What part of ‘No!’ is so hard for the DNS understand?
At APNIC Labs we’ve been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks.
At APNIC Labs we’ve been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks.
An analysis of the traffic impacts of locally served root zones, by Ilyas Rahimi at UvA.
Modern service discovery mechanisms increasingly allow services to run on arbitrary ports, yet DNS may remain the one protocol that cannot fully escape its dependency on the long-established convention of port 53.
Guest Post: At IETF 126, discussions highlighted how AI is beginning to shape the future of Internet infrastructure. Participants identified IPv6 as a critical foundation for large-scale AI ecosystems and explored new approaches.
Geoff Huston discusses the unexpected behaviours of the DNS when you perform a query after ‘cold start’ with no cached data.
BGP ORIGIN, ASPAs, PAVA, and ASRAs at IETF 126.
Recursive resolver DNS query behaviour, Post-quantum DNSSEC, Optimistic DNS, Automating DNS delegation management, and more from IETF 126.
Why does APNIC Labs experimental systems see almost all DNS queries twice or more?
Distributed systems depend on synchronization, but every approach has tradeoffs. From full copies to delta updates, how do you choose the right method?
A measurement study of how the DNS bootstrap priming query behaves when the root servers are renamed and DNSSEC signatures are added.