The History of the Domain Name System: The First DNS Servers

Last time we started telling the story of DNS — we recalled how the project began and what problems it was supposed to solve in the ARPANET network. Today, we will talk about the first DNS server, BIND.

Photo - John Markos O’Neill — CC BY-SA

The First DNS Servers

After Paul Mockapetris and Jon Postel proposed the concept of domain names for the ARPANET in 1983, it quickly gained approval from the IT community. One of the first to implement it in practice were engineers from the University of California, Berkeley. In 1984, four students introduced the first DNS server — Berkeley Internet Name Domain (BIND). They worked under a grant provided by the U.S. Department of Defense's Advanced Research Projects Agency (DARPA). The system developed by the university students automatically converted DNS names to IP addresses and vice versa. Interestingly, when its code was uploaded to

BSD (the software distribution system), the first source codes already had version number 4.3. Initially, the DNS server was used by staff in the university's laboratories. Until version 4.8.3, the development of BIND was overseen by members of the university's Computer Systems Research Group (CSRG), but in the late 1980s, the DNS server broke free from the university — it was handed over to Paul Vixie from the corporation DEC . Paul released updates 4.9 and 4.9.1 and then founded the Internet Software Consortium (ISC), which has been responsible for maintaining BIND since then. According to Paul, all previous versions relied on the code from the Berkeley students, and over the last fifteen years, it had completely exhausted its capabilities for modernization. Therefore, in 2000, BIND was rewritten from scratch.The BIND server includes several libraries and components that implement the client-server architecture of DNS and manage the configuration of the DNS server's functions. BIND is widely used, especially on Linux, and remains a popular implementation of a DNS server. It is

installed on servers supporting the decision the root zone. root zone.

There are alternatives to BIND. For example, PowerDNS, included with Linux distributions. It was developed by Bert Hubert from the Dutch company PowerDNS.COM and is supported by the open source community. PowerDNS was implemented on the servers of the Wikimedia Foundation in 2005. This solution is also used by major cloud providers, European telecommunications companies, and organizations in the Fortune 500 list.

BIND and PowerDNS are among the most widely used, but they are not the only DNS servers. It is also worth mentioning Unbound, djbdns and Dnsmasq.

Development of the Domain Name System

Throughout the history of DNS, its specification has undergone numerous changes. One of the first major updates was added the NOTIFY and IXFR mechanisms in 1996. They simplified the replication of domain database systems between primary and secondary servers. This new solution allowed for configuring notifications about changes in DNS records. Such an approach guaranteed the identity of the secondary and primary DNS zones and saved bandwidth — synchronization occurred only when necessary, rather than at fixed intervals.

Photo - Richard Masoner — CC BY-SA

Initially, the DNS network was not accessible to the general public, and potential security issues were not a priority during the system's development; however, this approach had repercussions later. With the growth of the internet, vulnerabilities in the system began to be exploited — for example, attacks such as DNS spoofing emerged. In this case, the cache of DNS servers is filled with data that lacks an authoritative source and redirects requests to malicious servers.

To address the issue, DNS implemented cryptographic signatures for DNS responses (DNSSEC) — a mechanism that allows for building a chain of trust for a domain from the root zone. Note that a similar mechanism was added for host authentication when transferring DNS zones — it was named TSIG.

Modifications that simplify DNS database replication and address security issues were warmly welcomed by the IT community. However, there were also changes that were not well received by the community. In particular, the transition from free to paid domain names. This is just one example of the 'wars' in the history of DNS. We will discuss this further in the next article.

At 1cloud, we offer the service “Virtual Server” which allows you to rent and configure a remote VDS/VPS server in just a few minutes.
There are also Affiliate Program for all users. Post referral links to our service and earn rewards for referred clients.

Source: habr.com