12–13 May 2019
Shangri-La Bangkok
Asia/Bangkok timezone

DNSKEY Flood what does that tell us about resolvers

13 May 2019, 09:30
30m
Ballroom 1 (Shangri-La Bangkok)

Ballroom 1

Shangri-La Bangkok

89 ซอย Wat Suan Plu - Dumex, Khwaeng Bang Rak, Khet Bang Rak, Krung Thep Maha Nakhon 10500, Thailand
Standard Presentation Public Workshop

Speakers

Mr Ray Bellis (Internet Systems Consortium, Inc.) Ólafur Guðmundsson (CloudFlare)

Description

When ICANN rolled over the KSK for the first time in October 2018 things apparently went smoothly with only a few minor incidents reported, but after a while it became evident that some resolvers did not like the rollover. This can be measured by looking at the DNSKEY queries from those resolvers which in some cases have increased by 100x at F-root. Some of those resolvers in this process expose a number of interesting behavioral patterns. In some cases this may expose the query frequency and in others the upstream selection algorithm.

We will explain the patterns using data collected by a subset of F-root instances around the world and look at geographical differences. In some cases this may expose the query frequency and in others the upstream selection algorithm.

Talk Duration 30 Minutes

Primary authors

Mr Ray Bellis (Internet Systems Consortium, Inc.) Ólafur Guðmundsson (CloudFlare) Vasco Asturiano

Presentation materials