14-15 May 2017
Europe/Madrid timezone

Who's Asking?

15 May 2017, 09:15
Standard Presentation Public Workshop Public Workshop: DNSSEC


Mr Geoff Huston (APNIC)


The forthcoming roll of the Root Zone KSK has prompted some studies of the behaviour of resolvers that ask questions of the root. Some of these studies use direct experimentation, where a large number of end users are given a DNS name to resolve in order to understand the behaviour of the DNS recursive resolvers that they use. The DNS responses they are given are intended to mimic the behaviour of the Root Zone servers during the KSK roll, such as replicating the response size during certain phases of the KSK roll, or mimicking the particular truncation and fragmentation behaviours of individual root server behaviours. As we can't experiment with the root zone the common approach is to manipulate a test zone and test that. The assumption here is that the set of resolvers that ask an authoritative name server is the same as the set of name servers that ask the root. But are these two sets of visible resolvers the same? What can we assume from queries presentation to an authoritative name server that would relate to queries to the root servers? We present the results of a study that compares these two sets of resolvers and report on the degree of correlation.


Comparison of records of resolvers that ask authoritative name servers and resolvers that pose queries to the root servers

Talk Duration 30 Minutes

Primary author

Mr Geoff Huston (APNIC)


Roy Arends (ICANN)

Presentation Materials