Protecting DNS from software errors

Domain Name System (DNS);diverse replication;software reliability;resilience;content distribution network (CDN)

Kiyak, Firat ; Caesar ; Matthew C.

关键词: Domain Name System (DNS);    diverse replication;    software reliability;    resilience;    content distribution network (CDN);   

Others  :  https://www.ideals.illinois.edu/bitstream/handle/2142/14644/Kiyak_Firat.pdf?sequence=2&isAllowed=y

美国|英语

来源: The Illinois Digital Environment for Access to Learning and Scholarship

【 摘 要 】

The ability to forward packets on the Internet is highly intertwined with the availability and robustness of the Domain Name System (DNS) infrastructure. Unfortunately, the DNS suffers from a wide variety of problems arising from implementation errors, including vulnerabilities, bogus queries, and proneness to failure. In this work, we present a preliminary design and early prototype implementation of a system that leverages diversified replication to increase tolerance of DNS to implementation errors. Our design leverages software diversity by running multiple redundant copies of software in parallel, and leverages data diversity by replicating requests to multiple redundant servers. Using traces of DNS queries, we demonstrate our design can keep up with the loads of a large university’s DNS traffic, while improving resilience to DNS’s availability problems.