# Learn DNS > A free, independent guide to the Domain Name System: history, resolution, records, DNSSEC, encrypted transports, and day-to-day operations. The link on each lesson is the canonical HTML page. Cite that URL. A plain Markdown copy of a lesson is the same path plus `index.md`. ## Part 1: Origins & History of DNS - [Origins & History of DNS](https://learndns.org/learn/part-1-index/): How the internet learned to remember names, from ARPANET's HOSTS.TXT file to the global Domain Name System still in use. - [The Pre-DNS Era](https://learndns.org/learn/1-1-pre-dns-era/): Before DNS existed, ARPANET relied on a single HOSTS.TXT file maintained by SRI-NIC — learn how this scaling crisis led to the Domain Name System. - [ARPANET Naming Conventions](https://learndns.org/learn/1-1-arpanet-naming/): How ARPANET's early internet pioneers chose host names, the informal naming conventions that emerged, and why these ad-hoc systems couldn't scale. - [SRI-NIC: The First Name Authority](https://learndns.org/learn/1-1-sri-nic/): How the Stanford Research Institute's Network Information Center became the internet's first naming authority and kept HOSTS.TXT. - [Paul Mockapetris and the Problem He Solved](https://learndns.org/learn/1-2-mockapetris/): How Paul Mockapetris designed the Domain Name System in 1983, solving ARPANET's HOSTS.TXT scaling crisis with a distributed, hierarchical architecture. - [RFC 882 and RFC 883 (November 1983)](https://learndns.org/learn/1-2-rfc-882-883/): RFC 882 and RFC 883, published in November 1983, were the original DNS specifications introducing hierarchical naming and distributed resolution. - [The Design Principles: Distributed, Hierarchical, Cacheable](https://learndns.org/learn/1-2-design-principles/): How DNS's three core design principles — distributed architecture, hierarchical namespace, and aggressive caching — solved the HOSTS.TXT scaling crisis. - [BIND — The First Implementation](https://learndns.org/learn/1-2-bind/): How BIND (Berkeley Internet Name Domain) became the dominant DNS server software, powering the majority of the internet's name resolution infrastructure. - [RFC 1034 and 1035 — The 'Real' DNS Spec](https://learndns.org/learn/1-2-rfc-1034-1035/): RFC 1034 and 1035, published in 1987, define the DNS architecture, naming rules, and query protocols that still govern the Domain Name System today. - [The Original Root Servers](https://learndns.org/learn/1-3-root-servers/): How the DNS root got from one server at USC-ISI to 13 anycast identities, who operates them, and why the letter count stuck. - [First TLDs: .com, .net, .org, .edu, .gov, .mil](https://learndns.org/learn/1-3-first-tlds/): How the first top-level domains .com, .net, .org, .edu, .gov, and .mil were created in 1985, their intended purposes, and early adoption patterns. - [Network Solutions and the NSI Monopoly](https://learndns.org/learn/1-3-nsi-monopoly/): How one company won the contract to register domain names and became the gatekeeper of the early commercial internet's namespace. - [The Transition from Free to Paid Registration](https://learndns.org/learn/1-3-paid-registration/): How NSF approval of registration fees in 1995 turned domain names from a free research service into assets people paid to hold. - [Early Domain Gold Rush Stories](https://learndns.org/learn/1-3-domain-gold-rush/): Notable early registrations, the first squatting fights, and the people who claimed valuable names before the market understood them. - [The NSI Monopoly Era (1993-1999)](https://learndns.org/learn/1-4-nsi-monopoly-era/): What Network Solutions controlled from 1993 to 1999, how that monopoly shaped registration, and why the industry pushed back. - [Jon Postel and the Root Server Incident (1998)](https://learndns.org/learn/1-4-postel-incident/): In 1998, Jon Postel redirected root DNS traffic to test IANA's authority — the controversial incident that shaped DNS governance and its political fallout. - [US Government Control and the Green/White Papers](https://learndns.org/learn/1-4-government-control/): The Green Paper, the White Paper, and the fight over whether DNS governance would stay with the U.S. government or move. - [ICANN Creation (1998) — Why and How](https://learndns.org/learn/1-4-icann-creation/): How ICANN was created in 1998 to govern DNS and domain name policy, its multi-stakeholder structure, and the political negotiations behind it. - [The Shared Registration