CPL - Chalmers Publication Library
| Utbildning | Forskning | Styrkeområden | Om Chalmers | In English In English Ej inloggad.

Understanding and Preparing for DNS Evolution

Sebastian Castro ; Min Zhang ; Wolfgang John (Institutionen för data- och informationsteknik, Nätverk och system (Chalmers) ) ; Duane Wessels ; K Claffy
Lecture Notes in Computer Science. 2nd International Workshop on Traffic Monitoring and Analysis, TMA 2010, Zurich, 7 April 2010 (0302-9743). Vol. 6003 (2010), p. 1-16.
[Konferensbidrag, refereegranskat]

The Domain Name System (DNS) is a crucial component of today’s Internet. The top layer of the DNS hierarchy (the root nameservers) is facing dramatic changes: cryptographically signing the root zone with DNSSEC, deploying Internationalized Top-Level Domain (TLD) Names (IDNs), and addition of other new global Top Level Domains (TLDs). ICANN currently plans to deploy all of these changes in the next year or two, and there is growing interest in measurement, testing, and provisioning for foreseen (or unforeseen) complications. We describe the Day-in-the-Life annual datasets available to characterize workload at the root servers, and we provide some analysis of the last several years of these datasets as a baseline for operational preparation, additional research, and informed policy. We confirm some trends from previous years, including the low fraction of clients (0.55% in 2009) still generating most misconfigured “pollution”, which constitutes the vast majority of observed queries to the root servers. We present new results on security-related attributes of the client population: an increase in the prevalence of DNS source port randomization, a short-term measure to improve DNS security; and a surprising decreasing trend in the fraction of DNSSEC-capable clients. Our insights on IPv6 data are limited to the nodes who collected IPv6 traffic, which does show growth. These statistics serve as a baseline for the impending transition to DNSSEC. We also report lessons learned from our global trace collection experiments, including improvements to future measurements that will help answer critical questions in the evolving DNS landscape.

Nyckelord: Internet, Measurement, DNS, DNSSEC, IPv6, Pollution



Denna post skapades 2010-02-18. Senast ändrad 2012-02-14.
CPL Pubid: 112911

 

Läs direkt!


Länk till annan sajt (kan kräva inloggning)


Institutioner (Chalmers)

Institutionen för data- och informationsteknik, Nätverk och system (Chalmers)

Ämnesområden

Information Technology

Chalmers infrastruktur