Live data from Hacker News

DNS Toys (2022)

dns.toys

41–50 of 71 posts

Re: DNS Toys (2022)

#41
I didn't know you could specify a DNS server with a name. So does dig first look up that name using whatever DNS server is normally configured to determine where the intended DNS server is?

NextDNS gives you a name that you can put in certain UIs (like "Private DNS" in Android) -- I always assumed there was just something special about those.

Re: DNS Toys (2022)

#42

Can someone ELI5 for the idiot in the thread. I know it's for fun but I don't get it. Also how's it's working? I'm aware it's my ignorance.

The DNS protocol is just text over udp. When making a DNS request, your system will open a socket, write "google.com" in it and read for a response. The server, if it is properly configured as a DNS server, will reply with the appropriate DNS record, again as text. Google.com is a cname to some subdomain used for load balancing, so the server will simply reply "CNAME blabla.google.com" and may optionally also resolve…

Your reply is riddled with errors and you don't seem to actually know how the DNS protocol works at all, on the wire or otherwise. It is, firstly, impossible for "google.com" to contain a CNAME record. This would violate standards, and it's simply not done. Query or yourself; there is no CNAME at that label.

Your description of how queries work is not how queries work at all. Your entire comment is a net negative and detracts from the overall knowledge at Hacker News.

Re: DNS Toys (2022)

#43
post #5

This reminds me of a neat little trick I used back then to "reliably" compute IP address of my machines for a dynamic DNS utility I wrote for myself. OpenDNS resolvers (such as resolver1.opendns.com) will resolve myip.opendns.com to your actual IP address. Whether you get A or AAAA records depends on your connection. Since the IP addresses for these resolvers tend to be anycast IPs, I also want to believe they are ma…

Very nice idea. Seems way simpler than the STUN protocol.

I worked on VoIP before RFC3489. We built our own ways to handle NAT and firewalls, but it always involved something like a directory server that would see both your private and public IPs and share information between clients at call time to connect calls.

Re: DNS Toys (2022)

#44

I'm a big fan of Julia Evans[1] who's made a number of useful toys including ones for DNS here[2] and here[3]. - [1] https://jvns.ca/ - [2] https://dns-lookup.jvns.ca/ - [3] https://messwithdns.net/

Thanks for sharing these absolute gems!

Re: DNS Toys (2022)

#45
post #30
post #23

I'm surprised that they aren't also available in some subdomain of dns.toys (so that they would resolve without using a special name server).

If you used default nameservers, you'd be introducing all the usual DNS complications, e.g. caching.

Those complications would be easily controllable using the TTL.

Re: DNS Toys (2022)

#46
post #25
post #5

This reminds me of a neat little trick I used back then to "reliably" compute IP address of my machines for a dynamic DNS utility I wrote for myself. OpenDNS resolvers (such as resolver1.opendns.com) will resolve myip.opendns.com to your actual IP address. Whether you get A or AAAA records depends on your connection. Since the IP addresses for these resolvers tend to be anycast IPs, I also want to believe they are ma…

Google and akamai also has a DNS service. dig @ns1-1.akamaitech.net ANY whoami.akamai.net +short dig @ns1.google.com TXT o-o.myaddr.l.google.com +short

On Windows:

    nslookup whoami.akamai.net ns1-1.akamaitech.net

Re: DNS Toys (2022)

#47

Can someone ELI5 for the idiot in the thread. I know it's for fun but I don't get it. Also how's it's working? I'm aware it's my ignorance.

The DNS protocol is just text over udp. When making a DNS request, your system will open a socket, write "google.com" in it and read for a response. The server, if it is properly configured as a DNS server, will reply with the appropriate DNS record, again as text. Google.com is a cname to some subdomain used for load balancing, so the server will simply reply "CNAME blabla.google.com" and may optionally also resolve…

DNS is not a text protocol, it's a binary protocol.

Re: DNS Toys (2022)

#48

Earlier quoted context omitted.

The DNS protocol is just text over udp. When making a DNS request, your system will open a socket, write "google.com" in it and read for a response. The server, if it is properly configured as a DNS server, will reply with the appropriate DNS record, again as text. Google.com is a cname to some subdomain used for load balancing, so the server will simply reply "CNAME blabla.google.com" and may optionally also resolve…

Your reply is riddled with errors and you don't seem to actually know how the DNS protocol works at all, on the wire or otherwise. It is, firstly, impossible for "google.com" to contain a CNAME record. This would violate standards, and it's simply not done. Query or yourself; there is no CNAME at that label. Your description of how queries work is not how queries work at all. Your entire comment is a net negative and…

> "It is, firstly, impossible for "google.com" to contain a CNAME record. This would violate standards, and it's simply not done."

It is possible for an apex domain to contain/be a CNAME, and it simply is done, by many companies: https://serverfault.com/questions/55528/set-root-domain-reco...

Re: DNS Toys (2022)

#50
post #7

Nice, but why over DNS? Perhaps I simply didn't get the point.

DNS is everywhere. It offers massive caching potential. It is well-understood and there are multiple, interoperating, implementations. It is a data diode, which is to say read-only, which can simplify some risk assessments related to attack surface.

The README for this project may explain some of the general benefits (my project): https://github.com/m3047/rkvdns

HTTP is everywhere. I think SOAP sucks, but it's everywhere and it works well enough. (For that matter XHR sucks, but even I use it occasionally.)

(This is not the first time DNS Toys has shown up on Hacker News, there's a link in another comment.)

Post reply on HN