Measuring the Global Recursive DNS Infrastructure: A View From the Edge
Measuring the Global Recursive DNS Infrastructure: A View From the Edge
复制标题
衡量全球递归 DNS 基础设施：边缘视角
DOI：
10.1109/access.2019.2950325
复制
发表时间：
2019
期刊：
影响因子：
3.9
通讯作者：
Ángel Cuevas Rumín
中科院分区：
文献类型：
--
作者：
Patricia Callejo;R. Cuevas;Narseo Vallina;Ángel Cuevas Rumín
域名系统（DNS）是互联网最重要的子系统之一。虽然大多数ISP部署和运营自己的DNS基础设施，但许多最终用户求助于第三方DNS提供商，希望提高其隐私，安全和Web性能。然而，糟糕的用户选择和DNS提供商的不均衡地理部署可能会为数百万用户提供不安全和低效的DNS配置。在本文中，我们提出了一种新颖而灵活的测量方法，以（1）研究递归DNS解析器的基础设施，包括ISP和第三方DNS提供商的部署策略;（2）研究最终用户的DNS选择，无论是在及时的方式和全球范围内。为此，我们利用在线广告网络的推广能力来分发轻量级的基于JavaScript的DNS测量脚本。为了展示我们技术的潜力，我们推出了两个独立的广告活动，触发了超过300万次DNS查找，这使我们能够识别和研究超过76，000个递归DNS解析器，为178个国家的超过25，000个眼球AS提供支持。数据分析为DNS基础设施提供了新的见解，例如用户对第三方DNS提供商的偏好（即Google、OpenDNS、Level 3和Cloudflare递归DNS解析器占我们活动触发的DNS请求总数的约13%），以及许多提供移动的和固定接入网络的ISP的部署决策，以分离服务于每种类型的接入的DNS基础设施技术.
The Domain Name System (DNS) is one of the most critical Internet subsystems. While the majority of ISPs deploy and operate their own DNS infrastructure, many end users resort to third-party DNS providers with hopes of enhancing their privacy, security, and web performance. However, bad user choices and the uneven geographical deployment of DNS providers could render insecure and inefficient DNS configurations for millions of users. In this paper, we propose a novel and flexible measurement method to (1) study the infrastructure of recursive DNS resolvers, including both ISP’s and third-party DNS providers’ deployment strategies; and (2) study end-user DNS choices, both in a timely manner and at a global scale. For that, we leverage the outreach capacity of online advertising networks to distribute lightweight JavaScript-based DNS measurement scripts. To showcase the potential of our technique, we launch two separate ad campaigns that triggered more than 3M DNS lookups, which allow us to identify and study more than 76k recursive DNS resolvers giving support to more than 25k eyeball ASes in 178 countries. The analysis of the data offers new insights into the DNS infrastructure, such as user preferences towards third-party DNS providers (namely, Google, OpenDNS, Level3, and Cloudflare recursive DNS resolvers account for ~13% of the total DNS requests triggered by our campaigns), and into deployment decisions of many ISPs providing both mobile and fixed access networks to separate the DNS infrastructure serving each type of access technology.