đ Overview: DNS (Domain Name System)¶
This page serves as a central entry point for the entire DNS infrastructure and zone management.
1. The Most Important Record Types¶
| Type | Purpose | Example Target |
|---|---|---|
| A | Maps a hostname to an IPv4 address. | 192.168.1.50 |
| AAAA | Maps a hostname to an IPv6 address. | 2001:db8::1 |
| CNAME | Alias that points to another domain (must not be on the root domain). | server01.example.com |
| MX | Defines the mail server responsible for the domain. | mail.example.com (Priority: 10) |
| TXT | Text record, required for domain verification and email security (SPF, DKIM, DMARC) or for LE certificates. | v=spf1 mx -all |
| NS | Specifies the authoritative name servers for a zone. | ns1.example.com |
| PTR | Reverse DNS (resolves an IP address into a name). | mail.example.com |
2. DNS Function¶
Name resolution is physically separated into public and internal services.
2.1 The Recursive Path¶
sequenceDiagram
autonumber
participant Client as Client (OS / Browser)
participant Resolver as Local DNS Resolver
Note over Client,Resolver: Recursive resolution<br/>(The DNS resolver handles the work)
Client->>Resolver: What is the IP address of server.example.com?
activate Resolver
Note right of Resolver: Searches the local cache...<br/>...or queries the DNS hierarchy (iteratively)
Resolver-->>Client: The IP address is 192.168.1.50
deactivate Resolver2.2 The Iterative Approach¶
sequenceDiagram
autonumber
participant Resolver as DNS Resolver
participant Root as Root Nameserver (.)
participant TLD as TLD Nameserver (.com)
participant Auth as Authoritative Nameserver
Note over Resolver,Auth: Iterative resolution (step-by-step through the tree)
Resolver->>Root: Who is responsible for "server.example.com"?
Root-->>Resolver: I don't know. But here is the IP of the ".com" TLD server.
Resolver->>TLD: Who is responsible for "server.example.com"?
TLD-->>Resolver: I donât know. But ask the authoritative server for "example.com".
Resolver->>Auth: What is the IP address of "server.example.com"?
Auth-->>Resolver: Thatâs my zone! The IP is 192.168.1.50.3. Diagnostics & Standard Commands (CLI)¶
Quick dig commands for troubleshooting directly in the terminal.
| Type | DIG Command | nslookup Command |
|---|---|---|
| Standard IPv4 query | dig example.com A | nslookup -type=A example.com |
| Explicit IPv6 query | dig example.com AAAA | nslookup -type=AAAA example.com |
| Query a specific DNS server (e.g., Cloudflare) | dig @1.1.1.1 example.com | nslookup example.com 1.1.1.1 |
| Check mail server (MX) | dig example.com MX | nslookup -type=MX example.com |
| Short, clean response output (IP only) | dig example.com +short | (Resolve-DnsName example.com -Type A).IPAddress <- PowerShell command |
4. Related Pages¶
Grundlegende EintrÀge
Record types: A, AAAA, CNAME, ALIAS, TXT
Erweiterte EintrÀge
Record types: MX, SRV, SPF, CAA, TLSA
DNS Security (DNSSEC)
Introduction and explanation of DNSSEC
DynDNS
Dynamic DNS entries for changing IP addresses