What is DDI?
See how DNS, DHCP, and IPAM work as one operational system—and why managing them together matters.

See how each service works on its own—and how they operate together as DDI. Learn with practical lessons, trusted sources, and a searchable 753-term glossary.
See how DNS, DHCP, and IPAM work as one operational system—and why managing them together matters.
Trace a lookup from the stub resolver through recursive and authoritative DNS, including caching and common failure points.
Understand Discover, Offer, Request, Acknowledge—and what happens when a client renews, moves, or loses its lease.
Turn an IPv4 address and CIDR prefix into its network, mask, usable range, broadcast address, and subnet plan.
Open toolQuery public DNS records and inspect the answer shape, TTL, priority, and authority data without leaving KnowDDI.
Open toolExplore DORA, renewal at T1, rebinding at T2, and lease expiry under different server-response scenarios.
Open tool24 starting points · 755 terms
The integrated management and delivery of Domain Name System, Dynamic Host Configuration Protocol, and IP Address Management. A DDI platform connects naming, address assignment, inventory, policy, automation, and operational visibility.
Read full entryThe Domain Name System, a distributed hierarchical database and protocol used to map names to resource records. It supports far more than address lookup, including service discovery, email routing, delegation, policy, and security data.
Read full entryThe Dynamic Host Configuration Protocol automatically supplies hosts with IP addressing and other configuration. DHCPv4 and DHCPv6 are separate protocols with different message formats, transports, identifiers, and state models.
Read full entryIP Address Management, the discipline and tooling used to plan, allocate, assign, discover, reconcile, document, audit, and automate IP addresses and prefixes. Mature IPAM also links addresses to DNS, DHCP, devices, sites, owners, and workflows.
Read full entryDNS Security Extensions add origin authentication and integrity protection to DNS data through digital signatures and authenticated denial of existence. DNSSEC does not encrypt queries or responses.
Read full entryInternet Protocol version 4, using 32-bit addresses and a variable header. Private addressing, NAT, broadcast behavior, and address scarcity strongly influence IPv4 DDI operations.
Read full entryInternet Protocol version 6, using 128-bit addresses, Neighbor Discovery, extension headers, and no broadcast. IPv6 addressing commonly combines Router Advertisements, SLAAC, DHCPv6, and prefix delegation.
Read full entryAn Address record maps a domain name to a 32-bit IPv4 address. It is one of the most common DNS data types and is normally used for forward name resolution.
Read full entryAn IPv6 Address record maps a domain name to a 128-bit IPv6 address. The name is pronounced "quad A".
Read full entryA Canonical Name record makes its owner name an alias for a target name. With limited DNSSEC-related exceptions, other data should not coexist at the same owner name.
Read full entryA Pointer record maps a reverse-domain name to another domain name, most commonly mapping an IPv4 or IPv6 address to a host name. Multiple PTRs are technically possible but can confuse applications.
Read full entryA Mail Exchange record identifies mail servers for a domain and assigns each a preference value. Lower preference values are tried first, with equal values treated as alternatives.
Read full entryThe Start of Authority record identifies key zone parameters including MNAME, RNAME, serial, refresh, retry, expire, and minimum fields. Every authoritative zone has an SOA at its apex.
Read full entryThe number of seconds a DNS record may be cached before it must be treated as expired. TTL choices affect change speed, query load, resilience, and negative or stale-answer behavior.
Read full entryA query requesting that the server obtain a final answer or error on the client's behalf rather than returning only a referral. Recursion is requested with the RD bit and controlled by server policy.
Read full entryA DNS server that provides authoritative answers for one or more zones. It may obtain data from a primary source, a zone transfer, a database, a catalog, or a hosted control plane.
Read full entryA time-limited authorization for a client to use an address or prefix together with associated configuration. The client renews before expiration or stops using the resource when the lease is no longer valid.
Read full entryA router, switch, firewall, or server function that forwards DHCP messages between clients and servers on different links. It adds link-identifying information so the server can select the correct subnet or policy.
Read full entryA prefix used as an on-link network or administrative allocation unit. In IPv4 it has a network mask and usually network and broadcast addresses; IPv6 LANs commonly use /64.
Read full entryClassless Inter-Domain Routing, the use of variable-length prefixes rather than legacy address classes. CIDR notation combines an address with a prefix length, such as 10.20.0.0/16.
Read full entryDNS carried in HTTPS, typically over TCP port 443. DoH provides transport confidentiality and server authentication while sharing web infrastructure and policy considerations.
Read full entryDNS carried over a dedicated TLS connection, normally TCP port 853. It encrypts resolver traffic and authenticates the selected resolver when certificates are validated.
Read full entryA query that converts an IP address into its reverse-domain name and requests a PTR record. The result is descriptive and does not by itself prove ownership or trust.
Read full entryDynamic DNS, the controlled creation, modification, or deletion of DNS records without manually editing a zone file. DHCP servers and clients commonly use DNS UPDATE to register address and pointer records.
Read full entry