Question Difference between the IP addresses and DNS servers?

[rdn24]

I have a question about IP addresses and DNS servers in the screenshot below. This is screenshot from robtex.com using corel.com as an example.

1. What's the difference between the IP numbers below and Name servers? is it saying there are 4 IP's to corel.com and there are 4 DNS servers (which are separate from corel.com)?
2. Would I be correct in saying corel.com and the DNS server below are two different nodes?
3. How does a company get assigned more than 1 DNS server? Do they call their ISP and request more?
   
   

 

[mv2devnull]

You can use dig/host/nslookup to query with those names and addresses. Does that give you any answers?

 

[ch33zw1z]

Looks like aws (Amazon) is likely their host and provides dns

 

[mxnerd]

DNS server is like 411 or 555-1212 directory service at different locations. It keeps domain name/host name and IP address pair registry entries.

The IP addresses already changed. The IP database for corel.com at robtex.com probably is stale. Different IP addresses usually just mean different machines.

You were correct that 4 IP addresses here mean 4 DNS servers.

At the beginning, when you register a domain, it's required to have at least 2 DNS servers. But nowadays it seems all ISP provides 4.

P:\APPS\CMD Promopt_CD\Cmder
λ nslookup
Default Server:  UnKnown
Address:  192.168.0.21

> server 8.8.8.8
Default Server:  dns.google
Address:  8.8.8.8

> ns-90.awsdns-11.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    ns-90.awsdns-11.com
Addresses:  2600:9000:5300:5a00::1
          205.251.192.90

> NS-847.AWSDNS-41.NET
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-847.AWSDNS-41.NET
Addresses:  2600:9000:5303:4f00::1
          205.251.195.79

> NS-1216.AWSDNS-24.ORG
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-1216.AWSDNS-24.ORG
Addresses:  2600:9000:5304:c000::1
          205.251.196.192

>  NS-1983.AWSDNS-55.CO.UK
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-1983.AWSDNS-55.CO.UK
Addresses:  2600:9000:5307:bf00::1
          205.251.199.191

 

[ch33zw1z]

So those aws DNS just bounce to Google? Huh lol

 

[mxnerd]

So those aws DNS just bounce to Google? Huh lol

DNS records will propagate to other DNS servers all over the world. If a DNS server can't not resolve a query, it will forward to another DNS server.
Well, it's a very complex process and I can't say I understand it fully.

ICANN Lookup

The ICANN registration data lookup tool gives you the ability to look up the current registration data for domain names and Internet number resources.

whois.icann.org

 

[ch33zw1z]

DNS records will propagate to other DNS servers all over the world.

Cool, I find this stuff quite interesting 😉

 

[rdn24]

DNS server is like 411 or 555-1212 directory service at different locations. It keeps domain name/host name and IP address pair registry entries.

The IP addresses already changed. The IP database for corel.com at robtex.com probably is stale. Different IP addresses usually just mean different machines.

You were correct that 4 IP addresses here mean 4 DNS servers.

At the beginning, when you register a domain, it's required to have at least 2 DNS servers. But nowadays it seems all ISP provides 4.

P:\APPS\CMD Promopt_CD\Cmder
λ nslookup
Default Server:  UnKnown
Address:  192.168.0.21

> server 8.8.8.8
Default Server:  dns.google
Address:  8.8.8.8

> ns-90.awsdns-11.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    ns-90.awsdns-11.com
Addresses:  2600:9000:5300:5a00::1
          205.251.192.90

> NS-847.AWSDNS-41.NET
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-847.AWSDNS-41.NET
Addresses:  2600:9000:5303:4f00::1
          205.251.195.79

> NS-1216.AWSDNS-24.ORG
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-1216.AWSDNS-24.ORG
Addresses:  2600:9000:5304:c000::1
          205.251.196.192

>  NS-1983.AWSDNS-55.CO.UK
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    NS-1983.AWSDNS-55.CO.UK
Addresses:  2600:9000:5307:bf00::1
          205.251.199.191

to confirm the corel IP addresses and DNS servers are different nodes? I assume yes.

if the ISP assigns you DNS servers, is it safe to say if the ISP goes down so does your DNS servers which mean you site is no longer available?

thank you

 

[mxnerd]

Sorry, those 52.xx.xx.xx IP are host IP, not DNS server's IP addresses.

