Abstract

If you were to setup a new top-level domain (TLD), how many authoritative servers would you deploy? Figure 1 shows that most TLDs (∼ 50%) nowdays use 4 servers. Where would you deploy them (geographically)? And would you use anycast services (local on CDNs/ISPs, global elsewhere), unicast services or a combination of both? For existing TLDs, how can you optimize your authoritative servers setup to optimize round-trip time (RTT) to your clients, as well as better resilience against DDoS attacks [1]? These are questions that TLD operators continuously face. Consider the example of the. nl TLD (the Netherlands), which has 8 authoritative servers. Figure 2 shows how they are deployed (3 employ IP anycast). A resolver, on the user’s behalf, would resolve example. nl by contacting any of these eight servers, and the choice is based on the resolvers’ implementation [4].
Due to IP anycast–which allows for an authoritative server to share the same IP address across multiple machines distributed around the globe–, not all authoritative servers have the same number of physical machines. Figure 3 shows the authoritative servers for. nl, in which the area of each authoritative server is proportional to their number of sites/locations. netnod auth. server is by far the largest. As a result of these differences, one could expect that the. nl netnod auth. server would receive more traffic than the others. That is not the case. Figure 4 shows traffic to the auth servers (area proportional to the total number of incoming queries in June, 2016). First, ns5 in fact handles more traffic than netnod. One of the reasons is that ns5 is an local anycast server deployed in …

Date

2016

Authors

Ricardo de O Schmidt, Giovane CM Moura, John Heidemann, Moritz Müller, Marco Davids, Cristian Hesselman