Security Now! | Open DNS (ODNS)

New Measurements

We started to continue our measurements on a weekly base!
Visit Measurements to see our current results.

Synopsis

We revisit the open DNS (ODNS) infrastructure and, for the first time, systematically measure and analyze transparent forwarders, DNS components that transparently relay between stub resolvers and recursive resolvers. We introduce DNSRoute++, a new traceroute approach that leverages the behaviour of transparent forwarders and explores interconnectivity in the ODNS.

Key findings include that transparent forwarders contribute 26% to the current ODNS infrastructure, missed by common scanning campaigns; and that many transparent forwarders relay to a few selected public resolvers such as Google and Cloudflare, which confirms a consolidation trend of DNS stakeholders. Full access to data will follow soon.