System (SRS)](https://learndns.org/learn/1-4-shared-registration-system/): How the Shared Registration System broke Network Solutions' monopoly, enabled competitive domain registration, and shaped the modern registrar ecosystem. - [Antitrust Actions and the Opening of Competition](https://learndns.org/learn/1-4-antitrust-competition/): Legal and regulatory pressure on NSI, the arrival of competing registrars, and the opening of the multi-registrar market. - [Timeline of Major DNS Milestones](https://learndns.org/learn/1-5-timeline/): A timeline from ARPANET in 1969 to today, covering the standards, institutions, and disputes that shaped the Domain Name System. ## Part 2: How DNS Works - [How DNS Works](https://learndns.org/learn/part-2-index/): How DNS answers a lookup: names, the resolution path, record types, caching, the root, zone transfers, and the wire format. - [DNS Fundamentals](https://learndns.org/learn/2-1-dns-fundamentals/): Names, labels, the DNS tree, zones versus domains, delegation, and fully qualified names — the parts every later lesson builds on. - [The Resolution Process](https://learndns.org/learn/2-2-resolution-process/): Follow a DNS query step by step from browser cache through recursive resolvers to authoritative nameservers — understand how domain names become IP addresses. - [DNS Record Types](https://learndns.org/learn/2-3-record-types/): A comprehensive guide to DNS record types — A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, PTR, DNSSEC records, and the new SVCB/HTTPS records. - [DNS Caching and TTL](https://learndns.org/learn/2-4-caching-ttl/): How DNS caches answers at every layer, how TTL and negative caching work, and how to change records without serving stale data. - [Authoritative vs Recursive Resolvers](https://learndns.org/learn/2-5-authoritative-recursive/): Understanding the two types of DNS servers — authoritative nameservers and recursive resolvers — and how they work together. - [The Root Zone and Root Servers](https://learndns.org/learn/2-6-root-servers/): The 13 root-server identities, who operates them, how anycast spreads them out, and how the root zone is signed and published. - [Zone Files and Zone Transfers](https://learndns.org/learn/2-7-zone-files-transfers/): Zone file format and syntax, SOA record deep dive, AXFR and IXFR transfers, TSIG authentication, and modern zone management. - [DNS Protocol Deep Dive](https://learndns.org/learn/2-8-protocol-deep-dive/): DNS message format, wire encoding, UDP vs TCP, EDNS(0), port 53, and message compression — understanding DNS at the packet level. ## Part 3: The Domain Ecosystem - [The Domain Ecosystem](https://learndns.org/learn/part-3-index/): The business and operational side of domain names — how domains are named, registered, transferred, and managed across the registry-registrar system. - [Domain Name Anatomy](https://learndns.org/learn/3-1-domain-name-anatomy/): SLDs, TLDs, subdomains, FQDNs, label rules, and internationalized domain names — every piece of a domain name explained. - [TLD Types](https://learndns.org/learn/3-2-tld-types/): Generic, country code, sponsored, and new gTLDs — the taxonomy of top-level domains and the expansion that changed the namespace. - [The Domain Lifecycle](https://learndns.org/learn/3-3-domain-lifecycle/): From registration to expiry, redemption, and pending delete — every phase a domain passes through, with timing and implications. - [Registries, Registrars, and Resellers](https://learndns.org/learn/3-4-registries-registrars-resellers/): The three-tier system behind domain registration — how registries, ICANN-accredited registrars, and resellers work together. - [WHOIS and RDAP](https://learndns.org/learn/3-5-whois-rdap/): Domain ownership lookup from the legacy WHOIS protocol to its modern RDAP replacement — history, data fields, GDPR impact, and privacy services. - [Domain Transfers](https://learndns.org/learn/3-6-domain-transfers/): Auth codes, transfer locks, the five-step transfer process, disputes, and bulk transfers — everything about moving domains between registrars. - [DNS Hosting vs Domain Registration](https://learndns.org/learn/3-7-dns-hosting-vs-registration/): Why domain registration and DNS hosting are separate concerns, how to use third-party DNS with any registrar, and when each option makes sense. - [EPP Deep Dive](https://learndns.org/learn/3-8-epp-deep-dive/): The Extensible Provisioning Protocol — how