DNS Measurement Activity on ITB 2010
1 like389 views
ITB is participating in several Internet measurement projects to monitor DNS activity and measure the growth of the Internet from a global perspective. This includes DITL 2010, run by OARC, which collects DNS data to analyze trends in IPv4/IPv6 growth and secure DNS adoption. ITB has also installed a Gulliver measurement box to monitor DNS reachability and response times to root servers from its location. Further analysis of the data collected can provide insights into DNS performance and uncover any anomalies.
DNS Measurement Activity on ITB 2010
- 1. DNS Measurement Activity on ITB 2010 Affan Basalamah
- 2. Outline • Overview • DITL 2010 by OARC • Gulliver Project
- 3. Overview • ITB is participating in Internet measurement activity, especially DNS • Participation in global Internet community for international exposure
- 4. DNS @ ITB • 3 Production Servers – ISC BIND 9.6.2 – DNSSEC not enabled – Anycast distribution • 1 Experimental Server – NLnet Unbound 1.4.4 – DNSSEC (validation) enabled – ISC DLV (DNSSEC Lookaside Validation)
- 5. Monitoring on ITB side • Using Munin plugins for Bind & Unbound – http://munin-monitoring.org/
- 6. Sample Graphics & Data
- 7. DITL 2010
- 8. DITL 2010 • A Day In The Life of the Internet – https://www.dns-oarc.net • ITB is participating in DITL 2010 in April • Conducted by Dian Dwi Nugraha (DNS Admin)
- 9. What it is? • A large-scale data collection project undertaken by CAIDA and OARC (Operations, Analysis, and Research Center) every year since 2006 • Participants : – DNS Root Servers – TLD Servers – AS112 nodes – “client-side” iterative/caching resolvers • Tool : dnscap/tcpdump
- 10. Objectives • Measure Internet growth – IPv4 and IPv6 growth – Secure/insecure DNS growth • Uncover possible DNS anomalies in process
- 11. Data taken • IPv4/IPv6 source and destination query • qps (queries per second) • secure/insecure (DNSSEC) • RRsets (A,AAAA,MX,NS,...)
- 12. Toolkit • Follow procedures in https://www.dns-oarc.net/ditl/2010 • Toolkit to send data to OARC: https://www.dns-oarc.net/files/ditl-2010/ditl- tools-20100406195635.tar.gz
- 13. Raw Data Snapshot • http://ditl.dns-oarc.net/ditl_20100413_raw/coverage.png
- 14. Status • Collected data in http://ditl.dns-oarc.net/ • Some data collected from ITB: http://ditl.dns-oarc.net/ditl_20100413_raw/provider- reports/itb-ac-id-files.html • Deeper measurement data can be obtained to OARC
- 15. GULLIVER PROJECT
- 16. What is it? • Active Measurement Framework • Probes DNS reachability from worldwide locations – RTT, Query Timeout – Node ID (hostname.bind or server.id) • 30 Probe Locations as of Feb. 2010 – Including South/East Asia and Africa countries • Targets – Root, ccTLD, in‐addr.arpa DNS servers • http://gulliver.wide.ad.jp/
- 17. Gulliver Project in ITB • Installed by Dikshie in 31st May • The measurement box: http://www.seil.jp/seilseries/seil/seilplus.php
- 18. Gulliver Box @ ITB
- 19. Gulliver Box @ ITB
- 20. Measurement Results • RTT reachability of root DNS server from ITB as seen in http://gulliver.wide.ad.jp/
- 21. Status • ITB box has send data to Gulliver • ITB hasn’t received Member Page username/password from DR. Yuki Sekiya
- 22. SUMMARY
- 23. Summary • ITB is ready to participate in Internet measurement activity • Participation in global Internet community for international exposure • Need to conduct thorough analysis from data
- 24. Thanks!