Skip to main content

Towards a Model of DNS Client Behavior

  • Conference paper
  • First Online:
Passive and Active Measurement (PAM 2016)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 9631))

Included in the following conference series:

Abstract

The Domain Name System (DNS) is a critical component of the Internet infrastructure as it maps human-readable hostnames into the IP addresses the network uses to route traffic. Yet, the DNS behavior of individual clients is not well understood. In this paper, we present a characterization of DNS clients with an eye towards developing an analytical model of client interaction with the larger DNS ecosystem. While this is initial work and we do not arrive at a DNS workload model, we highlight a variety of behaviors and characteristics that enhance our mental models of how DNS operates and move us towards an analytical model of client-side DNS operation.

This work was funded in part by NSF grant CNS-1213157.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    We prefer traces over logs due to the better timestamp resolution (msec vs. sec).

  2. 2.

    In our case, this is campus-life tasks, e.g., checking the course materials portal.

References

  1. OpenDNS. http://www.opendns.com/

  2. Barford, P., Crovella, M.: Generating representative web workloads for network and server performance evaluation. In ACM SIGMETRICS (1998)

    Google Scholar 

  3. Callahan, T., Allman, M., Rabinovich, M.: On modern DNS behavior and properties. ACM SIGCOMM Comput. Commun. Rev. 43(3), 7–15 (2013)

    Article  Google Scholar 

  4. Ester, M., Kriegel, H.-P., Sander, J., Xu, X.: A density-based algorithm for discovering clusters in large spatial databases with noise. In: AAAI International Conference on Knowledge Discovery and Data Mining (1996)

    Google Scholar 

  5. Fofack, N.C., Alouf, S.: Modeling modern DNS caches. In: ACM International Conference on Performance Evaluation Methodologies and Tools (2013)

    Google Scholar 

  6. Gao, H., Yegneswaran, V., Chen, Y., et al.: An empirical re-examination of global DNS behavior. In: ACM SIGCOMM (2013)

    Google Scholar 

  7. Gauthier, P., Cohen, J., Dunsmuir, M.: The web proxy auto-discovery protocol. IETF Internet Draft (work in progress) (1999). https://tools.ietf.org/html/draft-ietf-wrec-wpad-01

  8. Websites using google analytics. http://trends.builtwith.com/analytics/Google-Analytics

  9. Google safe browsing. https://developers.google.com/safe-browsing

  10. HTTP archive. http://httparchive.org

  11. Jung, J., Berger, A.W., Balakrishnan, H.: Modeling TTL-based internet caches. In: IEEE International Conference on Computer Communications (2003)

    Google Scholar 

  12. Mattson, R.L., Gecsei, J., Slutz, D.R., Traiger, I.L.: Evaluation techniques for storage hierarchies. IBM Syst. J. 9(2), 78–117 (1970)

    Article  MATH  Google Scholar 

  13. Paxson, V.: Empirically derived analytic models of wide-area TCP connections. IEEE/ACM Trans. Netw. 2(4), 316–336 (1994)

    Article  Google Scholar 

  14. Schomp, K., Allman, M., Rabinovich, M.: DNS resolvers considered harmful. In: ACM Workshop on Hot Topics in Networks (2014)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Kyle Schomp .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2016 Springer International Publishing Switzerland

About this paper

Cite this paper

Schomp, K., Rabinovich, M., Allman, M. (2016). Towards a Model of DNS Client Behavior. In: Karagiannis, T., Dimitropoulos, X. (eds) Passive and Active Measurement. PAM 2016. Lecture Notes in Computer Science(), vol 9631. Springer, Cham. https://doi.org/10.1007/978-3-319-30505-9_20

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-30505-9_20

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-30504-2

  • Online ISBN: 978-3-319-30505-9

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics