Measuring DNS over TLS from the Edge: Adoption, Reliability, and Response Times
Measuring DNS over TLS from the Edge: Adoption, Reliability, and Response Times
复制标题
从边缘测量基于 TLS 的 DNS：采用率、可靠性和响应时间
DOI：
10.1007/978-3-030-72582-2_12
复制
发表时间：
2021
影响因子：
5.3
通讯作者：
Vaibhav Bajpai
中科院分区：
文献类型：
--
作者：
T. Doan;I. Tsareva;Vaibhav Bajpai
。域名系统（DNS）是互联网通信的基石。DNS over TLS （DoT）作为DNS协议的扩展，于2016年被标准化，但其性能尚未得到广泛研究。在第一项从边缘测量DoT的研究中，我们利用部署在家庭网络中的3.2万个RIPE Atlas探测器来评估DoT的采用、可靠性和响应时间，并将其与基于UDP/ 53 （Do53）的DNS进行比较。在一周的时间内，每个探针向15个公共解析器（其中5个支持DoT）和探针的本地解析器发出200个域名查找，总共产生90M次DNS测量。我们发现，与之前的研究相比，九个月后开放解析器对DoT的支持增加了23.1%。然而，我们观察到，对于0.4%的RIPE Atlas探针，DoT仍然只被本地解析器支持。在可靠性方面，我们发现与Do53相比，DoT的故障率膨胀了0.4-32.2个百分点。虽然大多数解析器的Do53故障率在各大洲是一致的，但DoT故障率的变化要大得多。至于响应时间，我们看到DoT的区域差异很大，并发现几乎所有DoT请求都至少需要100毫秒才能返回响应（很大程度上是由于连接和会话建立），与Do53相比，响应时间增加了100毫秒以上。尽管在本地解析器中DoT的采用率很低，但它们实现的DoT响应时间约为140-150 ms，与公共解析器（130-230 ms）相似，尽管本地解析器也表现出更高的故障率。
. The Domain Name System (DNS) is a cornerstone of communication on the Internet. DNS over TLS (DoT) has been standardized in 2016 as an extension to the DNS protocol, however, its performance has not been extensively studied yet. In the first study that measures DoT from the edge, we leverage 3.2k RIPE Atlas probes deployed in home networks to assess the adoption, reliability, and response times of DoT in comparison with DNS over UDP/ 53 (Do53). Each probe issues 200 domain name lookups to 15 public resolvers, five of which support DoT, and to the probes’ local resolvers over a period of one week, resulting in 90M DNS measurements in total. We find that the support for DoT among open resolvers has increased by 23.1% after nine months in comparison with previous studies. However, we observe that DoT is still only supported by local resolvers for 0.4% of the RIPE Atlas probes. In terms of reliability, we find failure rates for DoT to be inflated by 0.4–32.2 percentage points when compared to Do53. While Do53 failure rates for most resolvers individually are consistent across continents, DoT failure rates have much higher variation. As for response times, we see high regional differences for DoT and find that nearly all DoT requests take at least 100 ms to return a response (in a large part due to connection and session establishment), showing an inflation in response times of more than 100 ms compared to Do53. Despite the low adoption of DoT among local resolvers, they achieve DoT response times of around 140–150 ms similar to public resolvers (130–230 ms), although local resolvers also exhibit higher failure rates in comparison.
Dagstuhl 实验网络研究再现性初学者指南
影响因子：
2.8
作者：
Bajpai, Vaibhav;Brunstrom, Anna;Feldmann, Anja;Kellerer, Wolfgang;Pras, Aiko;Schulzrinne, Henning;Smaragdakis, Georgios;Wählisch, Matthias;Wehrle, Klaus
通讯作者：
Wehrle, Klaus