Window Server 2008

February 14, 2008

What’s New in DNS in Windows Server 2008

Filed under: DNS Server — admin @ 12:53 pm

Domain Name System (DNS) is a system that is used in TCP/IP networks for naming computers and network services that is organized into a hierarchy of domains. DNS naming locates computers and services through user-friendly names. When a user enters a DNS name in an application, DNS services can resolve the name to other information that is associated with the name, such as an IP address.

Windows Server® 2008 provides a number of enhancements to the DNS Server service that improve how DNS performs. For details about these changes, see DNS Server Role.

Overview of the Improvements in DNS

The DNS Server role in Windows Server 2008 contains four new or enhanced features that improve the performance of the DNS Server service or give it new abilities:

• Background zone loading: DNS servers that host large DNS zones that are stored in Active Directory Domain Services (AD DS) are able to respond to client queries more quickly when they restart because zone data is now loaded in the background.
• IP version 6 (IPv6) support: The DNS Server service now fully supports the longer addresses of the IPv6 specification.
• Support for read-only domain controllers (RODCs): The DNS Server role in Windows Server 2008 provides primary read-only zones on RODCs.
• Global single names: The GlobalNames zone provides single-label name resolution for large enterprise networks that do not deploy Windows Internet Name Service (WINS). The GlobalNames zone is useful when using DNS name suffixes to provide single-label name resolution is not practical.
• Global query block list: Clients of such protocols as the Web Proxy Auto-Discovery Protocol (WPAD) and the Intra-site Automatic Tunnel Addressing Protocol (ISATAP) that rely on DNS name resolution to resolve well-known host names are vulnerable to malicious users who use dynamic update to register host computers that pose as legitimate servers. The DNS Server role in Windows Server 2008 provides a global query block list that can help reduce this vulnerability.

DNS Server Overview

Filed under: DNS Server — admin @ 12:52 pm

By using the Domain Name System (DNS) server role, you can provide a primary name resolution process for users on your network. The name resolution process enables users to locate computers on the network by querying for a user-friendly computer name instead of an IP address. A computer running the DNS server role can host the records of a distributed DNS database and use the records to resolve DNS name queries that are sent by DNS client computers. These queries can include requests such as the names of Web sites or computers in your network or on the Internet.

You can also integrate the DNS server role with Active Directory Domain Services (AD DS) to store and replicate DNS zones. This makes multimaster replication possible, along with more secure transmission of DNS data. In turn, AD DS requires DNS so that clients can locate domain controllers.

In the following sections, learn more about the DNS server role, the required and optional features in the DNS server role, and hardware and software for running it. In addition, learn how to open the administrative tool for the DNS server role and how to find more information about it.

What is the DNS server role?

DNS is a system for naming computers and network services that organizes them into a hierarchy of domains. DNS naming is used on TCP/IP networks, such as the Internet, to locate computers and services with user-friendly names. When a user enters the DNS name of a computer in an application, DNS clients and servers work together to look up the name and provide other information that is associated with the computer, such as its IP address or services that it provides for the network. This process is called name resolution.

The DNS server role makes it possible for a server running Windows Server® 2008 to act as a name resolution server for a TCP/IP network. The network can contain computers running Windows as well as computers running other operating systems. The DNS service in Windows Server 2008 is tightly integrated with Dynamic Host Configuration Protocol (DHCP) so that Windows-based DHCP clients and Windows-based DHCP servers automatically register host names and IP addresses on the DNS server for the appropriate domain.

Typically, Windows Server 2008 DNS is integrated with AD DS. In this environment, DNS namespaces mirror the Active Directory forests and domains for an organization. Network hosts and services are configured with DNS names so that they can be located in the network, and they are also configured with DNS servers that resolve the names of Active Directory domain controllers.

Windows Server 2008 DNS is also often deployed as a non–AD DS, or “standard,” DNS solution. For example, it can be deployed for the purposes of hosting the Internet presence of an organization.

The Windows Server 2008 DNS server service supports and complies with standards that are specified in the set of DNS Requests for Comments (RFCs). Therefore, it is fully compatible with any other RFC-compliant DNS server. A DNS client resolver is included as a service in all client and server versions of the Windows operating system.

New features in the DNS server role

The central feature of the DNS server role is the DNS Server service. This service provides a DNS server that is fully compliant with industry standards, and it supports all standards-compliant DNS clients. You can administer a Windows Server 2008 DNS server by using a Microsoft Management Console (MMC) snap-in as well as a number of command-line tools.

Windows Server 2008 supports the new features in the following table.

Feature Description

Hardware and software considerations

Use performance counters, testing in the lab, data from existing hardware in a production environment, and pilot roll-outs to determine the hardware capacity that is necessary for your server.

 
Note:

Typical DNS server hardware recommendations include the following:

• Single-processor computers with 400-megahertz (MHz) Pentium II CPUs
• 512 megabytes (MB) of RAM for each processor
• At least 4 gigabytes (GB) of available hard disk space
• A network adapter

Using faster CPUs, more RAM, and larger hard drives improve the scalability and performance of your DNS servers. DNS servers use approximately 100 bytes of RAM for each resource record. Using this figure, which you can obtain by looking at each zone in the DNS snap-in, you can calculate how much memory you need.

Installing a DNS server

After you finish installing the operating system, a list of initial configuration tasks appears. To install a DNS server, in the list of tasks, click Add roles, and then click DNS server.

Managing a DNS server

You can manage server roles with MMC snap-ins. Use the DNS snap-in to manage a DNS server. To open the DNS snap-in, click Start, point to Administrative Tools, and then click DNS.

For more information

To learn more about the DNS server role, you can view the Help on your server. To view the Help, open the DNS snap-in as described in the previous section, and then press F1.

 

Windows Servers 2008