Emile Aben

Interesting Graphs - Priming Queries to the Root Servers

Emile Aben

4 min read

0 You have liked this article 0 times.
0

There was a slight increase in the number of sources that issue priming queries to DNS root servers seen on 18 March 2010, right after the introduction of a signed .arpa zone. See here an analysis and some graphs.


I looked a bit more at the slight increase in the number of sources that issue priming queries to DNS root servers I saw on 18 March, right after the introduction of a signed .arpa zone. The short summary is that I didn't find anything conclusive.

The increase I saw was caused by a couple of K-root nodes and was most visible on the AMS-IX (Amsterdam, Netherlands) node and the MIX (Milan, IT) node, but not on all nodes. For the AMS-IX and MIX node I found that the increase was caused by sources that had an IP TTL between 64 and 128, and these sources didn't have EDNS, so no DNSSEC capabilities.

I looked at priming queries collected by others as part of DNS-OARC . For the aggregate of root server nodes that data was available for, there is no increase in number of sources sending priming queries per day (Figure 1).

 

userfiles-image-k-root-priming-global(1).png

 

Figure 1: Number of priming queried to root-servers
 

When looking at the individual instances of specific root servers, in some cases you can see an increase (L-root), a decrease (E-root), or no change (D-root, H-root) around 18 March.

So at this point the most likely explanation for the increase of sources issuing priming queries to K-root that we reported earlier, is that some population of resolvers started to query K-root a bit more often, relative to the other root servers.

Below are some IMHO aesthetically pleasing pictures of the number of sources issuing priming queries to root server nodes, relative to the average for the specific node over the period that is plotted (2010-03-11 - 2010-03-29).

 

userfiles-image-k-root-priming-bw(1).png

 

Figure 2: Number of sources issuing priming queries relative to the average, for all root server nodes that uploaded data to DNS-OARC

 

 

userfiles-image-k-root-priming-a_color(1).png

 

Figure 3: Number of sources issuing priming queries relative to the average, A-root nodes highlighted

 

 

userfiles-image-k-root-priming-c_color.png

 

Figure 4: Number of sources issuing priming queries relative to the average, C-root nodes highlighted
 

 

userfiles-image-k-root-priming-d_color(1).png

 

Figure 5: Number of sources issuing priming queries relative to the average, D-root node highlighted

 

 

userfiles-image-k-root-priming-e_color.png

 

Figure 6: Number of sources issuing priming queries relative to the average, E-root nodes highlighted

 

 

userfiles-image-k-root-priming-f_color.png

 
Figure 7: Number of sources issuing priming queries relative to the average, F-root nodes highlighted

 

 

userfiles-image-k-root-priming-g_color.png

 

Figure 8: Number of sources issuing priming queries relative to the average, G-root nodes highlighted
 

 

userfiles-image-k-root-priming-h_color.png

 

Figure 9: Number of sources issuing priming queries relative to the average, H-root node highlighted

 

 

userfiles-image-k-root-priming-j_color.png

 

Figure 10: Number of sources issuing priming queries relative to the average, J-root nodes highlighted

 

 

userfiles-image-k-root-priming-k_color.png

 

Figure 11: Number of sources issuing priming queries relative to the average, K-root nodes highlighted

 

 

userfiles-image-k-root-priming-l_color.png

 

Figure 12: Number of sources issuing priming queries relative to the average, L-root nodes highlighted

 

 

userfiles-image-k-root-priming-m_color.png

 

Figure 13: Number of sources issuing priming queries relative to the average, M-root nodes highlighted

 

0 You have liked this article 0 times.
0

You may also like

View more

About the author

Emile Aben Based in Amsterdam, NL

I'm a system architect/research coordinator at the RIPE NCC, where I work in the science group. I'm a chemist by training, but have been working since 1998 on Internet related things, as a sysadmin, security consultant, web developer and researcher. I am interested in technology changes (like IPv6 deployment), Internet measurement, data analysis, data visualisation, sustainability and security. I'd like to bring research and operations closer together, ie. do research that is operationally relevant. When I'm not working I like to make music (electric guitar, bass and drums), do sports (swimming, (inline) skating, bouldering, soccer), and try to be a good parent.

Comments 0