Measurements of DNS and DNSSEC

Abstract

The Domain Name System (DNS) is a fundamental component of the Internet, providing the ability to map understandable names to logical locations in the Internet. Over the past few years, DNS response messages have been increasing in length for various reasons. This thesis investigates what influences DNS response size to change, and observe changes in DNS with a focus on EDNS0, IDN and DNSSEC. The thesis starts by reviewing some important research work done in the field of Internet measurement and DNS performance, and presents comprehensive introduction of the DNS outlined the foundation of this thesis. The thesis also studied the concept of randomness in terms of security in the Domain Name System. Both the problem and a method to act against it are discussed. Measurements come from measuring tools; a software application was developed to serve the need. The thesis described its design, implementation and functions. Measurements were made from different times locally and at different locations (Auckland, Trondheim and Tokyo), to show the degree of effect on DNS response size for four possible factors. A set of analyses unveiled the true factors that influence DNS response size to conclude the thesis.