PPT-The Resolvers We Use Geoff Huston

APNIC Measuring the Internet via Users At APNIC weve been using online ads to measure the u sers view of the Internet for some years We ask users to fetch a unique URL This involves a DNS resolution and a HTTP GET to our servers. How resolvers work resolver sig nal format and how to use resolvers with com mercially available resolvertodigital converters adm tec Advanced Motion Technology Electrical Characteristics Electrically the Rotasyn like a traditional resolver is a tra Geoff Huston. APNIC. . One of those . wtf. moments…. This figure was produced as part of some related work that was measuring the additional time penalty that would apply when the name being resolved was signed using DNSSEC.. Geoff . Huston & George . Michaelson. . APNICLabs. September 2012. What are the questions?. What proportion of DNS resolvers are DNSSEC-capable?. What proportion of users are using DNSSEC-. validatingDNS. Michaelson. . APNICLabs. September 2012. What are the questions?. What proportion of DNS resolvers are DNSSEC-capable?. What proportion of users are using DNSSEC-. validatingDNS. resolvers?. Where are these users?. APNIC. https://. xkcd.com. /1361/. Why?. Because everything you do on the net starts with a call to the DNS. If we could see your stream of queries in real time we could assemble a detailed profile of you and interests and activities. APNIC. https://. xkcd.com. /1361/. Why?. Because everything you do on the net starts with a call to the DNS. If we could see your stream of queries in real time we could assemble a detailed profile of you and interests and activities. Michaelson. . APNICLabs. October 2012. What are the questions?. What proportion of DNS resolvers are . capable of performing DNS queries using IPv6?. What proportion of users are using . IPv6-capable DNS . Chief Scientist . APNIC Labs. Why pick on the DNS?. The DNS is very . easy . to. tap . and. tamper. DNS queries are open and unencrypted. DNS payloads are not secured and tampering cannot be detected. APNIC. March 2017. The Structure of the Domain Name . Space. www.example.com. .. . (“root”). c. om.. example.com. .. www.example.com. .. Domain Names are a sequence of “labels” delimited by the period character that reflect a hierarchical name structure . APNIC. Background. All computers run with some kind of internal oscillator (called a ‘clock’). This clock manages the internal state changes at each cycle of the central processing unit. Clock ‘ticks’ are fed to a digital counter. Huston. APNIC. February 2014. The E. volution of Evil. It used to be that . they sent . evil packets to . their . chosen . victim. but this exposed the attacker, and limited the damage they could cause. Geoff Huston. APNIC. Some thoughts about . for. Well . –. guess - from the snippets that have been released. …. It was a . Mirai. attack. It used a compromised device collection. It used a range of attack vectors. Why?. Because we’ve run. out of addresses. again. We’ve been here before .... The original . ARPAnet. design from 1969 used the NCP protocol, which used 8 bit addresses. Maximum network of 256 nodes. Chief Scientist, APNIC. Through the Routing Lens …. There are very few ways to assemble a single view of the entire Internet. The lens of routing is one of the ways in which information relating to the entire reachable Internet is bought together.