DNS Alphabet Soup
Download
Report
Transcript DNS Alphabet Soup
DNS Alphabet Soup
IPv6
Increases packet size
Both transport and question/answer sections
Preference: goes first
Fragmentation done by end points (ICMPv6!)
DNSSEC
Created to add security to server answers
Needs chain of trust (from root, now signed)
Manual periodic updates by server operator
(zone owner, and recursive as well)
Significant increase in packet size
EDNS
Added size of DNS packets
TCP transport
Fragmentation may be needed – caution Ipv6
Real servers need to support it (not your home
router)
Latency issue – especially for mobile operator
IDN
домены.на.другом.языке
Confusion by user and operator possible
Variant IDNs coming – more confusion?
Conclusion
Challenges: DNS in new ISP service
If it works, your customers happy as before
If not, they look elsewhere
Technology keeps changing – be aware
Contacts
Dmitry Kohmanyuk
http://kohmanyuk.tel/
[email protected]