A Root with a view…

by John L. Crain on November 26, 2007

Running a DNS server that serves the root gives an interesting view into the world of the DNS.With the ongoing improvements to the ICANN operated L-ROOT we’ve been fortunate enough to be able to make use of the “DNS Statistics Collector” tool.

http://dns.measurement-factory.com/tools/dsc/

“DSC” allows us to generate different views of the DNS queries we have been seeing at the L-ROOT systems. Both to the current IP address (199.7.83.42) and to the old address (198.32.64.12).

  • The above graph shows the commonly queried Top Level Domains for a single day and the type of queries being asked. These are queries seen across l.root-servers.net. The TLDs change from day to day but some are persistent.No surprises in there really although some of the TLDs being queried should raise a few eyebrows.Seeing mainly addresses record queries (A and AAAA) for .com or .net, or a lot of requests for reverse delegation informations (PTR) in .arpa are logical things to see.However, “.local” is constantly in the top five of queries which is likely an indication of misconfiguration somewhere. Regular appearances are also made by “.localhost”, “.belkin”, “.home”, “.invalid”, “.localdomain” and “.domain”.I leave it to the reader to decide why this is and at whom to point fingers…

    Clearly one thing is certain, a large portion of the queries we are seeing are for non existing domains and hence get answered with “NXDOMAIN” (See above).Oh and one last snippet of information. I know that sometimes people do not allow DNS queries over TCP. This is actually not a good idea. According to the RFCs it is OK to query over TCP and in the case of a large enough answer (over 512 bytes) then TCP is typically the way to get that. So although the number of TCP queries is small compared to those using UDP, they can be valid queries.

    Special thanks have to go to the folks who produced DSC . If only for making my life easier.If people want to see more data or would like to hear more about what we are doing in L-ROOT operations then speak up and I will do my best to inform. After all we run this for the community.Also see http://l.root-servers.org for information on L-ROOT operations

  • { 8 comments }

    YouXia 12.17.07 at 2:51 am

    .cn is growing up, but it can not meet the needs of it’s population.
    idn.idn will provides all the nutrition Chinese needs.

    pagerank 01.01.08 at 8:15 am

    we want the .tr

    AlexG 02.08.08 at 6:39 am

    .cn is growing up every day

    Guiyang Hotel 02.11.08 at 2:12 am

    What is .tr?

    song 02.24.08 at 8:15 am

    good point. It is actually easier to make a living online if you come from a country where the cost of living is lower. I’m living in China at the moment and it would be much easier to make a living online here than it would be if I lived at home in Australia.

    Opony 03.12.08 at 4:05 am

    We want the .tr!

    Antonio 03.14.08 at 12:05 pm

    Can anyone tell me which is the total percentage of wrong URL queries made by internet users? It is not so clear…

    John L. Crain 03.17.08 at 8:27 am

    The project Day In The Life or “DITL” took a look at this and found 98% of queries to some route servers to be “Bogus” or “Invalid”. Many of those queries are made by automated/broken processes rather than by users though

    http://www.caida.org/projects/ditl/

    Once again DITL will take place this year and we will see if things have changed.

    Keep an eye on the CAIDA.ORG website for reports etc.

    Comments on this entry are closed.