skip to main content
research-article

A day at the root of the internet

Published: 30 September 2008 Publication History

Abstract

We analyzed the largest simultaneous collection of full-payload packet traces from a core component of the global Internet infrastructure ever made available to academic researchers. Our dataset consists of three large samples of global DNS traffic collected during three annual "Day in the Life of the Internet" (DITL) experiments in January 2006, January 2007, and March 2008. Building on our previous comparison of DITL 2006 and DITL 2007 DNS datasets [28], we venture to extract historical trends, comparisons with other data sources, and interpretations, including traffic growth, usage patterns, impact of anycast distribution, and persistent problems in the root nameserver system that reflect ominously on the global Internet. Most notably, the data consistently reveals an extraordinary amount of DNS pollution -- an estimated 98% of the traffic at the root servers should not be there at all. Unfortunately, there is no clear path to reducing the pollution, so root server operators, and those who finance them, must perpetually overprovision to handle this pollution. Our study presents the most complete characterization to date of traffic reaching the roots, and while the study does not adequately fulfill the "Day in the Life of the Internet" vision, it does succeed at unequivocally demonstrating that the infrastructure on which we are all now betting our professional, personal, and political lives deserves a closer and more scientific look.

References

[1]
IPv6 Address Added for Root Servers in the Root Zone. http://www.icann.org/en/announcements/announcement-04feb08.htm.
[2]
Global Environment for Network Investigation (now "innovations"), 2005. http://www.geni.net.
[3]
A Day in the Life, 2006. http://blog.caida.org/best available data/2006/09/04/a-day-in-the-life/.
[4]
Top ten things lawyers should know about Internet research, #3, 2008. http://blog.caida.org/best available data/2008/04/18/top-ten-things-lawyers-should-know-about-internet-research-3/.
[5]
D.E. 3rd, E. Brunner-Williams, and B. Manning. Domain Name System IANA Considerations, 2000. http://www.rfc-editor.org/rfc/rfc2929.txt.
[6]
A. Broido, Y. Hyun, M. Fomenkov, and K. Claffy. The windows of private DNS updates. SIGCOMM Comput. Commun. Rev., 36(3):93--98, 2006.
[7]
A. Broido, Y. Hyun, R. Gao, and K. Claffy. Their share: diversity and disparity in IP traffic. In PAM 2004 Proceedings, pages 113--125, 2004.
[8]
CAIDA and DNS-OARC. A Report on DITL data gathering Jan 9-10th 2007. http://www.caida.org/projects/ditl/summary-2007-01/.
[9]
N.R. Council. Looking over the Fence: A Neighbor's View of Networking Research. National Academies Press, 2001.
[10]
P.B. Danzig, K. Obraczka, and A. Kumar. An analysis of wide-area name server traffic: a study of the Internet Domain Name System. SIGCOMM Comput. Commun. Rev., 22(4):281--292, 1992.
[11]
DNS-OARC. Domain Name System Operations, Analysis, and Research Center. https://www.dns-oarc.net/.
[12]
Duane Wessels. https://www.dns-oarc.net/oarc/services/dnsentropy.
[13]
T. Hardie. Distributing Authoritative Nameservers via Shared Unicast Addresses, 2002. http://www.ietf.org/rfc/rfc3258.txt.
[14]
IANA. List of valid TLD. http://data.iana.org/TLD/tlds-alpha-by-domain.txt.
[15]
ICANN. Root servers attack factsheet, 2007. http://www.icann.org/announcements/factsheet-dns-attack-08mar07.pdf.
[16]
C. D. in the Life of the Internet (DITL) Project Team. Day in the Life of the Internet, January 9-10, 2007 (DITL-2007-01-09) (collection). http://imdc.datcat.org/collection/1-031B-Q=Day+in+the+Life+of+the+Internet%2C+January+9-10%2C+2007+%28DITL-2007-01-09%29.
[17]
C. D. in the Life of the Internet (DITL) Project Team. Day in the Life of the Internet, March 18-19, 2008 (DITL-2008-03-18) (collection). http://imdc.datcat.org/collection/1-05MM-F=Day+in+the+Life+of+the+Internet%2C+March+18-19%2C+2008+%28DITL-2008-03-18%29.
[18]
M. Larson and P. Barber. Observed DNS Resolution Misbehavior. http://www.ietf.org/rfc/rfc4697.txt.
[19]
T. Lee, B. Huffaker, M. Fomenkov, and K. Claffy. On the problem of optimization of DNS root servers' placement. In PAM 2003 Proceedings, 2003.
[20]
O. Lendl and L.A. Kaplan. Patching Nameservers: Austria reacts to VU#800113. http://cert.at/static/cert.at-0802-DNS-patchanalysis.pdf.
[21]
Z. Liu, B. Huffaker, N. Brownlee, and K. Claffy. Two Days in the Life of the DNS Anycast Root Servers. In PAM 2007 Proceedings, pages 125--134, 2007.
[22]
D. Malone. The root of the matter: hints or slaves. In IMC'04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 15--20, New York, NY, USA, 2004. ACM.
[23]
P. Mockapetris. Domain Names - Concepts and Facilities, 1987.
[24]
A. Odlyzko. Minnesota Internet Traffic Studies (MINTS). http://www.dtc.umn.edu/mints/home.php.
[25]
R.S. Operators. Root Server Technical Operations. http://www.root-servers.org/.
[26]
V. Pappas, P. Fältström, D. Massey, and L. Zhang. Distributed DNS troubleshooting. In NetT'04: Proceedings of the ACM SIGCOMM workshop on Network troubleshooting, pages 265--270, New York, NY, USA, 2004. ACM.
[27]
V. Pappas, Z. Xu, S. Lu, D. Massey, A. Terzis, and L. Zhang. Impact of configuration errors on DNS robustness. SIGCOMM Comput. Commun. Rev., 34(4):319--330, 2004.
[28]
S. Castro, D. Wessels, and Kimberly Claffy. A Comparison of Traffic from the DNS Root Nameservers as Measured in DITL 2006 and 2007. http://www.caida.org/research/dns/roottraffic/comparison06 07.xml.
[29]
US-CERT. Vulnerability note VU#800113: Multiple DNS implementations vulnerable to cache poisoning. http://www.kb.cert.org/vuls/id/800113.
[30]
W. van Wanrooij and A. Pras. DNS Zones Revisited. Open European Summer School and IFIP WG6.4/6.6/6.9 Workshop (EUNICE), 2005.
[31]
D. Wessels. dnstop. http://www.caida.org/tools/utilities/dnstop/.
[32]
D. Wessels. Is your caching resolver polluting the internet? In NetT'04: Proceedings of the ACM SIGCOMM workshop on Network troubleshooting, pages 271--276, New York, NY, USA, 2004. ACM.
[33]
D. Wessels. Measuring DNS Source Port Randomness. First CAIDA/WIDE/CASFI workshop, August 2008. http://www.caida.org/workshops/wide/0808/slides/source port randomness.pdf.
[34]
D. Wessels and M. Fomenkov. Wow, That's a lot of packets. In PAM 2002 Proceedings, 2002.
[35]
D. Wessels, M. Fomenkov, N. Brownlee, and K. Claffy. Measurements and Laboratory Simulations of the Upper DNS Hierarchy. In PAM 2004 Proceedings, pages 147--157, 2004.

