SGER: Explorative Study: Design for Resiliency

SGER的提案“探索性研究：弹性设计”描述了针对互联网域名系统(DNS)的设计和分析工作。域名系统是支持互联网名称到地址映射的核心服务和协议。社区以前的工作，结合作者最近的测量和分析，揭示了由权威区域部署和配置的DNS中的一些弱点。这些弱点既源于仅考虑基础设施中物理错误的原始设计，也源于一系列直接由错误配置和人为错误导致的低效和损坏。本研究将根据协议中的弹性原则，对域名系统进行重新设计。新的设计将与目前的现有系统进行对比分析，已知的漏洞将被应用到评估中。SGER提案的一项修正案将最近的DNS测量和分析应用于添加了几个特定于DNS的工具，这些工具通过主动测量、区域文件检查和DNS协议增强来提供对DNS配置问题的自动检查。

The SGER proposal "Explorative Study: Design for Resiliency" describes design and analysis work targeted to the Internet's Domain Name System (DNS). DNS is a core underpinning service and protocol enabling name-to-address mappings for the Internet. Previous work in the community combined with recent measurements and analysis by the author reveal a number of weaknesses in DNS as it is deployed and configured by authoritative zones. These weaknesses stem from both an original design that considered only physical errors in the infrastructure, and a set of inefficiencies and breakage resulting directly from misconfiguration and human error. This study will explore a re-design of DNS based on principles of resiliency in the protocol. The new design will be analyzed comparatively to today's existing system and known vulnerabilities will be applied in the assessment. An amendment to the SGER proposal applies recent DNS measurement and analysis to the addition of several DNS-specific tools that provide automated checking for DNS configuration problems through active measurement, zone file checks and DNS protocol enhancement.