A Deep Dive into DNS Query Failures
summary
Passive DNS logs cover 3.1 billion queries and reveal a 13.5% failure rate overall. A vs AAAA contrast is stark: A queries mostly succeed while AAAA succeed only about one third, and many resolvers never answer IPv6. Failures concentrate on a small set of domains — often malicious new gTLDs where the top three SLDs drive >80% of category failures. Public resolvers show divergent success and localization behavior. Proposals include an active system to measure resolver IPv6 support and detect volatile malicious SLDs.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:30Why to study DNS Query Failures
- 1:23Passive DNS Data
- 3:19Identification of Failed Queries
- 4:11A Primer on DNS Failures
- 4:51Failures Across Domains
- 7:13Failures Across Resolvers
- 11:38Failures Across TLDs
- 15:16Implications on Systems Design
- 18:50Conclusion
related talks
15mYou Depend on DNS, This Is How It Works and You Won't...
27mA Longitudinal, End-to-End View of the DNSSEC Ecosystem
01h 27mDNS at 30
25mDark Side of the DNS Force
34mThe Day the DNS Died
28mDarwin & Protocols
20mWho Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path
27mCoreDNS Deep Dive