311 definitions associated with DNS.
311 matching terms
Page 2 of 13A configuration that intentionally returns no useful result or directs selected names to a non-routable or controlled destination. The term can refer to policy blocking, sinkholing, or routing a DNS service address to discard traffic.
Read definitionA list of domains, addresses, clients, or indicators for which an action such as deny, redirect, log, or quarantine is applied. Modern documentation often uses blocklist instead of blacklist.
Read definitionA Certification Authority Authorization record states which certificate authorities are permitted to issue certificates for a domain and can define incident-reporting contacts. Certificate authorities are expected to check it before issuance.
Read definitionTemporary storage of DNS responses and related metadata by a resolver or intermediary. Cached data is reused until its TTL expires or the cache is cleared, replaced, or invalidated.
Read definitionA query answered from cached data without contacting an upstream authoritative server. A high cache-hit rate can reduce latency and upstream load, though the right rate depends on workload and TTLs.
Read definitionA query for which the resolver does not have usable cached data and must perform resolution or forwarding. Misses increase upstream traffic and usually add latency.
Read definitionThe insertion of false DNS data into a resolver cache so future clients receive an attacker-chosen answer. Defenses include strong transaction matching, source-port randomization, DNSSEC validation, cookies, and hardened bailiwick processing.
Read definitionA resolver that stores responses and reuses them for later queries. It may perform full iterative resolution or forward queries to another resolver.
Read definitionThe selected true or target name for an alias. A CNAME record points an alias owner name to a canonical target name, though the target can itself lead through another alias.
Read definitionA special DNS zone that distributes a catalog of member zones and associated properties to participating authoritative servers. It can automate secondary-zone provisioning across a fleet.
Read definitionA zone whose apex is below another zone in the namespace and is reached through a delegation from its parent. The child controls authoritative data at and below its apex except for delegated descendants.
Read definitionA DNS protocol field that identifies a namespace class. IN, for Internet, is overwhelmingly the common class; others such as CH exist for specialized or historical uses.
Read definitionA DHCP option by which a client communicates its desired fully qualified domain name and dynamic-update preferences. The server can use it to coordinate forward and reverse DNS registration.
Read definitionFor a queried name that does not exist, the closest encloser is the longest existing ancestor name in the zone. It is central to wildcard processing and DNSSEC proofs of nonexistence.
Read definitionDNS services delivered through a cloud control plane, including authoritative hosting, recursive resolution, private zones, traffic management, and security policy. The data plane may be provider-managed and globally distributed.
Read definitionA sequence in which a queried alias points to another name that may itself be an alias before reaching terminal data. Long chains add latency and increase the chance of loops, broken targets, or policy differences.
Read definitionA provider feature that follows a configured alias target at the authoritative platform and returns address records to the client. It is often used at the zone apex where an ordinary CNAME would conflict with required SOA and NS data.
Read definitionA Canonical Name record makes its owner name an alias for a target name. With limited DNSSEC-related exceptions, other data should not coexist at the same owner name.
Read definitionA forwarding rule that sends queries for selected domains to specific upstream resolvers instead of using the normal recursive path. It is commonly used between organizations, Active Directory forests, clouds, and isolated environments.
Read definitionA lightweight DNS transaction token carried in an EDNS option to help a server verify that a client can receive traffic at its claimed address. DNS Cookies can reduce spoofed-query abuse and improve transaction matching.
Read definitionA modular DNS server commonly used for service discovery in Kubernetes and other cloud-native environments. Its behavior is defined by a chain of plugins.
Read definitionA Child-to-Parent Synchronization record allows a child zone to signal selected delegation-data changes, such as NS and related address records, to its parent under an agreed automation policy.
Read definitionA centrally operated user-facing recursive DNS service, often used as an organizational resolver platform. The acronym is less universal than common terms such as recursive resolver.
Read definitionA DNS record that points to a resource that no longer exists or is no longer controlled by the intended owner. If another party can claim the target service, the condition can enable subdomain takeover.
Read definition