It's always DNS. Every SysAdmin has said it, usually at the worst possible moment. This episode is the explanation for why that joke is only half a joke.

Andy and Eric walk through how DNS actually works from first request to final answer: recursive resolvers, root servers, authoritative name servers, TTLs, and caching. From there they get into Windows Server and Active Directory DNS integration, covering SRV records, dynamic registration, and scavenging.

The back half covers DNS security: DNSSEC, DNS over HTTPS, Encrypted Client Hello, DNS-based content filtering, and how attackers use DNS for C2 traffic and exfiltration. Throughout, the guys pull from real war stories, including a ticketing system that silently failed every few weeks because one of four DNS servers had a stale record, and a BIND config that refused to load because of a trailing space.

---

## Show Notes and Resources

### News React

- Cloudflare DNS filtering tiers: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/

- AI token costs exceeding replacement labor costs: https://fortune.com/2026/04/28/nvidia-executive-cost-of-ai-is-greater-than-cost-of-employees/

- Claude deleting company data and backups: https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue

- Backyard RAM manufacturing: https://www.theregister.com/2026/04/23/youtuber_builds_working_dram/

### Nerd Hour

- Andy's PomoCLI app: https://github.com/asyrewicze/pomocli

### Main Segment Resources

- Cloudflare: What is DNS?: https://www.cloudflare.com/learning/dns/what-is-dns/

- MXToolbox: https://mxtoolbox.com

- DNS over TLS vs. DNS over HTTPS - Cloudflare Learning: https://www.cloudflare.com/learning/dns/dns-over-tls/

- Encrypted Client Hello - the last puzzle piece to privacy: https://blog.cloudflare.com/announcing-encrypted-client-hello/

### Community

- GitHub Discussions: Friends and family IT support stories: https://github.com/ProjectRunspace/sysadmin-weekly/discussions/15.

## Chapters

12:45 - Understanding DNS: The Final Boss

25:49 - The DNS Resolution Process

38:43 - Exploring DNS Services and Tools

39:45 - Managing DNS: Windows vs. BIND

43:36 - Active Directory and DNS Integration

48:38 - Dynamic Registration and Scavenging in DNS

52:42 - Understanding DNS Record Types

54:44 - Common DNS Tools and Their Uses

59:28 - DNS Security: Threats and Protections

01:06:27 - DNS Filtering and Content Control

01:12:36 - Should You Run Your Own DNS?