<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>OpenKB::Server Technical Papers &#187; Networking</title>
	<atom:link href="http://www.openkb.org/category/networking/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.openkb.org</link>
	<description>Computer , server issues and solutions</description>
	<lastBuildDate>Sat, 17 Jul 2010 21:16:22 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Verisign prepares for DNSSEC 2010 &#124; nameservers</title>
		<link>http://www.openkb.org/verisign-prepares-for-dnssec-2010-nameservers/</link>
		<comments>http://www.openkb.org/verisign-prepares-for-dnssec-2010-nameservers/#comments</comments>
		<pubDate>Sun, 07 Mar 2010 00:06:55 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=749</guid>
		<description><![CDATA[Excerpt New Referral Behavior When queried for an existing A or AAAA record serving as glue (an address record at or below NS records at a delegation point), the authoritative name servers for .com and .net respond with the glue record in the answer section. However, the answer is not marked authoritative, i.e., the AA [...]]]></description>
			<content:encoded><![CDATA[<p>Excerpt<br />
New Referral Behavior</p>
<p>When queried for an existing A or AAAA record serving as glue (an address record at or below NS records at a delegation point), the authoritative name servers for .com and .net respond with the glue record in the answer section. However, the answer is not marked authoritative, i.e., the AA bit is not set. While this behavior conforms to the DNS standards, recent authoritative servers do not respond this way. Instead, when queried for a name at or below a delegation point, recent authoritative servers respond with a referral to the delegated zone. This behavior is also supported by the DNS standards.<a href="https://www.verisign.com/domain-name-services/domain-information-center/dns-behavior/index.html#ref"> More info</a></p>
<p>My take on this:<br />
This will effect people who fail to properly create a glue record with the registry. I have seen people setup A records to point to company X nameservers ips.  Well this is not going to fly anymore, you will need to properly setup the nameservers with the registry.</p>
<p>DNS Cycle:<br />
A users request a domain name &gt; This request goes to the root servers first&gt; the root server will now only return the NS record without the A record &gt; **Referral to the actual nameservers for the domain ** &gt; The actual nameserver will return the A record for the domain &gt; the user is then directed to the hosting server.</p>
<p>Current cycles :</p>
<p>The root nameserver were returning the A record for the nameserver. So it was actually doing query on the assigned nameservers for the requested domain.  This added a few miliseconds to the users request for the web content. By eliminating this cycle should increase the response time.</p>
<p>I used yahoo.com as an example of what a domain request looks like<br />
<span style="color: #ff0000;">*** this is returns the nameservers from the root server *****</span><br />
;; Received 499 bytes from 192.36.148.17#53(I.ROOT-SERVERS.NET) in 219 ms</p>
<p>yahoo.com.              172800  IN      NS      ns1.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns2.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns3.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns4.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns5.yahoo.com.<br />
;; Received 197 bytes from 192.54.112.30#53(h.gtld-servers.net) in 124 ms</p>
<p><span style="color: #ff0000;">*the nameservers are then queried for the A record for yahoo.com. as you can see they have their servers load balanced for failover. *Multiple ips were returned for their A records *</span></p>
<p>yahoo.com.              21600   IN      A       209.131.36.159<br />
yahoo.com.              21600   IN      A       209.191.93.53<br />
yahoo.com.              21600   IN      A       209.191.122.70<br />
yahoo.com.              21600   IN      A       67.195.160.76<br />
yahoo.com.              21600   IN      A       69.147.114.224<br />
yahoo.com.              21600   IN      A       69.147.125.65<br />
yahoo.com.              21600   IN      A       72.30.2.43<br />
yahoo.com.              21600   IN      A       98.137.149.56<br />
yahoo.com.              172800  IN      NS      ns8.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns6.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns3.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns2.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns5.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns4.yahoo.com.<br />
yahoo.com.              172800  IN      NS      ns1.yahoo.com.<br />
;; Received 393 bytes from 68.180.131.16#53(ns1.yahoo.com) in 1 ms</p>
<p><span style="color: #ff0000;">Fast DNS response within 1ms , good job yahoo</span></p>
<p><object width="480" height="385"><param name="movie" value="http://www.youtube.com/v/2GspRgFQh9k&#038;hl=en_US&#038;fs=1&#038;"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/2GspRgFQh9k&#038;hl=en_US&#038;fs=1&#038;" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="480" height="385"></embed></object></p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/verisign-prepares-for-dnssec-2010-nameservers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DNS: Root Servers</title>
		<link>http://www.openkb.org/dns-root-servers/</link>
		<comments>http://www.openkb.org/dns-root-servers/#comments</comments>
		<pubDate>Mon, 27 Oct 2008 00:19:14 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://blog.masadmin1.com/?p=239</guid>
