Abstract
DNS resiliency concerns are growing. It is important to investigate the factors that can cause DNS resolution failure, including DDoS attack, BGP operation, DNS server operation, domain name registrar operation, etc. We discuss the metrics to measure resolution resiliency of second-level domain name, and do the resiliency measurement on some famous internet service. We describe a stub resolver cache proposal to mitigate the domain resolution failure, defense against DDoS attack.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Mockapetris, P.V.: RFC1034: domain names-concepts and facilities (1987)
root-servers.org, https://root-servers.org/
Delegation Record for .COM, https://www.iana.org/domains/root/db/com.html
More details about the October 4 outage, https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/
Understanding the Dyn DDoS Attack, https://www.ncta.com/chart/understanding-the-dyn-ddos-attack
Hackers release source code for a powerful DDoS app called Mirai, https://techcrunch.com/2016/10/10/hackers-release-source-code-for-a-powerful-ddos-app-called-mirai/
China hit by massive DDoS attack causing the Internet inaccessibility for hours, https://thehackernews.com/2013/08/china-hit-by-massive-ddos-attack_27.html
Pan, L., Yuchi, X., Hu, A.: Evaluating quickly method for DDoS attack on authority DNS service. Appl. Res. Comput. (11), 3456–3459 (2015)
www.qq.com not found, http://news.sohu.com/20110530/n308903429.shtml
Baidu sues registrar over DNS records hack, https://www.theregister.com/2010/01/20/baidu_dns_hack_lawsuit
DNS Attack Downs Internet in Parts of China, https://www.pcworld.com/article/529187/article-6778.html
Casalicchio, E., Caselli, M., Coletta, A., Di Blasi, S., Fovino, I.N.: Measuring name system health. In: International Conference on Critical Infrastructure Protection, pp. 155–169. Springer, Berlin, Heidelberg, March 2012
Kröhnke, L., Jansen, J., Vranken, H.: Resilience of the domain name system: a case study of the. nl-domain. Comput. Netw. 139, 136–150 (2018)
Jiang, J., Zhang, J., Duan, H., Li, K., Liu, W.: Analysis and measurement of zone dependency in the domain name system. In: 2018 IEEE International Conference on Communications (ICC), pp. 1–7. IEEE, May 2018
Deployment Diversity for DNS Resiliency, https://www.akamai.com/blog/security/deployment-diversity-for-dns-resiliency
Bates, S., Bowers, J., Greenstein, S., Weinstock, J., Xu, Y., Zittrain, J.: Evidence of decreasing internet entropy: the lack of redundancy in DNS resolution by major websites and services (No. w24317). National Bureau of Economic Research (2018)
Sommese, R., et al.: Characterization of anycast adoption in the DNS authoritative infrastructure. In: Network Traffic Measurement and Analysis Conference (TMA 2021), September 2021
Kumari, W., Sood, P., Lawrence, D.: RFC 8767-Serving Stale Data to Improve DNS Resiliency (2020)
Kumari, W., Hoffman, P.: Running a Root Server Local to a Resolver. IETF RFC 8806 (2020)
Moura, G.C., Heidemann, J., Schmidt, R.D.O., Hardaker, W.: Cache me if you can: effects of DNS Time-to-Live. In: Proceedings of the Internet Measurement Conference, pp. 101–115, October 2019
Arends, R., Austein, R., Larson, M., Massey, D., Rose, S.W.: Protocol modifications for the DNS security extensions RFC 4035 (2005)
Hounsel, A., Schmitt, P., Borgolte, K., Feamster, N.: Encryption without centralization: distributing DNS queries across recursive resolvers. In: Proceedings of the Applied Networking Research Workshop, pp. 62–68, July 2021
Use DNS policy for geo-location traffic management with primary servers, https://docs.microsoft.com/en-us/windows-server/networking/dns/deploy/primary-geo-location
Domain Resolution Resiliency, https://github.com/abbypan/domain_resolution_resiliency
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Pan, L., Qiu, R., Wang, A., Yang, M., Chen, Y., Hu, A. (2022). Measuring the Resolution Resiliency of Second-Level Domain Name. In: Arai, K. (eds) Intelligent Computing. SAI 2022. Lecture Notes in Networks and Systems, vol 508. Springer, Cham. https://doi.org/10.1007/978-3-031-10467-1_45
Download citation
DOI: https://doi.org/10.1007/978-3-031-10467-1_45
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-10466-4
Online ISBN: 978-3-031-10467-1
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)