Aux root: Difference between revisions

From Cibernética Americana
Jump to navigationJump to search
No edit summary
No edit summary
 
(430 intermediate revisions by 2 users not shown)
Line 1: Line 1:
__NOTOC__
<html><script language="javascript" type="text/javascript">
<html><script language="javascript" type="text/javascript">
<!--
<!--
Line 7: Line 8:
}
}
</script></html>
</script></html>
<div style="background-color: grey; color: white;">
 
<div style="position: relative;left: 40px;text-align: left;width: 400px;">
<div style="background-color: grey; color: white;"><div style="position: relative;top:10px;left:700px;width:800px;>
<blockquote><center>[[DNS|<h1 style="color:lime;">What is DNS?</h1>]]<h5>above is important</h5></center></blockquote>
Domain space (DS) is just the regular public internet with an added top level domain <b>.dom</b> and its support which operators use for greater control of their name spaces, as a peerage of autonomous operators routing names upon their discretion. The default in core domain space is all ICANN/IANA TLDs plus one but other operators may choose something else. Since the public roots are generally not affected, we use the term "Aux(lliary) root" instead of Alt-root.<br><br>
User name services are provided thru the <span class=plainlinks>[https://devops1.sameboat.network/AboutDNS <span style="color: pink;">.dom content mgt system</span>] (DCMS).<br>
KASTALIEN is also the marque for the single authentication realm (SAR).
</span>.
</div>
<div style="position: relative;top: -180px;left: 40px;text-align: left;width: 600px;">
<span style="position: relative;left: 5px;> [[File:KASTALIEN.svg|left|thumb|125px|<html><a  onclick="return checkRouting();" href=http://sameboat.dom>Go There</a></html>]]</span>
<h1 style="text-align: center;font-weight: 900;">.dom</h1>
<h1 style="text-align: center;font-weight: 900;">.dom</h1>
<h5 style="text-align: center;">Domain Engineering TLD</h5>
<h5 style="text-align: center;">Domain Engineering TLD</h5>
<h3 style="text-align: center;position: relative;top: 5px;left: 10px;">[[:en:Rectification of names|<span  
<h3 style="text-align: center;position: relative;top: 5px;left: 10px;">[[:de:Das_Glasperlenspiel#Das_eigentliche_„Glasperlenspiel“_und_seine_Welt|<span  
     style="background-color: navy; color: silver;"> &nbsp; KASTALIEN &nbsp; </span>]] &nbsp;  
     style="background-color: navy; color: silver;"> &nbsp; KASTALIEN &nbsp; </span>]] &nbsp;  
     <span style="font-size: 12px;"> alternative domain name system</span>&sup1;</h3><br>
     <span class=plainlinks style="font-size: 12px;background-color: gainsboro; "> [https://fred.ai-integration.biz &nbsp;peer-peer name system ]</span>&sup1;</h3><br><center><span style="background-color: darkslategray;color: white;"> &nbsp; Aux-rooted: private name spaces supplement the public one. <ref> see [[:en:Alt root|<span style="color: pink;">Alt root</span>]]</ref></span></center>
<html><div style="position:relative;left:-80px;top:20px;float:right;" >
<audio style="height:14px;" title=" 'What's New' - Ahmad Jamal 1958. " controls source src="https://meansofproduction.biz/pub/WhatsNew.mp3" type="audio/mpeg"> This page has an audio but your browser does not support the audio element.</audio>
<div style="font-size:8px;color:cyan;"><center>This page has a music track, mouseover for title.</center></div></div></html><br><br>
</div>
</div>
<blockquote>
<blockquote>
<html>
<blockquote style="position:relative;left:675px;top:-80px;">
<img style="position: relative; top: 80px;right: 100px;" align=right width=160 src=https://meansofproduction.biz/images/DNSnBINDimV6.png><br>
These have been private or unused since their public epoch.
<a title="Forked at github, under consideration" href=https://namecoin.org><img style="position: relative; top: 215px; left: 55px;" align=right width=50px align=right src=https://meansofproduction.biz/images/namecoin.png></a><a title="Under consideration" href=https://dnscrypt.info><img style="position: relative; top: 125px; left: 15px;" align=right width=50px align=right src=https://meansofproduction.biz/images/dnscrypt.cd47d19.png>
<table style="position:relative:top:-30px;background-color: navy; color: antiquwhite;" width=700>
</html>
<tr><th colspan=2><span style="position: relative;left: 30px;></span></th><th width=200>Epoch</th><th width=100>Vendor</th></tr>
Alt-rooted means that an autonomous name system distinct from just the priced IANA system alone is in use.<span style="background-color: darkslategray;"><ref> see [[:en:Alt root|<span style="color: pink;">Alt root</span>]]</ref></span> Beginning in 2019, a migration of virtually all content in my dev space, with the exception of a few necessary public pages, is in process: all content is going to be alt-routed, either same named, ICANN TLD -> .dom, or the ICANN/IANA TLD just dropped. As used here refers to an autonomous peerage that routes TLDs upon discretion of the operators. A reasonable effort for a free service level is committed that just works by:
<tr><th>&lt;NAME&gt;</th><th>&lt;ZONE&gt;</th><th colspan=2></th></tr>
<blockquote>
<tr><td colspan=4><hr></td></tr>
adding the following name servers, which are non-recursive, in desired order to your active resolver(s):
<tr><td align=center>'kybernet'</td><td  align=center>'com'</td><td  align=center>before 2000</td><td  align=center>Verisign</td></tr>
<tr><td align=center>'commoditysoftware'</td><td  align=center>'org'</td><td  align=center>before 2014</td><td  align=center>Verisign</td></tr>
<tr><td align=center>'thoughtcrime'</td><td  align=center>'biz'</td><td  align=center>before 2023</td><td  align=center>Neustar</td></tr>
</table>
<hr width=700>
</blockquote>
<blockquote style="position:relative;top:-260px;">
Add 1 or more of these name servers ( or their addresses ) to use our aux root:


