When parents and children disagree: Diving into DNS delegation inconsistency
When parents and children disagree: Diving into DNS delegation inconsistency
复制标题
当父母和孩子意见不一致时：深入探讨 DNS 委托不一致问题
DOI：
10.1007/978-3-030-44081-7_11
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Sperotto, A
中科院分区：
文献类型：
--
作者：
Sommese, R;Moura, G;Jonker, M;van Rijswijk-Deij, R;Dainotti, A;claffy, k;Sperotto, A
域名系统（DNS）是一个分层的、分散的、分布式的数据库。使DNS能够分层和分布式的一个关键机制是从父域到子域的责任委托[7]-通常由不同的实体管理。RFC 1034 [12]规定，父域名和子域名的权威域名服务器（NS）记录应该“一致并保持一致”，但我们发现超过1300万个二级域名的不一致性。我们对我们观察到的不一致的类型进行分类，以及面对这种不一致时解析器的行为，使用RIPE Atlas来探测我们为不同场景配置的实验域。我们的研究结果强调的风险，这种不一致的可用性配置错误的域。
The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed isdelegation[7] of responsibility from parent to childzones—typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be “consistent and remain so”, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.