Re: [ga] DNS Root-Level Pollution

["Jeffrey A. Williams" <jwkckid1@xxxxxxxxxxxxx>]

Danny and all,

  Your exactly right here.  This continues to be a problem that has
yet to be properly addressed and is difficult to address as well.
I believe this was first noticed by David Conrad, than Dr. Joe B.,
Paul Vixe and myself in 2003.  It's clear that ICANN nor the IANA
has addressed this problem effectively, if at all, and are seemingly
unlikely to do so in any meaningful manner in the near term.

  Methods of addressing this problem can be addressed by the
Root server operators rather easily by denying Root server queries
if traffic to those Root servers becomes excessive by any one
party.  Redundancy in Name server definition and proper Cache
maintanance as a requirement by Domain Name holders as a matter
of registration contract requirement would also be helpful IF the
registries in particular are willing, as they should, to manage
their Registrant's appropriately.  Take down proceedures may 
be necessary for Errant Registrants and Registries that fail
in their responsibility to ensure proper name server redundancy,
and/or cache managment is conducted.

-----Original Message-----
>From: Danny Younger <dannyyounger@xxxxxxxxx>
>Sent: Jun 13, 2008 3:14 PM
>To: ga@xxxxxxxxxxxxxx
>Subject: [ga] DNS Root-Level Pollution
>
>
>http://www.caida.org/research/dns/roottraffic/comparison06_07.xml
>
>Interesting CAIDA study, especially regarding some of the conclusions cited 
>below:
>
>"The proportion of invalid traffic, i.e., DNS pollution, hitting the roots is 
>still high, over 99% of the queries should not even be sent to the root 
>servers. We found an extremely strong correlation both years: the higher the 
>query rate of a client, the lower the fraction of valid queries. 
>Repeated, identical and "referral-not-cached" queries constituted 69% of the 
>total load on the roots during the 2007 observations. We are not in a position 
>to evaluate the cost of this pollution to the root operators or to the 
>Internet, nor the cost of cleaning it up. Some sources of this pollution could 
>be mitigated by DNS operators locally serving common zones. For the March 2008 
>DITL experiment we will further investigate the patterns of these invalid 
>queries and identify other ways to reduce the DNS pollution at the roots." 
>
>
>
>
>      

Regards,

Spokesman for INEGroup LLA. - (Over 281k members/stakeholders strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is
very often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B;
liability depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS.
div. of Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail
jwkckid1@xxxxxxxxxxxxx
My Phone: 214-244-4827