*ns0.&lt;IANA_TD&gt;
*ns.&lt;LINKING_ZONE&gt;
* . . .
* . . .
*ns&lt;n&gt;.&lt;IANA_TD&gt;
*ns&lt;n-1&gt;.&lt;LINKING_ZONE&gt;
<br>where <p>&lt;LINKING_ZONE&gt; ::= &lt;DS_ZONE&gt;.&lt;IANA_ZONE&gt;<br><br> &nbsp; A '''linking zone''' is a bridge from the public name system, '''n''' in &lt;n-1&gt; is currently 2  and </p>
</blockquote>


where &laquo;IANA_TD&raquo; is the priced system transfer domain and, &lt;n&gt; is currently 1, or their ip addresses if your resolver requires it and where
<table style="position:relative;top:-230px;" width=100%><tr><td>
</blockquote><blockquote style="color: yellow;font-weight: 600;">use the delegated
<blockquote style="color: yellow;font-weight: 60;">the zone rotations are
&lt;IANA_TD&gt;  <ol><li>Neustar <b>meansofproduction.biz</b> thru May 2019*;</li><li>Donuts <b>sameboat.live</b> thru October 2021;</li>
<table style="background-color: black; color: white;" width=700>
<li>After that a different name every 5 years.</li>
<tr><th colspan=2><span style="position: relative;left: 30px;> &lt;LINKING_ZONE&gt;</span></th><th width=200>Epoch</th><th width=100>Vendor</th></tr>
</ol>
<tr><th>&lt;DS_ZONE&gt;</th><th>&lt;IANA_ZONE&gt;</th><th colspan=2></th></tr>
&#42; <span style="font-size: 10px;color: lime;font-weight: 900;background-color: darkslategray; ">And until March 2020 or longer but not for the inter-TLD purpose.</span>
<tr><td colspan=4><hr></td></tr>
<tr><td align=center>'sameboat'</td><td  align=center>'network'</td><td  align=center>2022-05 &mdash; 2027 </td><td align=center>Donuts</td></tr>
<tr><td align=center>'ai-integration'</td><td  align=center>'biz'</td><td  align=center>2005-03 &mdash; 2025-02</td><td  align=center>Neustar</td></tr>
<tr><td colspan=4><hr></td></tr>
<tr><td align=center colspan=4> These may or may not have the name service.</td></tr>
<tr><td colspan=4><hr></td></tr>
<tr><td align=center>'meansofproduction'</td><td  align=center>'biz'</td><td  align=center>2006-11 &mdash; 2024-10</td><td  align=center>Neustar</td></tr>
<tr><td align=center>'meansofproduction'</td><td  align=center>TBA</td><td  align=center>2024-07-14</td><td  align=center>TBA</td></tr>
<tr><td align=center>aii.biz goes mostly private</td><td  align=center>N/A</td><td  align=center>2025-01-01</td><td  align=center>DS</td></tr>
<tr><td align=center>'sameboat'</td><td  align=center>'live'</td><td  align=center>2017-11 &mdash; 2022-11</td><td  align=center>Donuts</td></tr>
<tr><td align=center>'sameboat'</td><td  align=center>'live'</td><td  align=center>2022-08 &mdash;</td><td  align=center>DS</td></tr>
</table>
<ul><li>Suffixes dropped in the wild are generally still routed in domain space.<sup>*</sup></li></ul>
&#42; <span style="font-size: 10px;color: lime;font-weight: 900;background-color: darkslategray; ">An example is thoughtcrime.biz, tcb.biz will route publicly thru March 2023 and then only via DS.</span>
</blockquote>
</td><td width=50% align=left>
<blockquote style="position:relative;top:-20px;left:-30px;">
The rotating linking zone  prevents any lock-in in the interface to the priced name system.
<blockquote>
A compromise between stability and flexibility/independence from the priced system is struck by rotation of a IANA TLD and a period of dual routing of the old and new during the rotation. 
Canonical mappings from public (IANA) name space into a private domain space are  to simply drop the IANA TLD, replace it by .dom or one designated for use in private spaces (which can be the same to replace the whole TLD).
</blockquote>
Names only routed in a domain space lack an IANA suffix (or equvalently use .dom) and are not affected by linking zone rotation.
<br><br>
Operators manage impact if any in their domain spaces across linking zone rotations, including determining their own epoch duration policies, above are for core domain space.
</blockquote>
</blockquote>
Paid<span style="color: gold;">&sup2;</span><ref>Price for the full SaaS without any physical resources other than control and delivery bandwidth kept under  <html><a style="color: pink" title="Current fx" href=https://meansofproduction.biz/imu.php onclick="return popitup('https://meansofproduction.biz/imuq.php?qg=10')">10 &#24037;</a></html> per TLD quarter assuming only stability of fiat basket basis of the &#24037;.</ref>users have access from recursion and additional basic name services for users below developer class up to continuous live maintenance by intelligent agency for operators.
</td></tr></table>
<blockquote style="position:relative;top:-200px;">
Entitled users have access from recursion and additional basic name services for users below developer class up to continuous live maintenance by intelligent agency for operators.


