Overcoming DNSSEC performance issues with DHT-based architectures - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès IM '13 : IFIP/IEEE International Symposium on Integrated Network Management Année : 2013

Overcoming DNSSEC performance issues with DHT-based architectures

Résumé

DNSSEC deployment for large Internet Service Provider (ISP) is an important issue. With the current architecture, migration of current DNS resolving platform requires 5 times more nodes. This paper introduces alternative architectures where the DNS traffic is split between the nodes of the platform according to the queried Fully Qualified Domain Names (FQDNs), rather than the IP addresses of the queries. We show that such type of architecture requires up to 30% less nodes. However, this load balancing technic results in a non uniform distribution of the resources among the nodes of the platform. Furthermore, operational teams are reluctant to modify the existing load balancing infrastructure. Thus, we investigate how pro-active caching over a Distributed Hash Table (DHT) protocol, can optimize the resources of an ISP operational DNSSEC resolving platform. We find out that it can reduce the number of nodes by 3:5.
Fichier principal
Vignette du fichier
2012-12-IM2013-DNSSEC-DHT.pdf (239.08 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00860147 , version 1 (10-09-2013)

Identifiants

  • HAL Id : hal-00860147 , version 1

Citer

Daniel Migault, Stanislas Francfort, Stéphane Sénécal, Emmanuel Herbert, Maryline Laurent. Overcoming DNSSEC performance issues with DHT-based architectures. IM '13 : IFIP/IEEE International Symposium on Integrated Network Management, May 2013, Ghent, Belgium. pp.816-819. ⟨hal-00860147⟩
88 Consultations
282 Téléchargements

Partager

Gmail Facebook X LinkedIn More