Skip to Content
[CAIDA - Center for Applied Internet Data Analysis logo]
Center for Applied Internet Data Analysis > publications : papers : 2010 : understanding_dns_evolution
Understanding and preparing for DNS evolution
S. Castro, M. Zhang, W. John, D. Wessels, and k. claffy, "Understanding and preparing for DNS evolution ", in Traffic Monitoring and Analysis Workshop (TMA), Apr 2010, pp. 1--6.
|   View full paper:    PDF    Data Supplement    Related Presentation    |  Citation:    BibTeX    Resource Catalog   |

Understanding and preparing for DNS evolution

Sebastian Castro1, 4
Min Zhang1
Wolfgang John1, 2
Duane Wessels1, 3
kc claffy1

CAIDA, San Diego Supercomputer Center, University of California San Diego


Chalmers University of Technology





The Domain Name System (DNS) is a crucial component of today.s Internet. The top layer of the DNS hierarchy (the root name- servers) is facing dramatic changes: cryptographically signing the root zone with DNSSEC, deploying Internationalized Top-Level Domain (TLD) Names (IDNs), and addition of other new global Top Level Domains (TLDs). ICANN has stated plans to deploy all of these changes in the next year or two, and there is growing interest in measurement, testing, and provisioning for foreseen (or unforeseen) complications. We describe the Day-in-the-Life annual datasets available to characterize workload at the root servers, and we provide some analysis of the last several years of these datasets as a baseline for operational preparation, additional research, and informed policy. We confirm some trends from previous years, including the low fraction of clients (0.55% in 2009) still generating most misconfigured "pollution", which constitutes the vast majority of observed queries to the root servers. We present new results on security-related attributes of the client population: an increase in the prevalence of DNS source port randomization, a short-term measure to improve DNS security; and a surprising decreasing trend in the fraction of DNSSEC-capable clients. Our insights on IPv6 data are limited to the nodes who collected IPv6 traffic, which does show growth. These statistics serve as a baseline for the impending transition to DNSSEC. We also report lessons learned from our global trace collection experiments, including improvements to future measurements that will help answer critical questions in the evolving DNS landscape.

Keywords: dns, ipv6, routing, topology
  Last Modified: Tue Nov-17-2020 04:47:08 UTC
  Page URL: