When the Internet stumbles: Why DNS is important
Last week's massive AWS outage was a reminder that the modern Internet - an ecosystem of billions of connections, services and devices - still depends on a handful of silent, foundational systems. At the top of that list is the Domain Name System (DNS), the essential layer that translates human-readable names into machine-readable addresses. If DNS falters, everything that is built on it will also fail.
Robert Frank, Area Vice President Central Europe at DigiCert
When the AWS US-East-1 region went down, many organizations not only couldn't process requests, they couldn't even report their outages. Without working DNS resolution, systems couldn't find their monitoring or incident reporting endpoints. The event underscored a truth that security experts already know: DNS is not optional "plumbing"; it's the connective tissue of modern cloud-based applications.
A brief introduction: How DNS works
Every digital interaction, from sending an email to launching an app, starts with a DNS lookup. When you type PetStore.com into your browser, your device sends a request to translate that domain name into the appropriate IP address so it knows which server to contact. This process involves two different but complementary systems: recursive DNS and authoritative DNS.
Recursive DNS servers act on behalf of the user. They receive the original request, check cached results and, if necessary, contact other DNS servers, such as an upstream recursive server or authoritative servers, to find the correct IP address. These resolvers are typically operated by a local network administrator, internet service providers (ISPs), cloud platforms or specialized DNS providers. Recursive DNS is what most people interact with - indirectly - every time they go online.
Authoritative DNS, on the other hand, provides the definitive answer for a zone or domain in a tree hierarchy below the "root" servers and top-level domains such as .com, .org or .de. These servers are maintained by domain owners or DNS providers and contain the official records - A, AAAA, MX, TXT, CNAME - that define where traffic should be directed. When a user asks a recursive resolver, "Where is PetStore.com?", the recursive server queries the hierarchy of authoritative DNS servers, which provide an answer for the part of the tree for which they are authoritative (responsible).
Both are critical, but they fulfill very different roles. The AWS incident showed what happens when one side - the recursive layer - fails.
Continue with login
No account yet?
Protected area: Register now for free and get full access to all exclusive articles from GIT SECURITY International. With our newsletter we regularly send you top news from the safety and security industries as well as the latest e-issue.
RegisterBusiness Partner
DigiCert Inc.
US
most read
Guidelines Do Not Deter Attackers - Deutsche Telekom CSO warns of AI-accelerated cyberattacks
76 million attacks a day: Deutsche Telekom CSO Tschersich on the dangers of AI, OnNet and why policies don't stop attackers
Winguard from Advancis: How Boehringer Ingelheim is modernizing its global risk management
Boehringer Ingelheim optimizes global safety management with the Winguard open threat platform from Advancis
Programmable keys and digital locking cylinders can simplify access and compliance
The key to meeting building managers’ growing security and compliance challenges – without increasing workload or costs – is the implementation of smarter access
Salto Systems: From a Bold Idea to a Global Access Ecosystem
25 Years One Jump Ahead
Motorola Solutions’ Body Cameras Support Berlin's Commitment to Increased Security
Motorola Solutions has been awarded a contract to equip Police Berlin and the Berlin Fire Department.