		<description><![CDATA[dig com. ns DNS Root Servers 274683 IN NS I.ROOT-SERVERS.NET. . 274683 IN NS J.ROOT-SERVERS.NET. . 274683 IN NS K.ROOT-SERVERS.NET. . 274683 IN NS L.ROOT-SERVERS.NET. . 274683 IN NS M.ROOT-SERVERS.NET. . 274683 IN NS A.ROOT-SERVERS.NET. . 274683 IN NS B.ROOT-SERVERS.NET. . 274683 IN NS C.ROOT-SERVERS.NET. . 274683 IN NS D.ROOT-SERVERS.NET. . 274683 IN NS E.ROOT-SERVERS.NET. [...]]]></description>
			<content:encoded><![CDATA[<p>dig com. ns </p>
<p>DNS Root Servers<br />
274683  IN      NS      I.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      J.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      K.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      L.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      M.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      A.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      B.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      C.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      D.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      E.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      F.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      G.ROOT-SERVERS.NET.<br />
.                       274683  IN      NS      H.ROOT-SERVERS.NET.</p>
<p>===================================</p>
<p>Query root servers for namserver information<br />
=================</p>
<p>dig a.gtld-servers.net domain.com -t ns</p>
<p>or<br />
nslookup<br />
#server a.gtld-servers.ne<br />
#domainname.com</p>
<p>=============</p>
<p>Note the root server only store information about the nameservers that the domain is currently pointed to. The nameservers then point to the dns server that host the dns zone file.<br />
<a href="http://members.shaw.ca/nicholas.fong/dig/"> Reference Dig command </a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/dns-root-servers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Vista unable to see Windows xp systems on network</title>
		<link>http://www.openkb.org/vista-unable-to-see-windows-xp-systems-on-network/</link>
		<comments>http://www.openkb.org/vista-unable-to-see-windows-xp-systems-on-network/#comments</comments>
		<pubDate>Tue, 01 Jan 2008 18:30:50 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://blog.masadmin1.com/?p=52</guid>
		<description><![CDATA[reference : http://support.microsoft.com/kb/922120 This problem occurs if the Link-Layer Topology Discovery (LLTD) Responder component is not installed on the Windows XP-based computer. Network Map in Windows Vista makes network diagrams of the connections between network devices that can be used to troubleshoot connectivity problems. Network Map uses a discovery protocol called Link-Layer Topology Discovery (LLTD) [...]]]></description>
			<content:encoded><![CDATA[<p>reference : http://support.microsoft.com/kb/922120</p>
<p>This problem occurs if the Link-Layer Topology Discovery (LLTD) Responder component is not installed on the Windows XP-based computer.</p>
<p>Network Map in Windows Vista makes network diagrams of the connections between network devices that can be used to troubleshoot connectivity problems. Network Map uses a discovery protocol called Link-Layer Topology Discovery (LLTD) that queries other devices on the network to determine how the network is organized.</p>
<p>Windows Vista includes the software components that implement the LLTD protocol. For other devices on the network to be displayed on the map, they must enable a discovery protocol that can respond to the mapping requests from the Windows Vista-based computer.</p>
<p>Solution:</p>
<p>To resolve this problem, install the update that is described in this section. The update installs the LLTD Responder component on Windows XP-based computers. The following file is available for download from the Microsoft download center:</p>
<p><img src="http://support.microsoft.com/library/images/support/kbgraphics/public/EN-US/Download.gif" class="graphic" alt="Download" title="Download" /><a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=4F01A31D-EE46-481E-BA11-37F485FA34EA">Download the Windows XP package now.</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/vista-unable-to-see-windows-xp-systems-on-network/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Tunnel HTTP traffic via ssh</title>
		<link>http://www.openkb.org/tunnel-http-traffic-via-ssh/</link>
		<comments>http://www.openkb.org/tunnel-http-traffic-via-ssh/#comments</comments>
		<pubDate>Mon, 31 Dec 2007 16:05:38 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Networking]]></category>

		<guid isPermaLink="false">http://blog.masadmin1.com/?p=51</guid>
		<description><![CDATA[Download Putty and Run Type in the IP of Linux box or other SSH server you have access to and make sure the port is correct too Under the tab “Connection –> SSH –> Tunnel” set a local source port *preferrably random number above 1024* Under destination choose “Dynamic” and “Auto“ Then click open Open [...]]]></description>
			<content:encoded><![CDATA[<p>Download Putty and Run<br />
Type in the IP of Linux box or other SSH server you have access to and make sure the port is correct too<br />
Under the tab “Connection –> SSH –> Tunnel” set a local source port *preferrably random number above 1024*<br />
Under destination choose “Dynamic” and “Auto“<br />
Then click open<br />
Open IE or Firefox and find the proxy configuartion<br />
Set your localhost as the SOCKS proxy server and the port is the local source port you choose on Step 3<br />
NOTE: On Firefox choose SOCKS v5, and on IE include “localhost, 127.0.0.1? as the addresses exempted by the proxy </p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/tunnel-http-traffic-via-ssh/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
