IP fragmentation and the DNS — mitigation
Guest post: How to lower the risk of fragmentation-based DNS attacks.
Tag: fragmentation
DNS evolution: Innovation or fragmentation?
How should we engage with evolution and innovation in the Internet’s name space?
IP fragmentation and the DNS — Vulnerable DNS servers
Guest Post: One in seven authoritative DNS servers found to be vulnerable to ICMP-based MTU spoofing attacks.
IP fragmentation and the DNS — the state of IP fragmentation
Guest Post: 0.1% of DNS traffic is fragmented, almost all of which comes from DNSSEC signed domains.
Hop-by-hop extension headers
Can hop-by-hop extension headers solve the IPv6 path MTU discovery problem?
More notes from IETF 112
Geoff Huston on currently active IETF routing security, IPv6, and transport discussions.
DNS Flag Day 2020: what you need to know
Guest Post: This year’s DNS Flag Day seeks to draw attention to IP fragmentation issues within the DNS.
Google fixes Public DNS Service
Google has fixed an IPv6 fragmentation handling problem in their Public DNS Service.
Dealing with IPv6 fragmentation in the DNS, Part 2
In part two of his IPv6 fragmentation research posts, Geoff Huston turns his attention to measuring the packet drop rate when sending fragmented packets to IPv6 end hosts.
Dealing with IPv6 fragmentation in the DNS
Is IPv6 fragmentation a fixable problem in the DNS, and if so, how?