C:\Windows\system32>nslookup

Default Server:  UnKnown
Address:  192.168.0.21

> server 205.251.192.90
Default Server:  ns-90.awsdns-11.com
Address:  205.251.192.90

> corel.com
Server:  ns-90.awsdns-11.com
Address:  205.251.192.90

Name:    corel.com
Addresses:  52.70.23.216
          52.44.24.20

Propagation check:

DNS Checker - DNS Check Propagation Tool

Check DNS Propagation worldwide. DNS Checker provides name server propagation check instantly. Changed nameservers so do a DNS lookup and check if DNS and nameservers have propagated.

dnschecker.org

DNS Checker - DNS Check Propagation Tool

Check DNS Propagation worldwide. DNS Checker provides name server propagation check instantly. Changed nameservers so do a DNS lookup and check if DNS and nameservers have propagated.

dnschecker.org

 

[mxnerd]

to confirm the corel IP addresses and DNS servers are different nodes? I assume yes.

Yep
enter corel.com at the following website
https://www.dnsqueries.com/en/dns_lookup.php, choose ALL for type for additional info.

corel.com name server IP addresses have been found by using nslookup tool and shown earlier
NS-90.AWSDNS-11.com 205.251.192.90
NS-847.AWSDNS-41.NET 205.251.195.79
NS-1216.AWSDNS-24.ORG 205.251.196.192
NS-1983.AWSDNS-55.CO.UK 205.251.199.191

if the ISP assigns you DNS servers, is it safe to say if the ISP goes down so does your DNS servers which mean you site is no longer available?

Not necessarily. Domain registration situation could be different for everyone.

Your ISP could be your domain registrar, domain hosting provider and hosting your domain DNS servers, but they could all from different ISP providers/vendors, they don't have to be the same. You can even host your own DNS server and websites, but DNS servers need public static IP addresses, it's a requirement, and at least 2.

 

[mv2devnull]

C:\> nslookup -type=NS corel.com
Server:  ***
Address:  ****

Non-authoritative answer:
corel.com       nameserver = ns-1216.awsdns-24.org
corel.com       nameserver = ns-90.awsdns-11.com
corel.com       nameserver = ns-847.awsdns-41.net
corel.com       nameserver = ns-1983.awsdns-55.co.uk

As above, we are told that these four nameservers are somehow associated with "corel.com"

Lets ask from one of them (ns-1983.awsdns-55.co.uk) the address of "corel.com":

C:\> nslookup corel.com ns-1983.awsdns-55.co.uk
Server:  UnKnown
Address:  2600:9000:5307:bf00::1

Name:    corel.com
Addresses:  52.44.24.20
          52.70.23.216

Lets ask from Google (8.8.8.8) the same question:

C:\> nslookup corel.com 8.8.8.8
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    corel.com
Addresses:  52.44.24.20
          52.70.23.216

Notice the difference? Google gives Non-authoritative answer:

Google says that "others told" that the addresses are ...
ns-1983.awsdns-55.co.uk says that "it knows for certain" that addresses are ...

Those four DNS servers are the ones that all other DNS servers turn to, when they can't remember what "corel.com" is. The authority on that matter.

 

[mv2devnull]

More fun:

$ host ns-1216.awsdns-24.org
ns-1216.awsdns-24.org has address 205.251.196.192
ns-1216.awsdns-24.org has IPv6 address 2600:9000:5304:c000::1
$ host ns-90.awsdns-11.com
ns-90.awsdns-11.com has address 205.251.192.90
ns-90.awsdns-11.com has IPv6 address 2600:9000:5300:5a00::1
$ host ns-847.awsdns-41.net
ns-847.awsdns-41.net has address 205.251.195.79
ns-847.awsdns-41.net has IPv6 address 2600:9000:5303:4f00::1
$ host ns-1983.awsdns-55.co.uk
ns-1983.awsdns-55.co.uk has address 205.251.199.191
ns-1983.awsdns-55.co.uk has IPv6 address 2600:9000:5307:bf00::1

All four DNS addresses belong to same subnet, CIDR 205.251.192.0/18, that is registered to Amazon.com Inc. No surprises there.

$ host 52.44.24.20
20.24.44.52.in-addr.arpa domain name pointer ec2-52-44-24-20.compute-1.amazonaws.com.
$ host 52.70.23.216
216.23.70.52.in-addr.arpa domain name pointer ec2-52-70-23-216.compute-1.amazonaws.com.

"Real" names of those two IP addresses are both *.amazonaws.com. Again, no surprise; Amazon hosts Corel's servers.

The two addresses are probably not in the same subnet (guess: 52.0.0.0/10 and 52.64.0.0/12), nor in same datacenter.

One IP address can have multiple names. One name can have multiple IP addresses (for HA/load balancing).

