httpsopenerdns

YetiDNS:StatusafteraYearDaveySong-宋林健/BIILabs/ljsong@biigroup.
cnShaneKerr/BIILabs/shane@biigroup.
cn2016-07-17/Berlin/IEPGPreviousYetiPresentationinIEPGGoalsofthispresentation1.
ReportYetistatusafteroneyear2.
AskformoretrafficandmoreDNSguystojoinusOutlineYetiProjectMotivationProjectcoordination&setupYetiexperimentsandfindingsTODO&LessonwelearnRelatedworksanddiscussionsonDNSRootsystemICANNRSSACDocument(link)ICANNITIPanel&technicalreport(link)ICANNRootZoneKSKRollover(link)IETFdocumentrelatedtoDNSRootsystemRFC7626:DNSPrivacyConsiderations,byS.
BortzmeyerRFC7706:DecreasingAccessTimetoRootServersbyRunningOneonLoopback,byW.
Kumari,P.
HoffmanInitializingaDNSResolverwithPrimingQueries(draft-ietf-dnsop-resolver-priming)ExperiencesfromRootTestbedintheYetiDNSProject(draft-song-yeti-testbed-experience)AnIXFRFallbacktoAXFRCase(draft-song-dnsop-ixfr-fallback)ScalingtheRootbyGeoffHuston,IPJ,March2015(link)Anycastvs.
DDoS:EvaluatingtheNovember2015RootDNSEvent,byGiovane,Ricardoetc.
(link)OneslideforYetimotivationMainlyTwoconcernsExternalDependency&SurveillanceriskNewtechnologiesortriesonRootsystemYetiPS:https://github.
com/BII-Lab/.
.
.
doc/Yeti_PS.
mdFewstudiesonnewmodelofDNSRootsystem,wewanttohavetryandcontributeacent…Inspiredbypermissionlessinnovation"agooddesigncouldallowapoliticalprocessofdecidinghowcontrolforaparticularzoneshouldbesharedtostart"--ICANNITItechnicalreport3DMusingMZSKmodeltogeneratezoneCurrentYetirootservers&operators(http://yeti-dns.
org/operators.
html)25Yetirootservers(soon26)14Yetirootoperators(soon15)400+independentIPprefixvisitus,30+regularresolvers,lessthan100qps,2experimentsdonewithsomefindings.
JustkickoffKSKrolloverCurrentlyresponsesizeupto2134Bytes2016YetiWorkshopinSeoulNov12,onedaybeforeIETFOneslideforYetistatusSource:CurrentstatusofYetiDNSProject,byDaveySong,YetiWorkshopYokohama,Nov,2015TechnicalSetupMachineMostVPS3physicalmachineOSsystemmorethanhalfusingLinuxNetbsd,FreeBSDOneserverusingWindows!
DNSsoftwareBIND9NSD4.
1.
5,4.
1.
0Knot2.
0.
1,2.
1.
0WindowsDNSserver,PowerDNSTechnicalSetupWebsite,Mailman,Trac,Nagios,…3distributionmasters(DM)UsingsharedgitrepositoryforsynchronizationYetiparticipants(http://yeti-dns.
org/operators.
html)25Yetirootservers(soon26)14Yetirootservers(soon15)30+activeresolvershttp://dsc.
yeti-dns.
org/dsc-grapher.
plbinsize.
.
.
CurrentNeed:TrafficDNScachingisreallyefficient<100queries/secondPleasehelp!
SetupaYetiresolverhttp://yeti-dns.
org/join.
htmlUsednsdistwithaYetiresolverhttp://yeti-dns.
org/.
.
.
/Mirroring-traffic-using-dnsdist.
htmlTrytheymmvquerymirror(alphacode)https://github.
com/shane-kerr/ymmvExperimentsYetiisforresearch!
ExperimentalprotocolLabtest,Listproposal,Experiment,Reporthttps://github.
com/BII-Lab/.
.
.
/Experiment-Protocol.
mdQueueofexperimentshttps://github.
com/BII-Lab/.
.
.
/Experiment-Schedule.
mdExperiment:MZSKMZSKis"MultipleZSK":separateZSKforeachDMPhase1:lotsofDNSKEY(1KSK,6ZSK)SimulatesallZSKrollingatoncePhase2:actualseparateZSKVariousbugs:Linuxkernelbug,IXFRissues,.
.
.
Completed,reportwritten(pendingdataanalysis)https://github.
com/BII-Lab/.
.
.
/Report-MZSK.
mdFuturework:Non-sharedKSKZoneverificationbyYetirootserversExperiment:BGZSKBGZSKis"BigZSK":2048bitZSKMovedtotopoflistbyVerisignannouncementSkippedlabtestNosurprises(good!
)Completed,pendingreporthttps://github/.
.
.
/Experiment-BGZSK.
mdExperiment:KROLLKROLLis"KSKroll":KSKrollTestrootKSKrollbeforeICANNFirstoftwoexperiments:KROLLisnormaldouble-DSKSKrollIROLLisliketheproposedICANNrollTakesatleast30days,maybe60daysKROLLIN-PROGRESShttps://github.
com/.
.
.
/Experiment-KROLL.
mdPendingExperimentsRENUM:RootServerRenumbering5011X:RFC5011Roll-BackFAKER:LotsofRootServersDOT-Y:RenameServersto.
YETI-DNSPMTNC:PrimingTruncationECDSA:KSKECDSARollFSTRL:FrequentZSKRollTCPRT:TCP-onlyRootNewideasarewellcome!
TODOWearegoingtoFinishthePendingExperiments,deliverresultsandfindingsDofinegrainedresearchonyetiDataanalysisTrytouseENTRADAdevelopedbySIDNhttp://entrada.
sidnlabs.
nl/PresentYetiworktorelatedbodiesandInterestedpeopleLessonswelearnsofarItisalwayseasiertosaythantodoTobuildandoperatearesearchtestbedissystematicworkYetiisstartedwithinspirationbutlackoffullpreparationItisdrivenbyYeticommunityandpeoplewithquestions,technicalchallenges,suspects…(stillnow)CoordinationamongYetiparticipantsarenotaeasyjob!
CurrentIANARootoperatorsdeservethecreditMoretechnicalfindingspleaserefertoYetiexperiencedraftConclusionResultsarefinallyappearingDon'tforgettosendusqueries!
JoinusatthenextYetiWorkshopBeforeIETF97inSeoul(2016-11-12)LookforqualifiedspeakersonRootserverreserachImageCreditsTraffic:https://www.
youtube.
com/.
.
.
0rOO4qlzJVQScience:https://commons.
wikimedia.
org/.
.
.
nd.
svg