Skip to Content
[CAIDA - Center for Applied Internet Data Analysis logo]
Center for Applied Internet Data Analysis
www.caida.org > publications : papers : 2020 : when_parents_children_disagree
When parents and children disagree: Diving into DNS delegation inconsistency
R. Sommese, G. Moura, M. Jonker, R. van Rijswijk-Deij, A. Dainotti, k. claffy, and A. Sperotto, "When parents and children disagree: Diving into DNS delegation inconsistency", in Passive and Active Measurement Conference (PAM), Mar 2020.
|   View full paper:    PDF    Related Presentation    |  Citation:    BibTeX    Resource Catalog   |

When parents and children disagree: Diving into DNS delegation inconsistency

Raffaele Sommese4
Giovane C.M. Moura3
Mattijs Jonker4
Roland van Rijswijk-Deij2, 4
Alberto Dainotti1
kc claffy1
Anna Sperotto4
1

CAIDA, San Diego Supercomputer Center, University of California San Diego

2

NLnet Labs

3

SIDN Labs

4

University of Twente

The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation of responsibility from parent to child zones—typically managed by different entities. RFC1034 states that authoritative nameserver (NS) records at both parent and child should be "consistent and remain so", but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.

Keywords: dns, security
  Last Modified: Wed Dec-15-2021 16:34:00 UTC
  Page URL: https://www.caida.org/publications/papers/2020/when_parents_children_disagree/index.xml