A load balancer or traffic-management platform that can proxy application traffic and may also perform DNS-based global server load balancing. ADC-generated DNS queries and health checks often appear in DDI telemetry.
Network filtering that blocks packets with invalid or unauthorized source addresses from leaving a network. It is a major defense against source-address spoofing used in DNS reflection attacks.
A 48-bit Extended Unique Identifier, commonly the format used for Ethernet MAC addresses. DHCP reservations and DUID types often derive identity from a link-layer address.
A 64-bit Extended Unique Identifier format. Modified EUI-64 was historically used to form IPv6 interface identifiers from MAC addresses, though modern systems often use privacy or stable-random identifiers instead.
Splitting an IP packet into smaller fragments because it exceeds a path or link MTU. Fragmented DNS UDP responses are more likely to be lost, filtered, or abused, so modern DNS operations aim to avoid them.
A network-connected system that originates or terminates traffic. In DNS usage, "host" is informal and should not be assumed to mean that every domain name has an address record.
Filtering traffic entering a network based on whether the source address is plausible and authorized for that path. It helps stop spoofing and protects services from malformed or unexpected traffic.
An identifier associated with a network interface. In IPv6, the more precise term Interface Identifier refers to the address bits following the subnet prefix; management systems may also use interface ID for an inventory key.
A link-layer hardware address, commonly 48 bits on Ethernet. DHCPv4 often uses it as part of client identity, but it can be changed, duplicated, or hidden behind relays.
Network Access Control, a system that evaluates device or user identity and posture before or during network access. NAC platforms often consume DHCP bindings, DNS telemetry, and IPAM context.
Industrial, building, medical, or process-control systems that interact with physical operations. OT DDI designs often emphasize deterministic change control, long device lifecycles, isolated networks, and legacy protocols.
A transport-layer number used by TCP, UDP, SCTP, or DCCP to identify an application endpoint. DNS commonly uses port 53, DHCPv4 uses 67/68, and DHCPv6 uses 546/547.
Reverse Address Resolution Protocol, an obsolete method for a host to learn its IPv4 address from its link-layer address. BOOTP and then DHCP replaced it.
An address representing a service rather than a single physical interface, such as a VIP, anycast address, cluster address, or load-balancer frontend.
Verification that a packet's source address is legitimate for the interface, route, binding, or customer from which it arrived. Techniques include ACLs, uRPF, DHCP snooping bindings, SAVI, and provider filtering.
Virtual IP address, a service address presented by a cluster, load balancer, HA pair, or other abstraction rather than tied permanently to one interface.
Virtual LAN, a Layer 2 broadcast-domain segmentation identified by a VLAN ID on Ethernet networks. A VLAN often maps to one or more IP subnets, but the relationship is not inherently one-to-one.
A defined set or range of VLAN IDs available for allocation to domains or encapsulations. In Cisco ACI, VLAN pools are associated with physical or virtual domains and AAEP policy.
Virtual Network Identifier, a 24-bit VXLAN segment identifier. A VNI represents a logical overlay segment and can map to a bridge domain or tenant network.
A transport port in the IANA system range 0 through 1023, generally associated with widely recognized services. DNS port 53 and DHCP server port 67 are examples.
A set of techniques that allow basic local networking without central configuration, commonly including IPv4 link-local addressing, IPv6 SLAAC, multicast DNS, and DNS Service Discovery.