When the Internet stumbles: Why DNS is important
Last week's massive AWS outage was a reminder that the modern Internet - an ecosystem of billions of connections, services and devices - still depends on a handful of silent, foundational systems. At the top of that list is the Domain Name System (DNS), the essential layer that translates human-readable names into machine-readable addresses. If DNS falters, everything that is built on it will also fail.
Robert Frank, Area Vice President Central Europe at DigiCert
When the AWS US-East-1 region went down, many organizations not only couldn't process requests, they couldn't even report their outages. Without working DNS resolution, systems couldn't find their monitoring or incident reporting endpoints. The event underscored a truth that security experts already know: DNS is not optional "plumbing"; it's the connective tissue of modern cloud-based applications.
A brief introduction: How DNS works
Every digital interaction, from sending an email to launching an app, starts with a DNS lookup. When you type PetStore.com into your browser, your device sends a request to translate that domain name into the appropriate IP address so it knows which server to contact. This process involves two different but complementary systems: recursive DNS and authoritative DNS.
Recursive DNS servers act on behalf of the user. They receive the original request, check cached results and, if necessary, contact other DNS servers, such as an upstream recursive server or authoritative servers, to find the correct IP address. These resolvers are typically operated by a local network administrator, internet service providers (ISPs), cloud platforms or specialized DNS providers. Recursive DNS is what most people interact with - indirectly - every time they go online.
Authoritative DNS, on the other hand, provides the definitive answer for a zone or domain in a tree hierarchy below the "root" servers and top-level domains such as .com, .org or .de. These servers are maintained by domain owners or DNS providers and contain the official records - A, AAAA, MX, TXT, CNAME - that define where traffic should be directed. When a user asks a recursive resolver, "Where is PetStore.com?", the recursive server queries the hierarchy of authoritative DNS servers, which provide an answer for the part of the tree for which they are authoritative (responsible).
Both are critical, but they fulfill very different roles. The AWS incident showed what happens when one side - the recursive layer - fails.
Continue with login
No account yet?
Protected area: Register now for free and get full access to all exclusive articles from GIT SECURITY International. With our newsletter we regularly send you top news from the safety and security industries as well as the latest e-issue.
RegisterBusiness Partner
DigiCert Inc.
US
most read
Salto Systems: From a Bold Idea to a Global Access Ecosystem
25 Years One Jump Ahead
Programmable keys and digital locking cylinders can simplify access and compliance
The key to meeting building managers’ growing security and compliance challenges – without increasing workload or costs – is the implementation of smarter access
AI Reality Check: Genetec CEO Pierre Racz
AI in security: Genetec CEO Pierre Racz cuts through the hype and outlines what really works in practice.
Notre Dame Paris: How DOM Security Combines Historic Craftsmanship with Modern Security for a World Heritage Site
Smart digital security: efficient evidence & video data management for investigations and protection systems.
Motorola Solutions’ Body Cameras Support Berlin's Commitment to Increased Security
Motorola Solutions has been awarded a contract to equip Police Berlin and the Berlin Fire Department.