Solved

Root Hint & Forwarded DNS

Posted on 2011-02-26
2
870 Views
Last Modified: 2012-05-11
Dear All,

I’m using the forwarded in our DNS servers in the environment to forward all DNS quires to our ISP, I want to ask about the root hint, do I have to remove them? What is the recommended here, using forwarded DNS or Root hint?

Thanks
0
Comment
Question by:Arabsoft_Security
2 Comments
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 250 total points
ID: 34986967
Personally, I'm using Forwarders (ISP or openDNS like Google 8.8.4.4/8.8.8.8) instead of Root Hints.

When you have disabled Root Hints you have to specify at least one IP address for Forwarders to be able to use the Internet resources. When you have Root Hints, then you don't need Forwarders.

Using Forwarders, you have to care by yourself to update them in case that they were changed/removed (mostly we place less DNS servers that Root Hints' list have :) ) and small local ISP could change IPs or bancrupt ;)

Root Hints have more TLD DNS servers and are more reliable, but you need to use thm from trusted source.

I don't know if Chris-Dent is now available, but I would rely on his opinion. He's an expert on DNS filed :)

Regards,
Krzysztof
0
 
LVL 11

Accepted Solution

by:
MichaelVH earned 250 total points
ID: 34987096
Actually, both will work just fine.

In case you don't user forwarders, your own DNS server will do the "searching". It actually goes like this (in a nutshell):

1. Client sends query to local DNS Server
2. Local server checks if it's authoritative for the domain asked for
3. If not, it will check it's local cache to see if the entry has been cached
4. If not it will contact a DNS root server (e.g. d.root-servers.net) to ask what server is authoritative for the domain
5. the root servers answers with the authoritative server for that domain (eg. server.domain.com)
6. server.domain.com will respond with a list of name servers for domain.com (eg. nameserver.domain.com)
7. local server will contact nameserver.domain.com and requests the record
8. nameserver.domain.com will answer with the record (+info)
9. local server answers to the clients's query

If you've got forwarders configured step 1-3 remain the same.

as from step 4 the forwarder is contacted and it's that server that will do the queries for you (go through step 1-9 again).

So, basically: when using forwarders you'll have some load less on your dns servers.

Grts,

Michael


0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Change administrator password on server 13 93
E-mail delayed during DNS server reboot 8 51
Join with a SQL Server STUFF 5 36
Domain trust created by PDC name 6 35
There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question