Unlocking the Secrets of DNS: A Guide to Root Servers

[@Snoo29293]

Finally someone who actually explaned DNS propely. All other youtubers would just talk about how DNS is a book and nothing else. Some did go into more details, but no one covered the big picture like you did.

[@TechsavvyProductions]

Thank you for the kind words and for watching the channel!

[@pacosiner]

This explained DNS better than the course I am paying for right now. Thank you.

[@TechsavvyProductions]

Paco check out my new video: Understanding and Troubleshooting DNS in Active Directory kzbin.info/www/bejne/Z3zGh3ytfZ19qqM thanks for the comment

[@leighb2380]

You are a very gifted teacher! This was explained so well. Thanks.

[@TechsavvyProductions]

Thanks for watching1

[@hichamz29]

the only lessons which i enjoy are from you Sir Vanderpool, thank you so much

[@TechsavvyProductions]

Thank you for your encouraging comments!

[@chakalonzote]

Sir, you are a gentleman and a scholar. What a video!

[@TechsavvyProductions]

Thanks for watching!!

[@DG-zu4iy]

one other question sorry! Who are the 12 independent operators? I keep counting 13 organizations. The ones listed on the graph at time stamp 10:38. Thank you!

[@TechsavvyProductions]

Verisign manages two DNS roots "A" and "J" en.wikipedia.org/wiki/Root_name_server

[@DG-zu4iy]

@@TechsavvyProductions BINGO! That clears that up! Thank you so much!

[@longo8511]

You are truly a great teacher. Many thanks!

[@TechsavvyProductions]

My hope is to take technical content make it enjoyable and understandable. Thanks for watching!

[@limitless1692]

This was a really good presentation of DNS . Thank You !

[@TechsavvyProductions]

Glad you enjoyed it!

[@danpind8879]

I appreciate your teaching style. Very good. Thank you.

[@TechsavvyProductions]

Dan thanks!

[@DG-zu4iy]

Another question sorry! For some reason, I am so interested in these servers. I think it's pretty cool for a newbie tech student! Regarding the DNSlytics, do you have the paid version of it? I wanted to download it for my chrome but I noticed there are two options. Paid and free version. Also, regarding what you said at time stamp 8:47 about the "magic" of how "lowes" can be hosted in the Netherlands yet I have fast traffic back and forth from here...do you have a video that explains that? Content Delivery Network (Akami International B.V.). Thank you for taking the time and the opportunity for me to grow based on your knowledge!

[@TechsavvyProductions]

Use DNSlytics browser extension (free) dnslytics.com/browser-extensions-addons-accelerators Content Delivery is another fascinating subject which is undergoing constant change/improvement. I do hope to do an series on this subject.

[@DG-zu4iy]

@@TechsavvyProductions thank you!

[@elisav2641]

I find it really interesting, thank you very much for sharing your knowledge! Greetings from Spain.

[@TechsavvyProductions]

Glad you enjoyed it! ¡Gracias por ver!

[@kryptopower4383]

Mr V. has returned, teaching is an art!

[@TechsavvyProductions]

Thank you for watching!

[@arianvanderweide]

He is very good at explaining love his video's this is the best video about DNS root servers. Learned a lot. Thank you. Keep video's coming :-)

[@TechsavvyProductions]

Thanks for watching!

[@mattgeo5039]

very well compiled and designed. very informative and indepth.

[@TechsavvyProductions]

Thanks for watching!

[@nelithawijesooriya4929]

What a valueble lesson 😄 !!! Thank you so much for teaching us a mountain of knowledge !!! 😊

[@TechsavvyProductions]

Glad you enjoyed it!

[@nicolascuervo9910]

he's back boiiiis

[@TechsavvyProductions]

Thank you for your encouraging comments!

[@abeljose2166]

I have been confused about this question for a long time. Is the resolver the ISP or the getaddrinfo() function executed in our local machine? Or Is it depended on what type of query you run, iterative or recursive?

[@TechsavvyProductions]

In Windows you have a service that is called "DNS Service" this module of software is your DNS resolver.

[@guerganatzatchkova5388]

That was a really great explanation!! Thanks!

[@TechsavvyProductions]

Glad it was helpful!

[@fakeguy785]

the whole video was really informative. tahnks

[@TechsavvyProductions]

Thanks for watching!

[@Foysalisp]

Thank you very much for browser plugin.

[@TechsavvyProductions]

It is a favorite of mine!

[@DG-zu4iy]

Thank you for that very detailed information! Very well explained and clear to the point slides. I have one question: what do you mean when you say "instances"? For example "over 750 instances"? Thank you in advance!

[@TechsavvyProductions]

Debbie thanks for the great question! There are over 750 copies of the "master" database for the root DNS system. Only the 12 operators can make a changes to the master copy. Those changes are pushed out to the 750 "instances".

[@DG-zu4iy]

@@TechsavvyProductions I see. so when the operators make changes to a master copy, those changes have to be reflected on the 750 copies? So an "instance" is the same as a "copy" of the master database?Hence "750 instances"

[@TechsavvyProductions]

You are learning fast!

[@ranhu2312]

dumb question, does authoritative server sync data to root dns?

[@TechsavvyProductions]

Great question! No, root DNS servers are under tight control of ICANN and the various organizations that run the 13 root server names. They are the only folks that make changes to the root DNS database file.

[@herrizaax]

10:58 How is Verisign twice on the chart?

[@TechsavvyProductions]

Verisign does manage both the A and J root server! They also do the entire .COM domain. Thanks for watching.