registrars communicate with registries to create, manage, transfer, and delete domain names. ## Part 4: DNS Security - [DNS Security](https://learndns.org/learn/part-4-index/): From foundational vulnerabilities to encrypted transport and protective DNS — how the internet's naming system learned to defend itself. - [DNS Vulnerabilities](https://learndns.org/learn/4-1-dns-vulnerabilities/): The fundamental security flaws in DNS — from cache poisoning and the Kaminsky attack to amplification DDoS, tunneling, and domain name abuse. - [DNSSEC](https://learndns.org/learn/4-2-dnssec/): The cryptographic chain of trust that authenticates DNS — key types, record types, the validation process, and why adoption remains stubbornly low. - [DNS-over-HTTPS (DoH)](https://learndns.org/learn/4-3-dns-over-https/): How DNS queries got wrapped in HTTPS — the protocol, browser adoption, provider landscape, and the fierce centralization debate. - [DNS-over-TLS (DoT)](https://learndns.org/learn/4-4-dns-over-tls/): The first standardized encrypted DNS transport — how it works, where it's deployed, and how it compares to DNS-over-HTTPS. - [DNS-over-QUIC (DoQ)](https://learndns.org/learn/4-5-dns-over-quic/): The newest encrypted DNS transport — how QUIC improves on TLS-based protocols, what RFC 9250 defines, and where adoption stands today. - [DNS Hijacking and BGP Attacks](https://learndns.org/learn/4-6-dns-hijacking-bgp/): When attackers bypass DNS itself: registrar compromise, BGP hijacking, route manipulation, and other attacks on internet routing. - [Protective DNS and Threat Intelligence](https://learndns.org/learn/4-7-protective-dns/): Using DNS as a defensive weapon — threat blocking, response policy zones, CAA records, and DNS monitoring for security operations. ## Part 5: Modern DNS Infrastructure - [Modern DNS Infrastructure](https://learndns.org/learn/part-5-index/): How DNS powers today's internet — from CDNs and load balancing to containers, edge computing, and zero-configuration networking. - [CDN and DNS](https://learndns.org/learn/5-1-cdn-and-dns/): How content delivery networks use anycast, GeoDNS, and EDNS Client Subnet to steer each user toward a nearby edge server. - [DNS Load Balancing and Failover](https://learndns.org/learn/5-2-dns-load-balancing/): Round-robin DNS, weighted answers, health-check failover, and the real limits of balancing traffic with DNS records alone. - [Split-Horizon DNS](https://learndns.org/learn/5-3-split-horizon-dns/): Internal vs external DNS views — how organizations serve different answers to different clients based on network location. - [Dynamic DNS (DDNS)](https://learndns.org/learn/5-4-dynamic-dns/): Automatic DNS updates for changing IP addresses — from RFC 2136 protocol mechanics to consumer DDNS services and enterprise deployments. - [Multicast DNS and DNS Service Discovery](https://learndns.org/learn/5-5-mdns-dns-sd/): mDNS, DNS-SD, and zero-configuration networking — how your devices find printers, AirPlay speakers, and each other without any server. - [DNS in Containers and Kubernetes](https://learndns.org/learn/5-6-dns-containers-kubernetes/): CoreDNS, Kubernetes service discovery, pod DNS policies, Docker's embedded DNS, and service mesh DNS with Consul and Istio. - [Serverless DNS and Edge Computing](https://learndns.org/learn/5-7-serverless-dns-edge/): Programmable DNS at the edge, policy written as code, and how serverless workers change where each DNS decision is made. ## Part 6: The Domain Industry - [The Domain Industry](https://learndns.org/learn/part-6-index/): The business, governance, and legal side of domains — from ICANN policy and gTLD programs to domain investing, valuation, privacy, and legal disputes. - [ICANN Governance](https://learndns.org/learn/6-1-icann-governance/): What ICANN is and isn't, how it's structured, the policy development process, the IANA transition, and the controversies that have defined internet governance. - [The New gTLD Program](https://learndns.org/learn/6-2-new-gtld-program/): How ICANN's 2012 expansion created hundreds of new top-level domains — the process, controversies, brand TLDs, and what comes next. - [Domain Investing and the Aftermarket](https://learndns.org/learn/6-3-domain-investing-aftermarket/): How domain investing works: hand registrations, drops, auctions, parking, famous sales, and the aftermarket that trades names. - [Domain Valuation Methodologies](https://learndns.org/learn/6-4-domain-valuation/): How