Understanding and Preparing for DNS Evolution
Paper i proceeding, 2010

The Domain Name System (DNS) is a crucial component of today’s Internet. The top layer of the DNS hierarchy (the root nameservers) is facing dramatic changes: cryptographically signing the root zone with DNSSEC, deploying Internationalized Top-Level Domain (TLD) Names (IDNs), and addition of other new global Top Level Domains (TLDs). ICANN currently plans to deploy all of these changes in the next year or two, and there is growing interest in measurement, testing, and provisioning for foreseen (or unforeseen) complications. We describe the Day-in-the-Life annual datasets available to characterize workload at the root servers, and we provide some analysis of the last several years of these datasets as a baseline for operational preparation, additional research, and informed policy. We confirm some trends from previous years, including the low fraction of clients (0.55% in 2009) still generating most misconfigured “pollution”, which constitutes the vast majority of observed queries to the root servers. We present new results on security-related attributes of the client population: an increase in the prevalence of DNS source port randomization, a short-term measure to improve DNS security; and a surprising decreasing trend in the fraction of DNSSEC-capable clients. Our insights on IPv6 data are limited to the nodes who collected IPv6 traffic, which does show growth. These statistics serve as a baseline for the impending transition to DNSSEC. We also report lessons learned from our global trace collection experiments, including improvements to future measurements that will help answer critical questions in the evolving DNS landscape.

Measurement

Pollution

IPv6

DNSSEC

DNS

Internet

Författare

Sebastian Castro

University of California

Min Zhang

University of California

Wolfgang John

Chalmers, Data- och informationsteknik, Nätverk och system

Duane Wessels

University of California

K Claffy

University of California

Lecture Notes in Computer Science

0302-9743 (ISSN)

Vol. 6003 1-16

Ämneskategorier

Data- och informationsvetenskap

DOI

10.1007/978-3-642-12365-8_1

ISBN

978-3-642-12364-1