Library Table of Contents Index Previous Next Comments

Handling domain names that are not fully qualified

Whether you need to handle domain names that are not fully qualified  Top

If you expect that users will enter domain names that are not fully qualified, you should configure NetCache to handle such names. Users in enterprises usually know that they can enter partially qualified domain names in URLs. Therefore, system administrators of enterprises should consider configuring NetCache to handle domain names that are not fully qualified.

ISPs, as a rule, do not need to configure support for domain names that are not fully qualified because their users typically enter fully qualified domain names in URLs.

Options for handling domain names that are not fully qualified  Top

The following options on the DNS - General page in the Appliance Manager can be configured to handle domain names that are not fully qualified:

Extra DNS lookups can occur with DNS tree searching  Top

By default, when NetCache looks up a domain name in its DNS cache, NetCache first attempts to look up the domain name with the local domain name appended, even if the requested domain name is fully qualified. If the first lookup fails, the NetCache DNS resolver then performs a lookup without the local domain name appended. The result is that the resolver performs an extra lookup when the URL contains a fully qualified domain name.

Note
The concept of fully qualified differs between DNS and most application-level protocols. For DNS, a domain name is fully qualified only if a dot appears at the end of the domain name. For example, although www.books.com appears to be a fully qualified URL, it is not fully qualified according to the DNS specification because no dot appears at the end. For this reason, NetCache appends the local domain name to the domain name.

Deciding whether to enable the DNS Tree-Search Enable option  Top

If you expect that your users will always provide fully qualified domain names, Network Appliance recommends that you do not enable the DNS Tree-Search Enable option. The reason is that when the DNS Tree-Search Enable option is enabled, a DNS lookup occurs even if the domain name is fully qualified.

Avoiding an extra DNS lookup can be beneficial for the following reasons:

What occurs when the DNS Tree-Search Enable option is enabled  Top

The following table describes what occurs for domain names when the DNS Tree-Search Enable option is enabled. Assume for this example that the local domain is books.com and a valid host name is web.books.com.

If the domain name in the URL is...

Then...

Unqualified (that is, it does not contain dots). For example: web

If the unqualified domain name is web, for example, and the DNS Tree-Search Enable option is enabled, the first lookup is for web.books.com, which succeeds.

Partially qualified. For example: web.books

If the partially qualified domain name is web.engr, for example, the following occurs:

  1. books.com is appended to the domain name so that the lookup is on web.books.books.com. This lookup fails.
  2. NetCache then tries web.books.com. This lookup succeeds.

Fully qualified. For example: web.books.com

If a URL contains the fully qualified domain name web.books.com, for example, the following occurs when the DNS Tree-Search Enable option is enabled:

  1. books.com is appended to the domain name so that the first lookup is for web.books.com.books.com. This lookup fails.
  2. The second lookup is for web.books.com.com. This lookup fails.
  3. The third lookup is for web.books.com. This lookup succeeds.

What occurs when the DNS Tree-Search Enable option is disabled  Top

The following table describes what occurs for domain names when the DNS Tree-Search Enable option is disabled. Assume for this example that the local domain is books.com and a valid host name is web.books.com.

If the domain name in the URL is...

Then...
 

Unqualified (that is, it does not contain dots). For example: web

The local domain name is not appended to the domain name in the URL. This lookup fails.

Partially qualified. For example: web.engr

The local domain name is not appended to the domain name in the URL. The lookup of a partially qualified domain name fails right away.

For example, web.engr is looked up as web.engr, and the lookup fails.

Fully qualified. For example: web.books.com

The DNS lookup succeeds the first time.

About identifying DNS search paths  Top

By configuring the DNS Search Paths option, you increase the probability that NetCache can successfully resolve a host name if the domain name in the URL is not fully qualified. The reason is that NetCache can expand its search beyond the local domain. When the DNS Search Paths option is configured, NetCache tries to resolve the host name by searching in the following order:

  1. NetCache domain name
  2. Search paths in this option, from the top to the bottom of the list

Identify DNS search paths if you have enabled the DNS Tree-Search Enable option.

Note
Network Appliance recommends that you determine the most commonly looked-up host names and list those first. The reason is that NetCache does not continue searching after it makes a match (which optimizes performance).

Library Table of Contents Index Previous Next Comments