Security Now! | Open DNS (ODNS)

News

2024-01-08: Start of DNS over TCP measurements.
2021-12-09: Change to weekly measurements.
2021-04-21: Start of DNS over UDP measurements.

Synopsis

We revisit the open DNS (ODNS) infrastructure and, for the first time, systematically measure and analyze transparent forwarders, DNS components that transparently relay between stub resolvers and recursive resolvers. We introduce DNSRoute++, a new traceroute approach that leverages the behaviour of transparent forwarders and explores interconnectivity in the ODNS.

Key findings include that transparent forwarders contribute significantly to the current ODNS infrastructure, missed by common scanning campaigns; and that many transparent forwarders relay to a few selected public resolvers such as Google and Cloudflare, which confirms a consolidation trend of DNS stakeholders. Full access to data will follow soon.