?
Solved

Root Hint & Forwarded DNS

Posted on 2011-02-26
2
Medium Priority
?
875 Views
Last Modified: 2012-05-11
Dear All,

I’m using the forwarded in our DNS servers in the environment to forward all DNS quires to our ISP, I want to ask about the root hint, do I have to remove them? What is the recommended here, using forwarded DNS or Root hint?

Thanks
0
Comment
Question by:Arabsoft_Security
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 1000 total points
ID: 34986967
Personally, I'm using Forwarders (ISP or openDNS like Google 8.8.4.4/8.8.8.8) instead of Root Hints.

When you have disabled Root Hints you have to specify at least one IP address for Forwarders to be able to use the Internet resources. When you have Root Hints, then you don't need Forwarders.

Using Forwarders, you have to care by yourself to update them in case that they were changed/removed (mostly we place less DNS servers that Root Hints' list have :) ) and small local ISP could change IPs or bancrupt ;)

Root Hints have more TLD DNS servers and are more reliable, but you need to use thm from trusted source.

I don't know if Chris-Dent is now available, but I would rely on his opinion. He's an expert on DNS filed :)

Regards,
Krzysztof
0
 
LVL 11

Accepted Solution

by:
MichaelVH earned 1000 total points
ID: 34987096
Actually, both will work just fine.

In case you don't user forwarders, your own DNS server will do the "searching". It actually goes like this (in a nutshell):

1. Client sends query to local DNS Server
2. Local server checks if it's authoritative for the domain asked for
3. If not, it will check it's local cache to see if the entry has been cached
4. If not it will contact a DNS root server (e.g. d.root-servers.net) to ask what server is authoritative for the domain
5. the root servers answers with the authoritative server for that domain (eg. server.domain.com)
6. server.domain.com will respond with a list of name servers for domain.com (eg. nameserver.domain.com)
7. local server will contact nameserver.domain.com and requests the record
8. nameserver.domain.com will answer with the record (+info)
9. local server answers to the clients's query

If you've got forwarders configured step 1-3 remain the same.

as from step 4 the forwarder is contacted and it's that server that will do the queries for you (go through step 1-9 again).

So, basically: when using forwarders you'll have some load less on your dns servers.

Grts,

Michael


0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question