1. Strengths: The paper sketches the complexity of today's DNS infrastructure and shows a number of clever specific techniques to understand some aspects of DNS resolvers. The paper is written and presented well. It describes the complex infrastructure of DNS very well so that someone who is not keen on the system can also appreciate the paper. The reviewers also like the methodology to discove...

The goal of Link-Local Multicast Name Resolution (LLMNR) is to enable name resolution in scenarios in which conventional DNS name resolution is not possible. LLMNR supports all current and future DNS formats, types, and classes, while operating on a separate port from DNS, and with a distinct resolver cache. Since LLMNR only operates on the local link, it cannot be considered a substitute for DNS.

DNS dynamic updates can be used to modify the data of a DNS zone. This can be used to update DNS records of hosts with dynamic IP addresses, for example. DNS dynamic updates can be authenticated using the DNSSEC transaction signatures or the TSIG mechanism. While there are existing mechanisms for authenticating the source of update requests, mechanisms for authorization, i.e. specifying who is ...

— Domain Name System (DNS) maps domain names to IP addresses in the Internet. DNS can, however, be used as a Location Manager (LM) for mobility management in wireless mobile networks. The suitability and performance of DNS as a LM for locating mobile hosts (MH) has not been studied in the past. In this paper, we develop an analytical model to measure the performance of DNS as LM for IP diversit...

Domain Name System (DNS) is designed to transform human readable Internet addresses to corresponding Internet Protocol (IP) addresses. Current DNS relies on hierarchical infrastructure. It could be useful to use services provided by DNS in Local Area Networks (LAN) when there is no Internet connectivity. This can be caused by temporary network errors. There is proposals on using Distributed Has...

Almost every Internet communication is preceded by a translation of a DNS name to an IP address. Therefore monitoring of DNS traffic can effectively extend capabilities of current methods for network traffic anomaly detection. In order to effectively monitor this traffic, we propose a new flow metering algorithm that saves resources of a flow exporter. Next, to show benefits of the DNS traffic ...

Energy transfers within LES and DNS grids are studied. The spectral eddy viscosity for conventional dynamic Smagorinsky and variational multiscale LES methods are compared with DNS results. Both models underestimate the DNS results for a very coarse LES, but the dynamic Smagorinsky model is significantly better. For moderately to well-refined LES, the dynamic Smagorinsky model overestimates the...

Efforts are underway to add security to the DNS protocol. We have observed that if BIND would just do what the DNS specifications say it should do, stop crashing, and start checking its inputs, then most of the existing security holes in DNS as practiced would go away. To be sure, attackers would still have a pretty easy time co-opting DNS in their break-in attempts. Our aim has been to get BIN...

China’s Great Firewall passively inspects network traffic and disrupts unwanted communication by injecting forged DNS replies or TCP resets. We attempted to comprehensively examine the structure of the DNS injector, using queries from both within and outside China. Using these probes, we were able to localize the DNS monitors’ locations, extract the firewall’s DNS blacklist of approximately 15,...

This document specifies how DNS resource records are named and structured to facilitate service discovery. Given a type of service that a client is looking for, and a domain in which the client is looking for that service, this mechanism allows clients to discover a list of named instances of that desired service, using standard DNS queries. This mechanism is referred to as DNS-based Service Di...