 

[rdn24]

C:\> nslookup -type=NS corel.com
Server:  ***
Address:  ****

Non-authoritative answer:
corel.com       nameserver = ns-1216.awsdns-24.org
corel.com       nameserver = ns-90.awsdns-11.com
corel.com       nameserver = ns-847.awsdns-41.net
corel.com       nameserver = ns-1983.awsdns-55.co.uk

As above, we are told that these four nameservers are somehow associated with "corel.com"

Lets ask from one of them (ns-1983.awsdns-55.co.uk) the address of "corel.com":

C:\> nslookup corel.com ns-1983.awsdns-55.co.uk
Server:  UnKnown
Address:  2600:9000:5307:bf00::1

Name:    corel.com
Addresses:  52.44.24.20
          52.70.23.216

Lets ask from Google (8.8.8.8) the same question:

C:\> nslookup corel.com 8.8.8.8
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    corel.com
Addresses:  52.44.24.20
          52.70.23.216

Notice the difference? Google gives Non-authoritative answer:

Google says that "others told" that the addresses are ...
ns-1983.awsdns-55.co.uk says that "it knows for certain" that addresses are ...

Those four DNS servers are the ones that all other DNS servers turn to, when they can't remember what "corel.com" is. The authority on that matter.

Im still trying to wrap my brain around multiple DNS servers (back to basic's I guess). For example, since corel is located on AWS. Did amazon say (not literally), "hey, since you're our customer, were giving you 4 DNS servers".

1. would these DNS servers be the "resolvers? (ISP DNS)
2. why 4 DNS servers, is this amazon's way of just trying to add protection in case one of the DNS servers go down?

 

[JackMDS]

Unless you have a specific problem with the DNS it really used by your system does not really matter.

DNS server is Not like server storage space given to you (like One Drive, or AWS). It just a service to resolve the Traffic on the Internet and almost all of the brand name DNS are fast and do the same job.

 

[mxnerd]

Multi DNS servers are for load balancing and redundancy, there is no limit how many DNS servers a provider can provide.

SRV record - Wikipedia

en.wikipedia.org

Ex: dynu.com registered 7 DNS servers.

Whois dynu.com

Whois Lookup for dynu.com

www.whois.com

==

Reviewing DNS Concepts

Learn more about: Reviewing DNS Concepts

docs.microsoft.com

The Hitchhiker's Guide to the Windows Naming Resolution (DNS name resolution is just part of it)

https://www.sap.com/docs/download/2015/08/ee7fbc89-5b7c-0010-82c7-eda71af511fa.pdf

DNS server existed way before Windows came out.

==

https://www.youtube.com/results?search_query=dns+resolver

 

[fkoehler]

Cool, I find this stuff quite interesting 😉

Check out DNS Tiering, also Root Server:

What are root name servers? | Netnod

The DNS is the system which converts Internet domain names, such as www.netnod.se, into numeric addresses such as 192.71.80.67 or 2a01:3f0:1:3::67. DNS includes a hierarchy of “authoritative name servers”, each level of which contains different pieces of information. To translate www.netnod.se...

www.netnod.se

The DNS servers you mentioned are most likely AWS Route 53 Resolvers.
AWS most likely has 4 for redundancy purposes, and those are supporting a lot more than just Corel.
All 4 of those appears to hit Amazon-02 in Chicago, at least initially. I would have thought they'd have been located a bit more redundantly.

OK, thats a cool website, have to remember it.

"The IP numbers are 34.227.243.142, 52.21.58.253, 52.44.24.20 and 52.70.23.216. The PTR of the IP numbers is ec2-34-227-243-142.compute-1.amazonaws.com. The IP numbers are in Ashburn, United States."

 

[ch33zw1z]

IMO, great thread, should be stickied .

good links with lots of info. It's probably been 20 years since my education on DNS. Most underappreciated service online

 

[mxnerd]

Anyone who wants to run his own local DNS server,

Technitium DNS Server https://technitium.com/dns/

is a very good start if you have Windows machines.

 

[jhona48]

Domain Name : Domain name is the name used to refer the website as the name which is between WWW and .com or .in is the domain name and you can have more than one domain name pointing to the same IP Address.

Domain names look like this: “google.com”

IP address : Internet protocol is a unique number given to the machine which access the internet. An IP address is an address assigned to any computer (including servers) to identify it on a given network.

IP addresses look like this: 192.168.12.134.

 

[ch33zw1z]

Domain Name : Domain name is the name used to refer the website as the name which is between WWW and .com or .in is the domain name and you can have more than one domain name pointing to the same IP Address.

Domain names look like this: “google.com”

IP address : Internet protocol is a unique number given to the machine which access the internet. An IP address is an address assigned to any computer (including servers) to identify it on a given network.

IP addresses look like this: 192.168.12.134.

And just for clarity, 192.168.12.134 is not route-able outside your LAN

Reserved IP addresses - Wikipedia

en.wikipedia.org

 

[sdifox]

quoted spam post removed.

Ease of use mostly. We remember a text string better than four numbers.