Cited By

View all
  • (2024)RIPEn at Home - Surveying Internal Domain Names Using RIPE Atlas2024 8th Network Traffic Measurement and Analysis Conference (TMA)10.23919/TMA62044.2024.10559012(1-4)Online publication date: 21-May-2024
  • (2024)The Roots Go Deep: Measuring '.' Under ChangeProceedings of the 2024 ACM on Internet Measurement Conference10.1145/3646547.3689008(441-453)Online publication date: 4-Nov-2024
  • (2024)Deep Dive into NTP Pool's Popularity and MappingProceedings of the ACM on Measurement and Analysis of Computing Systems10.1145/36390418:1(1-30)Online publication date: 21-Feb-2024
  • Show More Cited By

Recommendations

Comments

Information & Contributors

Information

Published In

cover image ACM SIGCOMM Computer Communication Review
ACM SIGCOMM Computer Communication Review  Volume 38, Issue 5
October 2008
68 pages
ISSN:0146-4833
DOI:10.1145/1452335
Issue’s Table of Contents

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 30 September 2008
Published in SIGCOMM-CCR Volume 38, Issue 5

Check for updates

Author Tags

  1. day in the life of the internet
  2. domain name system
  3. misconfiguration
  4. root servers
  5. traffic growth
  6. unwanted traffic

Qualifiers

  • Research-article

Contributors

Other Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

  • Downloads (Last 12 months)28
  • Downloads (Last 6 weeks)5
Reflects downloads up to 07 Mar 2025

Other Metrics

Citations

Cited By

View all
  • (2024)RIPEn at Home - Surveying Internal Domain Names Using RIPE Atlas2024 8th Network Traffic Measurement and Analysis Conference (TMA)10.23919/TMA62044.2024.10559012(1-4)Online publication date: 21-May-2024
  • (2024)The Roots Go Deep: Measuring '.' Under ChangeProceedings of the 2024 ACM on Internet Measurement Conference10.1145/3646547.3689008(441-453)Online publication date: 4-Nov-2024
  • (2024)Deep Dive into NTP Pool's Popularity and MappingProceedings of the ACM on Measurement and Analysis of Computing Systems10.1145/36390418:1(1-30)Online publication date: 21-Feb-2024
  • (2024)Investigating Deployment Issues of DNS Root Server Instances From a China-Wide ViewIEEE Transactions on Dependable and Secure Computing10.1109/TDSC.2024.337353021:6(5275-5292)Online publication date: 1-Nov-2024
  • (2023)Fourteen years in the lifeProceedings of the 32nd USENIX Conference on Security Symposium10.5555/3620237.3620415(3171-3186)Online publication date: 9-Aug-2023
  • (2023)Extended DNS Errors: Unlocking the Full Potential of DNS TroubleshootingProceedings of the 2023 ACM on Internet Measurement Conference10.1145/3618257.3624835(213-221)Online publication date: 24-Oct-2023
  • (2023)A Comparative Study of DNS Root Query Performance Between Continents2023 International Conference on Communications, Computing and Artificial Intelligence (CCCAI)10.1109/CCCAI59026.2023.00010(7-11)Online publication date: Jun-2023
  • (2023)Defending Root DNS Servers against DDoS Using Layered Defenses (Extended)Ad Hoc Networks10.1016/j.adhoc.2023.103259151(103259)Online publication date: Dec-2023
  • (2022)Characterizing DNS query response sizes through active and passive measurementsNOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium10.1109/NOMS54207.2022.9789912(1-6)Online publication date: 25-Apr-2022
  • (2022)Understanding DNS Query Composition at B-Root2022 IEEE/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT)10.1109/BDCAT56447.2022.00044(265-270)Online publication date: Dec-2022
  • Show More Cited By

View Options

Login options

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Figures

Tables

Media

Share

Share

Share this Publication link

Share on social media