Speaker
Mr
Geoff Huston
(APNIC)
Description
The forthcoming roll of the Root Zone KSK has prompted some studies of the
behaviour of resolvers that ask questions of the root. Some of these
studies use direct experimentation, where a large number of end users are
given a DNS name to resolve in order to understand the behaviour of the
DNS recursive resolvers that they use. The DNS responses they are given
are intended to mimic the behaviour of the Root Zone servers during the
KSK roll, such as replicating the response size during certain phases of
the KSK roll, or mimicking the particular truncation and fragmentation
behaviours of individual root server behaviours. As we can't experiment
with the root zone the common approach is to manipulate a test zone and
test that. The assumption here is that the set of resolvers that ask an
authoritative name server is the same as the set of name servers that ask
the root.
But are these two sets of visible resolvers the same? What can we assume
from queries presentation to an authoritative name server that would
relate to queries to the root servers? We present the results of a study
that compares these two sets of resolvers and report on the degree of
correlation.
Summary
Comparison of records of resolvers that ask authoritative name servers and resolvers that pose queries to the root servers
| Talk Duration | 30 Minutes |
|---|
Primary author
Mr
Geoff Huston
(APNIC)
Co-author
Roy Arends
(ICANN)
