Can Encrypted DNS Be Fast?
Can Encrypted DNS Be Fast?
复制标题
加密 DNS 速度快吗？
DOI：
10.1007/978-3-030-72582-2_26
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
N. Feamster
中科院分区：
文献类型：
--
作者：
Austin Hounsel;Paul Schmitt;Kevin Borgolte;N. Feamster
在本文中，我们研究了 2020 年一个多月内美国数千个家庭网络的加密 DNS 协议和传统 DNS 的性能。我们在美国联邦通信委员会 (FCC) 测量宽带美国计划的 2,693 名参与小组成员的家中进行了这些测量。我们发现客户不必为了隐私而牺牲 DNS 性能。对于某些解析器，即使延迟增加，DoT 的中值响应时间也能够比 DNS 执行得更快。我们还发现不同递归解析器的 DoH 性能存在显着差异。根据这些结果，我们建议 DNS 客户端（例如 Web 浏览器）应定期进行简单的延迟和响应时间测量，以确定客户端应使用哪种协议和解析器。没有任何一个 DNS 协议或解析器能够为所有客户端提供最佳性能。
In this paper, we study the performance of encrypted DNS protocols and conventional DNS from thousands of home networks in the United States, over one month in 2020. We perform these measurements from the homes of 2,693 participating panelists in the Federal Communications Commission’s (FCC) Measuring Broadband America program. We found that clients do not have to trade DNS performance for privacy. For certain resolvers, DoT was able to perform faster than DNS in median response times, even as latency increased. We also found significant variation in DoH performance across recursive resolvers. Based on these results, we recommend that DNS clients (e.g., web browsers) should periodically conduct simple latency and response time measurements to determine which protocol and resolver a client should use. No single DNS protocol nor resolver performed the best for all clients.
将 DNS 置于上下文中
DOI：
10.1145/3419394.3423659
发表时间：
2020
期刊：
IMC Internet Measurement Conference
影响因子：
--
作者：
Allman, Mark
通讯作者：
Allman, Mark