[@herrizaax]

@@TechsavvyProductions no, thank you!

[@sivakumarm3569]

Fascinating 👍

[@TechsavvyProductions]

Thanks for watching!

[@rdkrevenue]

Thanks for guiding!!! But I have doubt how do we can get IP address under our company since currently using IP address Organization saying different company name. Couple of the month me trying to get IP. Please help

[@TechsavvyProductions]

Normally you can obtain IP addresses from your company's ISP, take a look at the information provided by www.arin.net/ ARIN is responsible for all IP address allocations to everyone in Canada, US. If you are not in these countries check out www.iana.org/numbers for the registry for your country.

[@rdkrevenue]

Lowell Vanderpool thanks lot and your videos amazing I learn lots thanks

[@rdkrevenue]

Lowell Vanderpool and my company has providing hosting services but when customer order the shared hosting it’s showing our company name ( hosting provider) why is that ??? How can I resolve this

[@vmz-vmz-vmz]

how can i setup my domain server for domain ......for giving free domain servoce tp others

[@TechsavvyProductions]

DNS is quite complicated and only authorized companies with IANA can do this.

[@maknetworks7229]

Thank you sir !

[@TechsavvyProductions]

Most welcome!

[@tomriddle2427]

First of all thank-you for this great in depth demonstration but what I didn't understand was that 13 root servers, why only 13 and then you said some 795 or something root servers? Can you plz explain that to me. Thanks in advance.

[@TechsavvyProductions]

Great question, there are 13 "master" copies of the database that represent the "root" of DNS, but those 13 copies of the DNS root database are installed all over the world on hundreds of servers! The size of UDP data packets means that there's only room to include the IP addresses of 13 root servers in a single packet. Originally that meant a limit of 13 root server machines, and it gives us the root server names A-M. But thanks to the anycasting technique, each root server address can be mirrored on multiple physical servers in multiple diverse locations.

[@bharaths3075]

Sir may I know why there are only 13 root servers? Can't we have more or less than that?

[@TechsavvyProductions]

Great question, there are 13 "master" copies of the database that represent the "root" of DNS, but those 13 copies of the DNS root database are installed all over the world on hundreds of servers! The size of UDP data packets means that there's only room to include the IP addresses of 13 root servers in a single packet. Originally that meant a limit of 13 root server machines, and it gives us the root server names A-M. But thanks to the anycasting technique, each root server address can be mirrored on multiple physical servers in multiple diverse locations.

[@andreigiubleanu]

LV is the man !

[@TechsavvyProductions]

Thanks for watching!

[@YouTubeWatcher89]

ohh...that was awesome....you earned a sub.

[@TechsavvyProductions]

Thanks for the sub!

[@wafflebutsad]

loved your presentation! can i use some of the info from the slides ^-^

[@TechsavvyProductions]

Feel free to use anything I produce.

[@wafflebutsad]

@@TechsavvyProductions thanks prof!!

[@vin7544]

Cannot find ultratools neustar

[@TechsavvyProductions]

It looks like it has turned into a paid product.

[@janlochman1985]

So DNS servers are expensive because they have so many DNS queries by Internet users?

[@TechsavvyProductions]

I depends, many root servers are very inexpensive and hosted by many companies and organizations and even governments all over the world. But if these DNS servers are located in an Internet Exchange Point (en.wikipedia.org/wiki/Internet_exchange_point) they will be very expensive. Keep in mind you can build a DNS server under $400.00 and yes it will be limited in how many queries it can handle.

[@awesomearizona-dino]

Great learning video.

[@TechsavvyProductions]

Thank you for watching!

[@nikno6814]

So helpful. Thak you

[@TechsavvyProductions]

You're so welcome!

[@michaelkovchan6703]

warm thank you :)

[@TechsavvyProductions]

Thanks for watching

[@GREAT9245]

excellent !

[@TechsavvyProductions]

Thanks for watching!

[@user-hq8wm8giyujcg]

how common is it that root servers get hacked every year?

[@TechsavvyProductions]

Thank you for your support, it is appreciated! They are attacked on a very regular basis and recently some security researchers discovered a problem DNS architecture that had someone else discovered it, they could have quickly brought the entire internet down, using a single DNS query packet. This malformed packet could bring a DNS server into high CPU utilization for up to 16 hours. www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf

[@kilroy8357]

Thank you!

[@TechsavvyProductions]

Thank you for your encouraging comments!

[@kilroy8357]

Lowell Vanderpool You’re welcome!

[@askartop2628]

awesome. thnx!

[@TechsavvyProductions]

Thank you for watching!

[@renatorobles7440]

Good morning !! Here watching the video again !! 4 times seen already, very good information.

[@TechsavvyProductions]

Thanks for watching!

[@mickymunna5984]

😍😍😍😍😍 from india.

[@TechsavvyProductions]

Thanks for watching

[@grantdavis6241]

Don't even know if exist? That is a bit odd don't you think/

[@TechsavvyProductions]

Thanks for watching!

[@Ishvires]

The moment someone or group hijacks root servers, they will instantly becomes what is know as God

[@TechsavvyProductions]

Sorry, taking over DNS root servers will not help you walk on water. Most likely some jail time.

[@Ishvires]

@@TechsavvyProductions only if you don't know what you are doing.

[@paulhetherington3854]

No program language works!

[@TechsavvyProductions]

Thanks for watching

[@ianthehunter3532]

Thanks a lot!

[@TechsavvyProductions]

You're welcome!