Summary
Highlights
DNS servers convert human-readable domain names (like google.com) into IP addresses. It’s a distributed system with thousands of servers globally, managing domain names and providing reverse lookups. Load is distributed based on domain names, and it's typically managed by service providers or internal IT.
DHCP automatically assigns IP addresses and other network configurations to devices when they connect to a network. This service is crucial for both home and enterprise networks, with enterprises often employing multiple DHCP servers for redundancy to ensure continuous connectivity.
File-sharing services provide a central location for storing and accessing documents, spreadsheets, and other files. Common protocols include SMB for Windows and AFP for Mac OS, with the operating system often hiding the underlying protocol from the user.
Print services manage job submission, queuing, and successful printing to networked printers. This can be handled by a dedicated server or built into the printer itself, supporting protocols like SMB, IPP, and LPD.
Email servers facilitate sending and receiving email messages. These can be cloud-based or hosted locally. Email services require high uptime and availability, necessitating robust design and implementation by system administrators.
Syslog is used to consolidate log files from various network devices (switches, routers, servers, firewalls) to a central SIEM (Security Information and Event Manager) server. This allows for correlation of events across diverse systems and requires significant storage due to the volume of data retained.
Web servers respond to browser requests using HTTP or HTTPS, serving HTML pages to clients. They act as the backbone for website access, interpreting HTML to display graphical content in web browsers.
Authentication servers (AAA servers for Authentication, Authorization, and Accounting) verify user credentials and control access to network resources. They typically use a centralized database for user administration and are often made redundant to ensure continuous access.
Database servers store information in tables, often forming relational databases that link different data types. Structured Query Language (SQL) is used to store and retrieve data, employed by popular database systems like Microsoft SQL Server and MySQL.
NTP servers ensure accurate time synchronization across all network devices. Accurate time is critical for log file correlation and encryption technologies. NTP clients on individual computers periodically check with NTP servers to maintain precise date and time.
A spam gateway filters unsolicited emails (spam), categorizing them or preventing them from reaching the inbox. This service, often cloud-based or on a separate server, evaluates incoming emails for legitimacy, though it's not always 100% accurate.
UTM devices, also known as next-generation firewalls or web security gateways, combine multiple security functions into one appliance. Features include URL filtering, malware detection, spam filtering, firewall capabilities, IPS, bandwidth shaping, and VPN functionality.
Load balancers distribute incoming requests across multiple servers (e.g., a web server farm) to ensure high availability and efficient resource utilization. They can detect server failures and automatically remove unhealthy servers from rotation until they are restored.
Proxy servers act as an intermediary for client requests, making requests on their behalf, evaluating responses for security, and then forwarding them. They enhance security, control access, provide caching, and allow for content scanning, often operating invisibly to the end-user.
SCADA/ICS are specialized systems for controlling and monitoring industrial equipment in sectors like power, oil and gas, and manufacturing. These systems require highly secure, often segmented networks, due to their critical nature.
Legacy systems are older pieces of equipment that remain operational in a data center, sometimes for decades. Despite their age, they can be critical to an organization's operations, making their management and maintenance as important as newer technologies.
Embedded systems are purpose-built devices with self-contained operating systems, such as fire alarms or time clocks. Users typically interact with these devices without direct access to their underlying OS, and they often require minimal ongoing maintenance from the user's perspective.
IoT devices are a broad category including smart appliances, voice assistants, and environmental controls. A key challenge is their network security, as manufacturers may excel at product design but not network integration. It's recommended to place IoT devices on segmented networks to mitigate security risks.