Mixing
Why send authoritative nameserver in DNS?
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
Out of curiosity, I'm checking the Wireshark DNS packets. I can see that there's a DNS querry from the host. And then DNS response from the DNS server. Everything is just as expected.
However, if you further check in the querry, you can see that the server also sends the NS (authoritative name server). So my question is why?
I mean as a host, I only care about the IP. And that's the main point of DNS, which is to resolve name into IP.
Why, as a host, would I need the NS info?
domain-name-system dns-zone wireshark dns-hosting dns-server
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |Â
up vote
1
down vote
favorite
Out of curiosity, I'm checking the Wireshark DNS packets. I can see that there's a DNS querry from the host. And then DNS response from the DNS server. Everything is just as expected.
However, if you further check in the querry, you can see that the server also sends the NS (authoritative name server). So my question is why?
I mean as a host, I only care about the IP. And that's the main point of DNS, which is to resolve name into IP.
Why, as a host, would I need the NS info?
domain-name-system dns-zone wireshark dns-hosting dns-server
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
2
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago
add a comment |Â
up vote
1
down vote
favorite
up vote
1
down vote
favorite
Out of curiosity, I'm checking the Wireshark DNS packets. I can see that there's a DNS querry from the host. And then DNS response from the DNS server. Everything is just as expected.
However, if you further check in the querry, you can see that the server also sends the NS (authoritative name server). So my question is why?
I mean as a host, I only care about the IP. And that's the main point of DNS, which is to resolve name into IP.
Why, as a host, would I need the NS info?
domain-name-system dns-zone wireshark dns-hosting dns-server
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Out of curiosity, I'm checking the Wireshark DNS packets. I can see that there's a DNS querry from the host. And then DNS response from the DNS server. Everything is just as expected.
However, if you further check in the querry, you can see that the server also sends the NS (authoritative name server). So my question is why?
I mean as a host, I only care about the IP. And that's the main point of DNS, which is to resolve name into IP.
Why, as a host, would I need the NS info?
domain-name-system dns-zone wireshark dns-hosting dns-server
domain-name-system dns-zone wireshark dns-hosting dns-server
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
AhmedWas
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 hours ago
AhmedWas
1113
asked 3 hours ago
AhmedWas
1113
1113
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
AhmedWas is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
2
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago
add a comment |Â
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
2
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
2
2
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
3
down vote
accepted
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward the authoritative name server(s).
The why is probably because with the distributed and delegated nature of DNS it seemed a good idea at the time to include the "source of truth" in responses.
Edit: By the way: sending the authority section is RFC compliant but not mandatory.
In BIND this behaviour can be tuned with the minimal-responses yes | no; directive, where the default is no and the Authority and Additional sections of the query response will always be fully populated.
Other name servers CloudFlare, AWS Route 53, Infoblocks and probably others will already always send such minimal responses by default. Google's public resolvers will return an Authority section when available.
answered 3 hours ago
HBruijn
51.2k1083138
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
3
down vote
accepted
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward the authoritative name server(s).
The why is probably because with the distributed and delegated nature of DNS it seemed a good idea at the time to include the "source of truth" in responses.
Edit: By the way: sending the authority section is RFC compliant but not mandatory.
In BIND this behaviour can be tuned with the minimal-responses yes | no; directive, where the default is no and the Authority and Additional sections of the query response will always be fully populated.
Other name servers CloudFlare, AWS Route 53, Infoblocks and probably others will already always send such minimal responses by default. Google's public resolvers will return an Authority section when available.
answered 3 hours ago
HBruijn
51.2k1083138
add a comment |Â
up vote
3
down vote
accepted
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward the authoritative name server(s).
The why is probably because with the distributed and delegated nature of DNS it seemed a good idea at the time to include the "source of truth" in responses.
Edit: By the way: sending the authority section is RFC compliant but not mandatory.
In BIND this behaviour can be tuned with the minimal-responses yes | no; directive, where the default is no and the Authority and Additional sections of the query response will always be fully populated.
Other name servers CloudFlare, AWS Route 53, Infoblocks and probably others will already always send such minimal responses by default. Google's public resolvers will return an Authority section when available.
answered 3 hours ago
HBruijn
51.2k1083138
add a comment |Â
up vote
3
down vote
accepted
up vote
3
down vote
accepted
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward the authoritative name server(s).
The why is probably because with the distributed and delegated nature of DNS it seemed a good idea at the time to include the "source of truth" in responses.
Edit: By the way: sending the authority section is RFC compliant but not mandatory.
In BIND this behaviour can be tuned with the minimal-responses yes | no; directive, where the default is no and the Authority and Additional sections of the query response will always be fully populated.
Other name servers CloudFlare, AWS Route 53, Infoblocks and probably others will already always send such minimal responses by default. Google's public resolvers will return an Authority section when available.
answered 3 hours ago
HBruijn
51.2k1083138
Traditionally name servers don't send a short response to a query but an RFC 1034-1035 compliant full response which includes the authority section that contains Resource Records that point toward the authoritative name server(s).
The why is probably because with the distributed and delegated nature of DNS it seemed a good idea at the time to include the "source of truth" in responses.
Edit: By the way: sending the authority section is RFC compliant but not mandatory.
In BIND this behaviour can be tuned with the minimal-responses yes | no; directive, where the default is no and the Authority and Additional sections of the query response will always be fully populated.
Other name servers CloudFlare, AWS Route 53, Infoblocks and probably others will already always send such minimal responses by default. Google's public resolvers will return an Authority section when available.
answered 3 hours ago
HBruijn
51.2k1083138
edited 1 hour ago
answered 3 hours ago
HBruijn
51.2k1083138
answered 3 hours ago
HBruijn
51.2k1083138
answered 3 hours ago
HBruijn
51.2k1083138
51.2k1083138
add a comment |Â
add a comment |Â
AhmedWas is a new contributor. Be nice, and check out our Code of Conduct.
AhmedWas is a new contributor. Be nice, and check out our Code of Conduct.
AhmedWas is a new contributor. Be nice, and check out our Code of Conduct.
AhmedWas is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f938639%2fwhy-send-authoritative-nameserver-in-dns%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
@downvoter, please comment. And if you think my question is so easy, then at least answer it then downvote.
– AhmedWas
3 hours ago
2
By philosophy and design votes are anonymous and neither voting up nor voting down requires any mandatory explanation. The tooltip that appears when your mouse pointer hoovers over the down button states: "this question does not show any research effort; it is unclear or not useful". Also questions can attract a down vote when not well written, not quite on-topic or missing details.
– HBruijn
3 hours ago