Mr
Geoff Huston
(APNIC)
14/05/2017, 14:00
Public Workshop
Standard Presentation
There are 12 different root server anycast constellations, and they all
serve the same root zone data. But do they all serve this data the same
way? In particular, when the response size is large do all these root
server systems respond in the same manner? This is a report on the
different forms of responses that were observed when the root servers were
coerced into offering a larger than...
Jan Včelák
(NS1)
14/05/2017, 14:30
Public Workshop
Standard Presentation
The vast majority of DNS traffic happens over UDP. We can pretty much predict how the resolvers will spread the load, deal with timeouts and server failures. But what will happen if we force the clients to use TCP? Is TCP a first-class citizen in modern resolvers or is it only a fallback mechanism. And can the resolvers use established TCP connections effectively?
In this talk, I will try...
Santiago Ruano Rincón
(IMT Atlantique)
14/05/2017, 15:00
Public Workshop
Standard Presentation
In this presentation we show our ongoing work to develop a testbed --based on software and commodity hardware-- to research on flooding attacks against DNS infrastructure. We have currently developed two prototype components: a flooding DNS query generator, able to saturate 10GbE links with 11Mrps, and an online detector of overabundant queried domains at reception. Relying on DPDK and...
Mr
Bert Hubert
(PowerDNS)
14/05/2017, 15:30
Public Workshop
Standard Presentation
Using techniques inspired by the HyperLogLog counting algorithm, it has proven possible to rapidly measure the number of DNSSEC-signed delegations worldwide for both NSEC and NSEC3 zones, using around 4096 queries per zone.
In this presentation, I will briefly describe HyperLogLog & then how this maps to NSEC names and NSEC3 hashes. I will also discuss how reliable results from measuring...
