed database and database engine, managed by thousands of admins • The Internet today could not exist without it • Even more critical for IPv6 networks than IPv4 (ever try typing in 32 hex digit numeric address in a browser?) How is DNS used? • Every node on the Internet that can use FQDNs (e.g. ) must have a DNS client (“resolver”) that can query a DNS server to translate any node’s FQDN into a numeric IP address (which is what is actually used as destination in packets) • Implements tree-like hierarchical name space • If the DNS server you query doesn’t have the answer (is “authoritative” for that domain, or has “cached” that data from a previous query), that server can either point you to the right server (referral), or obtain the data on your behalf (recursive) •