DNS Alphabet Soup

Download Report

Transcript DNS Alphabet Soup

DNS Alphabet Soup
IPv6

Increases packet size

Both transport and question/answer sections

Preference: goes first

Fragmentation done by end points (ICMPv6!)
DNSSEC

Created to add security to server answers

Needs chain of trust (from root, now signed)

Manual periodic updates by server operator
(zone owner, and recursive as well)

Significant increase in packet size
EDNS

Added size of DNS packets

TCP transport

Fragmentation may be needed – caution Ipv6


Real servers need to support it (not your home
router)
Latency issue – especially for mobile operator
IDN

домены.на.другом.языке

Confusion by user and operator possible

Variant IDNs coming – more confusion?
Conclusion

Challenges: DNS in new ISP service

If it works, your customers happy as before

If not, they look elsewhere

Technology keeps changing – be aware
Contacts

Dmitry Kohmanyuk

http://kohmanyuk.tel/

[email protected]