Hacker News new | past | comments | ask | show | jobs | submit login

WHOIS is still useful for telling you registrar, registration date, and nameservers. That's mostly what I ever used it for.



You need to dig the root nameservers these days, if you really want accurate glue record lookups. Don't trust whois.


Two different systems operating at different layers, though. I WHOIS the domain when I want to know which nameservers the registry thinks the domain should have. You can then dig in DNS to see what those nameservers are responding, but that's a separate level.

(Note: I work in this field.)


It's unclear if you get what I mean, because you can never use whois, to determine what a glue record is, though. Whois is not updated reliably these days.

For example, you cannot 'whois example.org', see DNS servers listed, and think "OK, those are the glue servers!". Nope. You need to dig at the root .org DNS servers, and find out what they have configured as glue records, and then query that.

  $ dig +short org. NS
  c0.org.afilias-nst.info.
  d0.org.afilias-nst.org.
  b0.org.afilias-nst.org.
  a0.org.afilias-nst.info.
  b2.org.afilias-nst.org.
  a2.org.afilias-nst.info.

  $ dig +norec @a0.org.afilias-nst.info. example.org. NS
  <snip>
  
  ;; AUTHORITY SECTION:
  example.org.            3600    IN      NS      a.iana-      servers.net.
  example.org.            3600    IN      NS      b.iana-servers.net.
Now you know what the glue records are for a domain.

Trusting whois, which is sporadically updated these days, and often inaccurate, won't necessarily help anything.

I get why you do trust it, it used to be reliable, it used to be accurate, it just isn't in many cases any more.

As for what the registrar thinks, I wouldn't trust whois for that, either. Not these days. I'd want to query the registrar directly, to find out.

(Maybe you meant all of this, but at least it's clear for others now, either way)


You're only talking about DNS. I'm talking about the layer above that, at the domain name registry, which is the authoritative source that feeds into DNS. The domain registry is typically implemented as a separate database distinct from DNS. The nameservers at the registry level are updated by registrars through a protocol called EPP (see RFCs 5730-5734). This is what then feeds into DNS. When you're debugging registry-level issues, e.g. maybe the registry isn't syncing to its DNS system correctly, you need to figure out what the registry thinks the name servers for a domain should be, and you do that through WHOIS (or soon, RDAP). Unlike DNS, these systems talk directly to the registry and let you know what the registry's view of the world is.

A domain that doesn't have any name servers configured on it cannot serve any content, and you can spin your wheels for a very long time if you're only playing around in DNS land. You'll see that there are no DNS entries being served up for the domain name at all but you won't know why, or how to actually fix it. You need to query the registry to find the root of the problem and realize that you need to set the name servers at the registry level (which as an end user you would have to do through your registrar, but which I as a registry operator can bypass).

Also, and I can't speak for other registry operators, but when you query us directly, you get a live view of the data, that is almost always real-time, but in the event of high load for WHOIS queries on that specific domain, might be served out of cache that persists for up to one minute. Point is it's more likely to be accurate at the present time than anything in DNS, which has more caching layers that last longer.


You're only talking about DNS.

Of course I am, that's the only way to know what the glue records actually are. Naturally there is the registrar side, but none of that means anything, when you're working with DNS, and need to know what is configured at the root server level.

Which is all that matters when you're doing DNS lookups.

My point here is, that using whois won't tell you that reliably. Only a direct root server lookup will.

What we're saying is not really that far apart, as we're both agreeing that whois is not the same as root server glue records.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: