Skip to content

🌐 Overview: DNS (Domain Name System)¶

This page serves as a central entry point for the entire DNS infrastructure and zone management.


1. The Most Important Record Types¶

TypePurposeExample Target
AMaps a hostname to an IPv4 address.192.168.1.50
AAAAMaps a hostname to an IPv6 address.2001:db8::1
CNAMEAlias that points to another domain (must not be on the root domain).server01.example.com
MXDefines the mail server responsible for the domain.mail.example.com (Priority: 10)
TXTText record, required for domain verification and email security (SPF, DKIM, DMARC) or for LE certificates.v=spf1 mx -all
NSSpecifies the authoritative name servers for a zone.ns1.example.com
PTRReverse DNS (resolves an IP address into a name).mail.example.com

2. DNS Function¶

Name resolution is physically separated into public and internal services.

2.1 The Recursive Path¶

sequenceDiagram
    autonumber
    participant Client as Client (OS / Browser)
    participant Resolver as Local DNS Resolver

 Note over Client,Resolver: Recursive resolution<br/>(The DNS resolver handles the work)

    Client->>Resolver: What is the IP address of server.example.com?
    activate Resolver
    Note right of Resolver: Searches the local cache...<br/>...or queries the DNS hierarchy (iteratively)
    Resolver-->>Client: The IP address is 192.168.1.50
    deactivate Resolver

2.2 The Iterative Approach¶

sequenceDiagram
    autonumber
    participant Resolver as DNS Resolver
    participant Root as Root Nameserver (.)
    participant TLD as TLD Nameserver (.com)
    participant Auth as Authoritative Nameserver

    Note over Resolver,Auth: Iterative resolution (step-by-step through the tree)

 Resolver->>Root: Who is responsible for "server.example.com"?
    Root-->>Resolver: I don't know. But here is the IP of the ".com" TLD server.

    Resolver->>TLD: Who is responsible for "server.example.com"?
    TLD-->>Resolver: I don’t know. But ask the authoritative server for "example.com".

 Resolver->>Auth: What is the IP address of "server.example.com"?
    Auth-->>Resolver: That’s my zone! The IP is 192.168.1.50.

3. Diagnostics & Standard Commands (CLI)¶

Quick dig commands for troubleshooting directly in the terminal.

TypeDIG Commandnslookup Command
Standard IPv4 querydig example.com Anslookup -type=A example.com
Explicit IPv6 querydig example.com AAAAnslookup -type=AAAA example.com
Query a specific DNS server (e.g., Cloudflare)dig @1.1.1.1 example.comnslookup example.com 1.1.1.1
Check mail server (MX)dig example.com MXnslookup -type=MX example.com
Short, clean response output (IP only)dig example.com +short(Resolve-DnsName example.com -Type A).IPAddress <- PowerShell command

  • Grundlegende EintrĂ€ge


    Record types: A, AAAA, CNAME, ALIAS, TXT

    Zum Artikel

  • Erweiterte EintrĂ€ge


    Record types: MX, SRV, SPF, CAA, TLSA

    Zum Artikel

  • DNS Security (DNSSEC)


    Introduction and explanation of DNSSEC

    Zum Artikel

  • DynDNS


    Dynamic DNS entries for changing IP addresses

    Zum Artikel