As used here, the background operation of the public priced name systems are assumed as needed, excluded where desirable, e.g. for privacy or security. Our system is constructed using the standard unix networking software and forms a superspace of the public name system with these properties:
As used here, the background operation of the public priced name systems are assumed as needed, excluded where desirable, e.g. for privacy or security. Our system is constructed using the standard unix networking software and forms a superspace of the public name system with these properties:
<ul>
<ul>
<li>Individual operators of the system determine which TLDs they recognize. The system administered here only allocates the TLDs FCFS to operators, it doesn't have the intent of acting  as a sole authoritative source even for the .dom name, which operators may override to establish cooperating alt roots. The TLD operators in essence agree to a common real TLD space which they may present internally differently, but which starts with the common public systems plus a single reserved name: ".dom" for their private/peer namespace.</li>
<li>Operators of domain spaces determine which TLDs they recognize. Core space allocates its TLDs FCFS to AKPERSONs, other operators may override in their domain spaces.  
Operators use a single reserved name: ".dom" for their private/peer namespace.</li>
<li>IPV6 and TLS are defaults, 4 and plain text special cases.</li>
<li>IPV6 and TLS are defaults, 4 and plain text special cases.</li>
<li>A rich default common systems application environment which operators may optionally use is provided in which all users are identified and at least in principle, traceable.</li>
<li>Simple name seeking registrars are prohibited. Registrars must offer the name service free bundled with value added services.</li>
</ul>
</ul>
An equivalent function is assumed for peer operators, as provided by my <span class=plainlinks>[https://dnseppus.meansofproduction.biz/doc/about <span style="color: cyan;"> DNS/EPP tooling</span>]</span> merged with the <span class=plainlinks>[https://fred.nic.cz <span style="color: cyan;">FRED</span>]</span> Czech NIC software as maintained by me for my Ubuntu LTS targets. End users of the "sameboat/C-六" core PHP-Python CMS have significant consumer level DNS functionality upon sufficient entitlement.
Each domain space is controlled by an instance of the <span class=plainlinks>[https://fred.ai-integration.biz <span style="color: cyan;">FRED</span>]</span> NIC software adapted
for my Domain Control Program (<span class=plainlinks>[https://devops1.sameboat.network/About%20DCP <span style="color: cyan;">DCP</span>]</span>).
</blockquote>
</blockquote>
<hr>
<hr>
<references/>
<references/>
<blockquote>
<blockquote>
&sup3; <font size=1>"clean" means a newly formatted host OS instance; Our modifications of various elements such as letsencrypt included in the SaaS, woven through various process such as SSO, registration, etc.</font>
<html><a title="The Alt-Root I maintain" href=https://sameboat.live><img align=right src=https://meansofproduction.biz/images/kastalien.png></a></html>
<html><a title="The Alt-Root I maintain" href=https://sameboat.live><img align=right src=https://meansofproduction.biz/images/kastalien.png></a></html>
</blockquote>
</blockquote>
<br>
<br>
</div>
</div>
<div style="width: 85%;><span  style="font-size: 10px; font-weight: 600;">"A superior man, in regard to what he does not know, shows a cautious reserve. If names be not correct, language is not in accordance with the truth of things. If language be not in accordance with the truth of things, affairs cannot be carried on to success. When affairs cannot be carried on to success, proprieties and music do not flourish. When proprieties and music do not flourish, punishments will not be properly awarded. When punishments are not properly awarded, the people do not know how to move hand or foot. Therefore a superior man considers it necessary that the names he uses may be spoken appropriately, and also that what he speaks may be carried out appropriately. What the superior man requires is just that in his words there may be nothing incorrect." </span><div align=right><html><a style="color: lime;" href=https://ctext.org/analects/zi-lu#n1408>Analects, Book XIII, No. 3</a></html></div>
<html><img style="position:relative;left:235px;" width=150 align=right src=https://juan.ai-integration.biz/xasppage/xasppage.pl?XASPPAGE_STYLE=0&P=AUXROOT></html>

