Dissecting DNS Stakeholders in Mobile Networks
Dissecting DNS Stakeholders in Mobile Networks
复制标题
DOI：
10.1145/3143361.3143375
复制
发表时间：
2017-11
期刊：
影响因子：
--
通讯作者：
Mário Almeida;A. Finamore;Diego Perino;Narseo Vallina-Rodriguez;Matteo Varvello
中科院分区：
文献类型：
--
作者：
Mário Almeida;A. Finamore;Diego Perino;Narseo Vallina-Rodriguez;Matteo Varvello
移动应用程序的功能涉及大量协议和实体，域名系统（DNS）充当主要的协议和实体。尽管是最古老的Internet系统之一，但DNS仍在其利益相关者之间进行半实验互动：域所有者，网络运营商，操作系统和应用程序开发人员。这项工作的目的是整体了解移动流量中DNS的动态以及每个利益相关者的作用。我们使用两个互补的（匿名）数据集：由欧洲移动网络运营商（MNO）提供的19m客户提供的流量日志，以及来自5,000名Lumen用户的流量日志，Android的流量监视应用程序。我们通过四个欧洲MNO的主动测量进行了这种被动交通分析的补充。我们的研究表明，10K域（在198M中）占网络流量总流量的87％。尽管域对映射的域映射在更长的时间尺度上会改变，但此类域的实时时间（TTL）值的时间（TTL）值大多是短的（<1分钟）。此外，根据运算符递归解析器架构，最终用户设备的TTL值甚至较小，从而导致了启用启用的DNS CACHE次优效率。尽管可用于最大程度地减少DNS开销的设备上和网络内的优化，我们发现这对应于10％的页面加载时间（PLT），但我们尚未发现它们在野外采用的广泛证据。
The functioning of mobile apps involves a large number of protocols and entities, with the Domain Name System (DNS) acting as a predominant one. Despite being one of the oldest Internet systems, DNS still operates with semi-obscure interactions among its stakeholders: domain owners, network operators, operating systems, and app developers. The goal of this work is to holistically understand the dynamics of DNS in mobile traffic along with the role of each of its stakeholders. We use two complementary (anonymized) datasets: traffic logs provided by a European mobile network operator (MNO) with 19M customers, and traffic logs from 5,000 users of Lumen, a traffic monitoring app for Android. We complement such passive traffic analysis with active measurements at four European MNOs. Our study reveals that 10k domains (out of 198M) account for 87% of total network flows. The time to live (TTL) values for such domains are mostly short (< 1min), despite domain-to-IPs mapping tends to change on a longer time-scale. Further, depending on the operators recursive resolver architecture, end-user devices receive even smaller TTL values leading to suboptimal effectiveness of the on-device DNS cache. Despite a number of on-device and in-network optimizations available to minimize DNS overhead, which we find corresponding to 10% of page load time (PLT) on average, we have not found wide evidence of their adoption in the wild.