Distributed DNS troubleshooting

Pappas, Vasileios; Fältström, Patrik; Massey, Daniel; Zhang, Lixia

doi:10.1145/1016687.1016694

Cited by 18 publications

(14 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Pappas et al [32] developed a tool to detect certain errors and inconsistencies by considering measurements from many vantage points. Many other tools are available online, for example at dns.net [33].…”

Section: Related Workmentioning

confidence: 99%

Touring DNS Open Houses for Trends and Configurations

Kalafut

Shue

Gupta

2011

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

Abstract-DNS is a critical component of the Internet. It maps domain names to IP addresses and serves as a distributed database for various other applications, including mail, Web, and spam filtering. This paper examines DNS zones in the Internet for diversity, adoption rates of new technologies, and prevalence of configuration issues. To gather data, we sweep 60% of the Internet's domains in June -August 2007 for zone transfers. 6.6% of them allow us to transfer their complete information. Surprisingly, this includes a large fraction of the domains deploying DNSSEC. We find that DNS zones vary significantly in size and some span many ASes. Also, while antispam technologies appear to be getting deployed, the adoption rates of DNSSEC and IPv6 continue to be low. Finally, we also find that carelessness in handing DNS records can lead to reduced availability of name servers, email, and Web servers. This also undermines anti-spam efforts and the efforts to shut down phishing sites or to contain malware infections.

show abstract

Section: Related Workmentioning

confidence: 99%

Touring DNS Open Houses for Trends and Configurations

Kalafut

Shue

Gupta

2011

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

show abstract

“…Recently there have already been evidences [1] that the uptake in DNSSEC adoption has included an increase in DS-related misconfigurations. A number of DNS monitoring tools and services have emerged to check cross-domain configuration errors [25], and similar tools such as [12] have begun to prove themselves as an integral component in the DNSSEC deployment.…”

Section: Cross-domain Coordinationmentioning

confidence: 99%

Deploying Cryptography in Internet-Scale Systems: A Case Study on DNSSEC

Yang

Osterweil²,

Massey

et al. 2011

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

Abstract-The DNS Security Extensions (DNSSEC) are among the first attempts to deploy cryptographic protections in an Internet-scale operational system. DNSSEC applies wellestablished public key cryptography to ensure data integrity and origin authenticity in the DNS system. While the cryptographic design of DNSSEC is sound and seemingly simple, its development has taken the IETF over a decade and several protocol revisions, and even today its deployment is still in the early stage of rolling out. In this paper, we provide the first systematic examination of the design, deployment, and operational challenges encountered by DNSSEC over the years. Our study reveals a fundamental gap between cryptographic designs and operational Internet systems. To be deployed in the global Internet, a cryptographic protocol must possess several critical properties including scalability, flexibility, incremental deployability, and ability to function in face of imperfect operations. We believe that the insights gained from this study can offer valuable inputs to future cryptographic designs for other Internet-scale systems.

show abstract

“…Pappas et al [14] developed a tool to detect certain errors and inconsistencies by considering measurements from many vantage points. Many other tools to check for a variety of DNS problems are available online, for example at dns.net [16].…”

Section: Related Workmentioning

confidence: 99%

Understanding implications of DNS zone provisioning

Kalafut

Shue

Gupta

2008

Proceedings of the 8th ACM SIGCOMM Conference on Internet Measurement

View full text Add to dashboard Cite

DNS is a critical component of the Internet. This paper takes a comprehensive look at the provisioning of Internet domains and its impact on the availability of various services. To gather data, we sweep 60% of the Internet's domains for zone transfers. 6.6% of them allow us to transfer their complete information. We find that carelessness in handling DNS records can lead to reduced availability of name servers, email, and Web servers. It also undermines anti-spam efforts and the efforts to shut down phishing sites or to contain malware infections.

show abstract

Distributed DNS troubleshooting

Cited by 18 publications

References 11 publications

Touring DNS Open Houses for Trends and Configurations

Touring DNS Open Houses for Trends and Configurations

Deploying Cryptography in Internet-Scale Systems: A Case Study on DNSSEC

Understanding implications of DNS zone provisioning

Contact Info

Product

Resources

About