SGER: Explorative Study: Design for Resiliency

SGER提案“探索性研究：弹性设计”描述了针对互联网域名系统（DNS）的设计和分析工作。DNS是一个核心的基础服务和协议，支持互联网的名称到地址映射。社区中以前的工作结合作者最近的测量和分析，揭示了DNS中的一些弱点，因为它是由权威区域部署和配置的。这些弱点既源于最初的设计，只考虑了基础设施中的物理错误，也源于配置错误和人为错误直接导致的一系列效率低下和损坏。本研究将根据协议中的弹性原则探索DNS的重新设计。新的设计将被分析比较今天的现有系统和已知的漏洞将被应用在评估。SGER提案的修正案将最近的DNS测量和分析应用于添加几个DNS特定工具，这些工具通过主动测量、区域文件检查和DNS协议增强来自动检查DNS配置问题。

The SGER proposal "Explorative Study: Design for Resiliency" describes design and analysis work targeted to the Internet's Domain Name System (DNS). DNS is a core underpinning service and protocol enabling name-to-address mappings for the Internet. Previous work in the community combined with recent measurements and analysis by the author reveal a number of weaknesses in DNS as it is deployed and configured by authoritative zones. These weaknesses stem from both an original design that considered only physical errors in the infrastructure, and a set of inefficiencies and breakage resulting directly from misconfiguration and human error. This study will explore a re-design of DNS based on principles of resiliency in the protocol. The new design will be analyzed comparatively to today's existing system and known vulnerabilities will be applied in the assessment. An amendment to the SGER proposal applies recent DNS measurement and analysis to the addition of several DNS-specific tools that provide automated checking for DNS configuration problems through active measurement, zone file checks and DNS protocol enhancement.