Microsoft windows 2000 DNS manual Caching Resolver

Page 42

A client might have multiple network adapters and thus might have multiple IP addresses. That could theoretically put the client in multiple sites. The design above ignores this remote possibility. Rather, it assumes that the client is in the site corresponding to the adapter, which was used to ping one of the DCs. To handle the case where this ambiguity is detrimental, NetLogon allows the site name to be manually configured by setting the REG_SZ value SiteName under the Registry key HKLM\System\CurrentControlSet\Services\NetLogon\Parameters. If this parameter is defined, the Site Name of the machine is forced to be the specified value and the site name dynamically discovered from Active Directory by the locator will never be used.

Caching Resolver

The Windows 2000 implementation of DNS introduces a client-side caching resolver for DNS name resolution. Caching resolver is a Windows 2000 service with the sole purpose of improving name lookup performance, and reducing network traffic associated with name lookups by minimizing the number of name resolution round trips.

Caching resolver runs in the context of the Services.exe process (Service Control Manager) and can be turned on and off just like any other service.

The Windows 2000DNS caching service includes the following features:

General caching of queries.

Negative caching.

Removal of previously resolved names from the cache based on negative acknowledgement.

Keeping track of transient (Plug and Play) network adapters and their IP configuration.

Keeping a record of each adapter’s DomainName.

Management of unresponsive name servers.

The caching resolver cash can be purged using the IPCONFIG command.

An ability to prioritize multiple A RRs returned from the DNS server based on their IP address. If the resolver sends a query specifying such prioritization, then the DNS server finds the A records with IP addresses from the networks which the computer is directly connected to and places them first in its response. This feature prevents Round Robin from working properly. It can be disabled through the Registry.

Accepting response from non-queried IP address (This feature is enabled by default. It can be disabled through the Registry).

An ability to automatically reload the updated local Hosts file into the resolver’s cache. Thus, as soon as a Hosts file is changed the resolver’s cache is updated.

An ability to initiate a network failure timeout. If all resolver’s queries are timed out then it assumes the network failure and does not submit any queries for a certain period (30 seconds by default) of time. In case of a multi-adapter

Windows 2000 White Paper

36

Image 42
Contents Windows 2000 DNS Microsoft Corporation. All rights reserved Contents Designing a DNS Namespace for the Active Directory Summary Page DNS Fundamentals Name Services in Windows Standards and Additional ReadingHistory of DNS Draft-skwan-gss-tsig-04.txt GSS Algorithm for Tsig GSS-TSIGStructure of DNS Hierarchy of DNS Domain NamesMit Mydomain Int/net/orgCom Edu Gov Mil Army Microsoft DNS and InternetTTL Distributing the Database Zone Files and DelegationReplicating the DNS database Microsoft My domain ftp NtserverNEW Features of the Windows 2000 DNS Querying the DatabaseName Server Resolver Root-server Gov Whitehouse.gov Updating the DNS Database Time to Live for Resource RecordsActive Directory Service Storage Model Active Directory Storage and Replication IntegrationWindows 2000 White Paper Controlling Access to Zones Replication ModelZone Type Conversions Incremental Zone Transfer Protocol DescriptionMaster DNS Server Dynamic UpdateZone Log File Slave DNS Server Ixfr and DS IntegrationUpdate Algorithm Dynamic Update of DNS RecordsMixed Environment Dhcp ClientRAS Client Statically Configured ClientSecure Dynamic Update Client ReregistrationEstablishing a security context by passing security tokens Secure Dynamic Update Policy DnsUpdateProxy Group Controlling Update Access to Zones and NamesDNS Admins Group Aging and ScavengingAging and Scavenging Parameters DefaultEnableScavenging Description Scavenging PeriodRecord Life Span Configuring Scavenging Parameters Scavenging AlgorithmUnicode Character Support Interoperability ConsiderationsDomain Locator Finish DNS Record Registration and Resolver Requirements IP/DNS Compatible LocatorLdap.tcp.dc.msdcs.DnsDomainName Kerberos.tcp.dc.msdcs.DnsDomainName IP/DNS DC Locator Algorithm Discovering Site specific DCs FinishCaching Resolver Name Resolution Fully-Qualified QueryUsing Global Suffix Search Order Unqualified Single-Label QueryUsing Primary and Per-adapter Domain Names Unqualified Multi-Label QueryName Resolution Scenarios Unqualified Single-Label Query ScenariosDNS Server List Management Fully-Qualified Query ScenariosMicrosoft Implementation of Negative Caching Negative CachingAdministrative Tools WMI Support for DNS Server AdministrationDNS Manager Interoperability Issues Using Wins and Winsr RecordsUsing UTF-8 Characters Format DNS Server Performance Receiving Non-RFC Compliant DataUtilization Server Capacity Planning Hardware components SizingInternet Access Considerations Choosing NamesWindows 2000 White Paper Windows 2000 White Paper Windows 2000 White Paper VPN Com Yyy.com Zzz.com Windows 2000 White Paper Primary Zone YYY corporation ZZZ corporation VPN Firewall Characters in Names Computer NamesFull computer name Per-Adapter NamingIntegrating ADS with Existing DNS Structure Domain name and sites. Active Directory domain name Migration to Windows 2000 DNS DNSDeploying DNS to Support Active Directory Partitioning, and Replication Choosing your ZonesUsing Automatic Configuration Wins ReferralIxfr For More Information IxfrWindows 2000 White Paper