domain names are valued — comparable sales, heuristic scoring, AI approaches, automated tools, and why pricing domains remains more art than science. - [Domain Privacy and Proxy Services](https://learndns.org/learn/6-5-domain-privacy/): Why domain privacy matters, the difference between privacy and proxy registration, GDPR's seismic impact on WHOIS, and ICANN's ongoing policy battles. - [Legal Aspects](https://learndns.org/learn/6-6-legal-aspects/): Domain dispute resolution — UDRP, URS, the ACPA, trademark law, reverse domain name hijacking, and the cases that shaped the rules. - [Country Code Politics](https://learndns.org/learn/6-7-country-code-politics/): The geopolitical drama of ccTLDs — delegation battles, the .io controversy, Soviet .su, country TLDs gone global, and what happens when nations vanish. ## Part 7: Practical DNS for Developers - [Practical DNS for Developers](https://learndns.org/learn/part-7-index/): Hands-on DNS for people who ship software: publish a zone, fix mail, debug lookups, and automate the records you rely on. - [Setting Up DNS for a Website](https://learndns.org/learn/7-1-setting-up-dns-website/): The complete practical walkthrough — from buying a domain to serving your first page, with every DNS decision explained. - [Email DNS](https://learndns.org/learn/7-2-email-dns/): MX, SPF, DKIM, and DMARC: the DNS records that decide whether a message reaches the inbox or is rejected outright as spam. - [DNS Debugging Tools](https://learndns.org/learn/7-3-dns-debugging-tools/): Master dig, nslookup, drill, dog, and online diagnostic tools — with practical debugging scenarios and output walkthroughs. - [Common DNS Misconfigurations](https://learndns.org/learn/7-4-common-misconfigurations/): The mistakes everyone makes — CNAME at apex, missing trailing dots, lame delegation, and more — with diagnosis and fixes. - [DNS Automation and Infrastructure as Code](https://learndns.org/learn/7-5-dns-automation-iac/): Manage DNS with Terraform, OctoDNS, and DNSControl so zone changes are reviewed in Git and applied the same way each time. - [API-Driven DNS Management](https://learndns.org/learn/7-6-api-driven-dns/): Programmatic DNS control with provider APIs such as Cloudflare and Route 53, and how that differs from registration lookups. - [DNS and CI/CD Pipelines](https://learndns.org/learn/7-7-dns-cicd-pipelines/): Automated SSL provisioning, blue-green deployments, canary releases, and zero-downtime migrations — DNS as a deployment primitive. ## Part 8: The Future of DNS - [The Future of DNS](https://learndns.org/learn/part-8-index/): Where DNS and domain naming are headed — from blockchain-based alternatives to quantum-resistant cryptography and the rise of AI agents. - [Decentralized Naming](https://learndns.org/learn/8-1-decentralized-naming/): Blockchain-based alternatives to DNS — ENS, Handshake, Unstoppable Domains, Namecoin, and whether they'll ever replace the traditional domain name system. - [AI Agents and DNS](https://learndns.org/learn/8-2-ai-agents-dns/): How autonomous agents discover and authenticate each other, and why DNS is becoming the discovery and identity layer they use. - [Encrypted Client Hello (ECH)](https://learndns.org/learn/8-3-encrypted-client-hello/): The last privacy gap in HTTPS — how ECH encrypts the SNI field, its deployment status, and implications for DNS, CDNs, and censorship resistance. - [SVCB and HTTPS Record Types](https://learndns.org/learn/8-4-svcb-https-records/): The newest DNS record types defined in RFC 9460 — service binding, HTTPS records, eliminating redirects, and distributing ECH keys. - [The Next Billion Domains](https://learndns.org/learn/8-5-next-billion-domains/): Growth projections, the fastest-growing TLDs, domains in developing markets, AI-generated names, and the rise of programmatic domain registration. - [Quantum Computing and DNS](https://learndns.org/learn/8-6-quantum-computing-dns/): How quantum computers threaten DNSSEC's cryptographic foundations, post-quantum cryptography standards, and the timeline for preparing DNS infrastructure. ## Optional - [Full lesson text](https://learndns.org/llms-full.txt): Plain Markdown of every part and lesson, in reading order. - [Atom feed](https://learndns.org/feed.xml): Titles, summaries, and canonical URLs for every lesson. - [All lessons](https://learndns.org/): The guide index, with the eight parts in reading order.