Is your caching resolver polluting the internet?

ABSTRACT

Previous research has shown that most of the DNS queries reaching the root of the hierarchy are bogus [1]. This behavior derives from two constraints on the system: (1) queries that cannot be satisfied locally percolate up to the root of the DNS; (2) some caching nameservers are behind packet filters or firewalls that allow outgoing queries but block incoming replies. These resolvers assume the network failure is temporary and retransmit their queries, often aggressively.DNS pollution may not be causing any perceivable performance problems. The root servers seem well equipped to handle the load. Since DNS messages are small, the pollution does not contribute significantly to the total traffic generated by most organizations. Nonetheless, this paper provides a few reasons why network operators should take the time to investigate and fix these problems.

REFERENCES

• 1: Duane Wessels and Marina Fomenkov, "Wow, That's a Lot of Packets," in Proc. 2003 Passive and Active Measurements Workshop, April 2003.
• 2: Peter B. Danzig , Katia Obraczka , Anant Kumar, An analysis of wide-area name server traffic: a study of the Internet Domain Name System, Conference proceedings on Communications architectures & protocols, p.281-292, August 17-20, 1992, Baltimore, Maryland, United States
• 3: Evi Nemeth, k claffy, and Nevil Brownlee, "DNS Measurements at a Root Server," in Proc. IEEE Globecom, 2001.
• 4: Duane Wessels, Marina Fomenkov, and Nevil Brownlee, "Measurements and Laboratory Simulations of the Upper DNS Hierarchy," in Proc. 2004 Passive and Active Measurements Workshop, April 2004.
• 5: Joe Abley, "Hierarchical Anycast for Global Service Distribution," 2003.
• 6: Daniel J. Bernstein, "djbdns," June 2003, http://cr.yp.to/djbdns.html.
• 7: Y. Rekhter, B. Moskowitz, D. Karrenber, G. J. de Groot, and E. Lear, "RFC 1918: Address Allocation for Private Internets," February 1996.
• 8: "The AS 112 Pro ject," http://www.as112.net.
• 9: Mark Andrews, "Negative Caching of DNS Queries (DNS NCACHE)," March 1998, Request For Comments 2038.
• 10: Internet Software Consortium, "Berkeley Internet Name Domain (BIND) website," http://www.isc.org/sw/bind/.
• 11: Paul Albitz, DNS and BIND, O'Reilly & Associates, Inc., Sebastopol, CA, 2001
• 12: Duane Wessels, "dnstop," http://dnstop.measurement- factory.com.
• 13: John Strang, Programming with Curses, Thomson Learning, 1988
• 14: P. Vixie, S. Thompson, Y. Rekhter, and J. Bound, "Dynamic Updates in the Domain Name System (DNS UPDATE)," April 1997, Request For Comments 2136.
• 15: P. Mockapetris, "Domain Names--Concepts and Facilities," November 1987, Internet Standard 0013 (RFCs 1034, 1035).
• 16: J. Jung, E. Sit, H. Balakrishnan, and R. Morris, "DNS Performance and the Effectiveness of Caching," 2001, http://www.sds.lcs.mit.edu/papers/dns-imw2001.html

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.3 Network Operations

General Terms:
Measurement

Keywords:
DNS caching root server