Practices on DNS management and Domain Name Emerging...
Transcript of Practices on DNS management and Domain Name Emerging...
![Page 1: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/1.jpg)
Practices on DNS Management
and Domain Name
Emerging Topics
Jirasak Jullawat
July 14, 2016
![Page 2: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/2.jpg)
TABLE OFCONTENTS 1. Definition of Domain Name
2. Domain Name Structure
3. Why Domain Name ?
4. .th Management
5. How DNS works ?
6. Things You Should Know for Managing DNS.
7. DNSSEC
8. IDN
9. EAI
10. New gTLDs
![Page 3: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/3.jpg)
DOMAIN NAME ?
![Page 4: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/4.jpg)
![Page 5: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/5.jpg)
Where are domain names ?
URL / URI / Address bar
http://www.thnic.co.th
http://www.google.com
http://แปลภาษาญปน.ไทย
[email protected]@gmail.comยอด@ยอด.ไทย
![Page 6: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/6.jpg)
Then, what does DNS stand for ?
![Page 7: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/7.jpg)
Domain Name System
![Page 8: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/8.jpg)
DNS Structure
![Page 9: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/9.jpg)
uk cc
Root
com kr jp thnet org info biz
ac co go in mi net or
moe gov1 gov2 gov3 ...
Generic Top-Level Domain
(gTLD)
Country Code
Top-Level Domain
(ccTLD)
TLD
SLD
Third Level
![Page 10: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/10.jpg)
Generic top-level domains (gTLDs)
![Page 11: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/11.jpg)
![Page 12: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/12.jpg)
WHY DOMAIN ?
![Page 13: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/13.jpg)
Why DNS’s so important ?
![Page 14: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/14.jpg)
addressweb
nameBRAND
Why DNS’s so important ?
![Page 15: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/15.jpg)
Why DNS’s so important ?
![Page 16: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/16.jpg)
Why DNS’s so important ?
![Page 17: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/17.jpg)
Why DNS’s so important ?
![Page 18: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/18.jpg)
.th History
![Page 19: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/19.jpg)
1988 1993 2007
.th History
![Page 20: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/20.jpg)
July 1988, .th was registered.
December 1991, the first academic meeting on Internet was conducted in AIT which results to the first 4 subdomain: .ac.th, .co.th, .or.th, .go.th
In 1992, the DNS server was placed at Thailand first international gateway: Chulalongkorn University.
In 1993, the volunteer team was called THNIC.
Until 1997, .th service was run by the co-operation of CU & AIT.
In 1998, the primary DNS server was relocated to AIT.
.th History
![Page 21: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/21.jpg)
In 1999, T.H.NIC Co., Ltd. was registered to replace the volunteer model.
In 2001, Thai Name Server Co., Ltd. was registered and in charge of DNS database and services (Registry). While domain name registration service (Registrar) remained at T.H.NIC company.
In 2007, Thai Network Information Center Foundation was established to be .th policy and management body.
.th History
![Page 22: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/22.jpg)
.th Management (& .ไทย)
![Page 23: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/23.jpg)
.th & .ไทย Management
![Page 24: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/24.jpg)
.co .in .ac .or .go .mi
.th
.net
* IPv6 Supported
* DNSSEC enabled
+ IDN.th .ไทย
.th Management
![Page 25: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/25.jpg)
7 subdomains:
.co.th Commercial
.go.th Government
.or.th NGO
.mi.th Military
.ac.th Academic
.net.th Internet or Network Service Providers
.in.th Dot In Thai
.th Management
![Page 26: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/26.jpg)
CU
INET
CAT Telecom
ISC (Anycast)
CommunityDNS (Anycast)
.th Stability
![Page 27: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/27.jpg)
For Thai
Anti-Cyber Squatting
Domain for real uses.
Name restriction.
Number restriction.
.th Policies
![Page 28: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/28.jpg)
Verify the exist of domain owner
Build trust of Thai online commerce.
Why .th & .ไทย
![Page 29: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/29.jpg)
How DNS works ?
![Page 30: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/30.jpg)
Local DNS
Resolver
.THName Server
ROOTName Server
Query
www.moj.go.th
Connect to 203.159.32.56
www.moj.go.th
Return
203.159.32.56
.GO.THName Server
Hierachy
ROOT
TH
GO.TH
Query www.moj.go.th
Refer to .th
Name Server
Query www.moj.go.th
Refer to .go.th
Name Server
Query www.moj.go.thRefer to moj.go.th
Name Server
MOJ.GO.TH
moj.go.thName ServerReturn
203.159.32.56
Query www.moj.go.th
Local DNSwww.moj.go.th
Not in Cache
![Page 31: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/31.jpg)
Things You Need to Know about Managing DNS.
![Page 32: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/32.jpg)
Domain Name Server Locations
http://www.root-servers.org
![Page 33: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/33.jpg)
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 34: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/34.jpg)
https://tools.ietf.org/html/rfc2308
TTLWhen a caching (recursive) nameserver queries the authoritative nameserver for a resource record, it will cache that record for the time (in seconds) specified by the TTL
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 35: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/35.jpg)
https://tools.ietf.org/html/rfc2308
Serial
The version number of the original copy of the zone. Zone transfers preserve this value.
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 36: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/36.jpg)
https://tools.ietf.org/html/rfc2308
Refresh
A time interval before the zone should be refreshed.
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 37: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/37.jpg)
https://tools.ietf.org/html/rfc2308
Retry
A time interval that should elapse before a failed refresh should be retried.
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 38: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/38.jpg)
https://tools.ietf.org/html/rfc2308
Expire
A time value that specifies the upper limit on the time interval that can elapse before the zone is no longer authoritative.
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 1 day
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 39: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/39.jpg)
https://tools.ietf.org/html/rfc2308
Negative Caching
The TTL for negative caching should be.
$ORIGIN example.in.th.
$TTL 7200
@ IN SOA ns1.example.in.th. dnsadmin.example.in.th. (
2016071001 ; serial
7200 ; refresh after 2 hours
3600 ; retry after 1 hour
604800 ; expire after 1 week
7200 ) ; Negative Caching for 2 hours
IN NS ns1.example.in.th.
IN NS ns2.example.in.th.
![Page 40: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/40.jpg)
DNSSEC
![Page 41: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/41.jpg)
DNS Vulnerability
Google.com
Server #1
End user
(resolver)
Local server
(Caching)
www.google.com A ?
Google.com
Server #2
222.222.222.222
111.111.111.111
Altered zone
Impersonating
master
Cache Impersonation
Cache poisoning
![Page 42: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/42.jpg)
DNSSEC
Local Cache server End User
www.google.com A ?
www.google.com A 209.85.175.104Plus signature by ns1.google.com
Attacker
www.google.com A 203.150.250.254Zoneserver
![Page 43: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/43.jpg)
Digital Signature
![Page 44: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/44.jpg)
MyDomain
Public Key
Private Key
Information signed with Private Key.
Use Public key is only way to read.
IF Trusted “Public Key” can Trusted “Information”.
Walking the Chain of Trust
![Page 45: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/45.jpg)
Walking the Chain of Trust
. (root)
th.
co.th.
thnic.co.th.
TrustedTrusted
Trusted
Trusted
![Page 46: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/46.jpg)
Key
•Zone Signing Key(ZSK) – Used to sign the data within the zone
•Key Signing Key(KSK) – Used to sign the Zone signing key and to create the “Secure Entry Point” for the zone
![Page 47: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/47.jpg)
Delegation Signer (DS)
![Page 48: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/48.jpg)
DNSViz.net
![Page 49: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/49.jpg)
![Page 50: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/50.jpg)
.IDNInternationalized Domain Name
![Page 51: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/51.jpg)
• IDN ccTLD
• IDN = Internationalized Domain Name
• ccTLD = Country-code Top Level Domain
IDN ?
![Page 52: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/52.jpg)
Singapore (sg)
新加坡 (traditional Chinese);
சிஙகபபூர (Tamil)
Sri Lanka (lk):
ලංකා (Sinhalese);
இலஙகக (Tamil)
Syria (sy):
سورية
Taiwan (tw):
台湾 (simplified);
台灣 (traditional);
臺灣 (variant string)
Thailand (th):
ไทย
Tunisia (tn):
تونس
Emerged IDN ccTLDs
![Page 53: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/53.jpg)
• Register together with .th .ไทย
• 1 on 1
• Translation or Transliteration
.ไทย
![Page 54: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/54.jpg)
![Page 55: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/55.jpg)
• Most internet users are able to use English ?
• Thai typing is somehow “hard” and words are “longer” ?
![Page 56: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/56.jpg)
10 - 15 % of Thai have English literacy. (about 7 millions from 70 millions)
Some of them (63 millions) know latin characters but unable to remember words.
Computer / Internet always meddle with English, so leave it!
IDN in Thai ?
![Page 57: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/57.jpg)
Reduce the digital divide which caused by language. Increase Internet penetration in non-native English countries. Local brands in local language which focus on local market,
communicate them using IDN. local SEO benefit.
IDN
![Page 58: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/58.jpg)
58
DNS knows only ASCII
A - Z
0 - 9
“ - “
IDN will be converted to ASCII between the process.
How IDN Works ?
![Page 59: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/59.jpg)
59
How IDN Works ?.ไทย
Name Server
URL: จดโดเมน.ไทย
จดโดเมน.ไทยWeb Server
xn--82cyau3b3mma.xn--o3cw4h
61.19.247.23
.................
........................
...................
..............
![Page 60: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/60.jpg)
EAI(Email Address Internationalization)
![Page 61: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/61.jpg)
![Page 62: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/62.jpg)
EAI
![Page 63: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/63.jpg)
Who are EAI supported ?
• Gmail & Google Apps
• Postfix version 3.0
• Outlook 2016 for Windows
• THNIC
![Page 64: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/64.jpg)
.ไทย EAI service
![Page 65: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/65.jpg)
![Page 66: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/66.jpg)
Thai EAI Set-up Basic Guideline Development
http://interlab.ait.ac.th/eai-wiki-th/index.php/Main_Page
http://interlab.ait.ac.th/eai-wiki/index.php/Main_Page
![Page 67: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/67.jpg)
New gTLDs
![Page 68: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/68.jpg)
ICANN opened for anyone could apply for any Top Level Domain.
$185,000 registration fee.
Application period opened in round.
Round 1 was closed on May 30, 2012.
Total 1,930 Applications submitted.
New gTLDs
![Page 69: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/69.jpg)
New gTLDs Delegated Strings
https://newgtlds.icann.org/en/program-status/delegated-strings
![Page 70: Practices on DNS management and Domain Name Emerging Topicswunca.uni.net.th/wunca_regis/wunca33_doc/14/010... · Local DNS Resolver.TH Name Server ROOT Name Server Query Connect to](https://reader034.fdocuments.us/reader034/viewer/2022042709/5f4cf9e22ef8484e463f15ff/html5/thumbnails/70.jpg)
Jirasak Jullawat | [email protected]