Latest revision as of 02:22, 12 February 2024

What is DNS?

above is important

Domain space (DS) is just the regular public internet with an added top level domain .dom and its support which operators use for greater control of their name spaces, as a peerage of autonomous operators routing names upon their discretion. The default in core domain space is all ICANN/IANA TLDs plus one but other operators may choose something else. Since the public roots are generally not affected, we use the term "Aux(lliary) root" instead of Alt-root.

User name services are provided thru the .dom content mgt system (DCMS).
KASTALIEN is also the marque for the single authentication realm (SAR).
.

.dom

Domain Engineering TLD

  KASTALIEN      peer-peer name system ¹


  Aux-rooted: private name spaces supplement the public one. [1]

This page has a music track, mouseover for title.


These have been private or unused since their public epoch.

EpochVendor
<NAME><ZONE>

'kybernet''com'before 2000Verisign
'commoditysoftware''org'before 2014Verisign
'thoughtcrime''biz'before 2023Neustar

Add 1 or more of these name servers ( or their addresses ) to use our aux root:

  • ns.<LINKING_ZONE>
  • . . .
  • ns<n-1>.<LINKING_ZONE>


where

<LINKING_ZONE> ::= <DS_ZONE>.<IANA_ZONE>

  A linking zone is a bridge from the public name system, n in <n-1> is currently 2 and

the zone rotations are

<LINKING_ZONE>EpochVendor
<DS_ZONE><IANA_ZONE>

'sameboat''network'2022-05 — 2027 Donuts
'ai-integration''biz'2005-03 — 2025-02Neustar

These may or may not have the name service.

'meansofproduction''biz'2006-11 — 2024-10Neustar
'meansofproduction'TBA2024-07-14TBA
aii.biz goes mostly privateN/A2025-01-01DS
'sameboat''live'2017-11 — 2022-11Donuts
'sameboat''live'2022-08 —DS
  • Suffixes dropped in the wild are generally still routed in domain space.*

* An example is thoughtcrime.biz, tcb.biz will route publicly thru March 2023 and then only via DS.

The rotating linking zone prevents any lock-in in the interface to the priced name system.

A compromise between stability and flexibility/independence from the priced system is struck by rotation of a IANA TLD and a period of dual routing of the old and new during the rotation. Canonical mappings from public (IANA) name space into a private domain space are to simply drop the IANA TLD, replace it by .dom or one designated for use in private spaces (which can be the same to replace the whole TLD).

Names only routed in a domain space lack an IANA suffix (or equvalently use .dom) and are not affected by linking zone rotation.

Operators manage impact if any in their domain spaces across linking zone rotations, including determining their own epoch duration policies, above are for core domain space.

Entitled users have access from recursion and additional basic name services for users below developer class up to continuous live maintenance by intelligent agency for operators.

As used here, the background operation of the public priced name systems are assumed as needed, excluded where desirable, e.g. for privacy or security. Our system is constructed using the standard unix networking software and forms a superspace of the public name system with these properties:

  • Operators of domain spaces determine which TLDs they recognize. Core space allocates its TLDs FCFS to AKPERSONs, other operators may override in their domain spaces. Operators use a single reserved name: ".dom" for their private/peer namespace.
  • IPV6 and TLS are defaults, 4 and plain text special cases.
  • Simple name seeking registrars are prohibited. Registrars must offer the name service free bundled with value added services.

Each domain space is controlled by an instance of the FRED NIC software adapted for my Domain Control Program (DCP).



"A superior man, in regard to what he does not know, shows a cautious reserve. If names be not correct, language is not in accordance with the truth of things. If language be not in accordance with the truth of things, affairs cannot be carried on to success. When affairs cannot be carried on to success, proprieties and music do not flourish. When proprieties and music do not flourish, punishments will not be properly awarded. When punishments are not properly awarded, the people do not know how to move hand or foot. Therefore a superior man considers it necessary that the names he uses may be spoken appropriately, and also that what he speaks may be carried out appropriately. What the superior man requires is just that in his words there may be nothing incorrect."