Presentation is loading. Please wait.

Presentation is loading. Please wait.

Geoff Huston APNIC Measuring ‘s Public DNS. How many of you have done this? And in the last few months did any of you switch it back off again?

Similar presentations


Presentation on theme: "Geoff Huston APNIC Measuring ‘s Public DNS. How many of you have done this? And in the last few months did any of you switch it back off again?"— Presentation transcript:

1 Geoff Huston APNIC Measuring ‘s Public DNS

2

3

4 How many of you have done this? And in the last few months did any of you switch it back off again?

5 The Measurement Technique Three URLs: the good (DNSSEC signed) the bad (invalid DNSSEC signature) the control (no DNSSEC at all) And an online ad system to deliver the test to a large pseudo-random set of clients

6 The DNS Resolver Model

7 The Web Fetch Model

8 Matching Client to Resolver DNS Resolver DNS Resolver DNS Resolver DNS Resolver

9 Some Results Web + DNS query log processing 9 – 26 May 2013 Completed Test Count: 2,498,497

10 Who Used Google’s Public DNS in May 2013? Used Google’s Public DNS servers: 7.2% Used other resolvers: 92.8%

11 Who Used Google’s Public DNS in May 2013? Used Google’s Public DNS servers: 7.2% What we saw when resolving the badly DNSSEC- signed DNS name was that a number of clients interpreted the SERVFAIL response as a signal to try other configured resolvers. So perhaps we should split this count into the end users who use Google’s P-DNS service EXCLUSIVELY, and the end users who have added Google’s P-DNS service into the local list of resolvers

12 Who Used Google’s Public DNS in May 2013? Used Google’s Public DNS servers: 7.2% – Exclusively Used Google’s P-DNS: 5.3% – Used a mix of Google P-DNS + others: 1.9% Used other resolvers: 92.8%

13 Who Used Google’s Public DNS in May 2013? RankCCCount%_All%_Some%_NotDNSSEC%_All%_Some%_NoneCountry 1VN Vietnam 2JM Jamaica 3GT Guatemala 4BN Brunei Darussalam 5ID Indonesia 6LA Lao People's Democratic Republic 7TR Turkey 8HN Honduras 9AZ Azerbaijan 10TZ United Republic of Tanzania 11NI Nicaragua 12BO Bolivia 13EG Egypt 14GH Ghana 15PS Occupied Palestinian Territory 16IT Italy 17DZ Algeria 18BD Bangladesh 19MY Malaysia 20UA Ukraine 21AL Albania 22IQ Iraq 23FJ Fiji 24HT Haiti 25PK Pakistan 26KE Kenya 27PA Panama 28LY Libya 29CR Costa Rica 30MV Maldives 31BR Brazil % of clients who appear to use Google’s DNS resolvers exclusively % of clients who appear to use Google’s DNS Servers and other local resolvers % of clients who appear not to use Google’s DNS Servers at all

14 Who Used Google’s Public DNS in May 2013? RankCCCount%_All%_Some%_NotDNSSEC%_All%_Some%_NoneCountry 1VN Vietnam 2JM Jamaica 3GT Guatemala 4BN Brunei Darussalam 5ID Indonesia 6LA Lao People's Democratic Republic 7TR Turkey 8HN Honduras 9AZ Azerbaijan 10TZ United Republic of Tanzania 11NI Nicaragua 12BO Bolivia 13EG Egypt 14GH Ghana 15PS Occupied Palestinian Territory 16IT Italy 17DZ Algeria 18BD Bangladesh 19MY Malaysia 20UA Ukraine 21AL Albania 22IQ Iraq 23FJ Fiji 24HT Haiti 25PK Pakistan 26KE Kenya 27PA Panama 28LY Libya 29CR Costa Rica 30MV Maldives 31BR Brazil % of DNSSEC validating clients who appear to use Google’s DNS resolvers exclusively % of DNSSEC validating clients who appear to use Google’s DNS Servers and other local resolvers % of DNSSEC validating clients who appear not to use Google’s DNS Servers at all

15 Who Used Google’s Public DNS in May 2013? RankCCCount%_All%_Some%_NotDNSSEC%_All%_Some%_None Country 1VN Vietnam 2JM Jamaica 3GT Guatemala 4BN Brunei Darussalam 5ID Indonesia 6LA Lao People's Democratic Republic 7TR Turkey 8HN Honduras 9AZ Azerbaijan 10TZ United Republic of Tanzania 11NI Nicaragua 12BO Bolivia 13EG Egypt 14GH Ghana 15PS Occupied Palestinian Territory 16IT Italy 17DZ Algeria 18BD Bangladesh 19MY Malaysia 20UA Ukraine 21AL Albania 22IQ Iraq 23FJ Fiji 24HT Haiti 25PK Pakistan 26KE Kenya 27PA Panama 28LY Libya 29CR Costa Rica 30MV Maldives 31BR Brazil

16 But then we got a little concerned about third parties sniffing the fumes from our data exhaust June 2013

17 Afterward June 2013

18 Who Used Google’s Public DNS in September 2013? RankCCCount%_All%_Some%_NotDNSSEC%_All%_Some%_None Country 1VN Vietnam 2NG Nigeria 3GT Guatemala 4AM Armenia 5AZ Azerbaijan 6BD Bangladesh 7JM Jamaica 8HN Honduras 9ID Indonesia 10DZ Algeria 11IQ Iraq 12GH Ghana 13PS Occupied Palestinian Territory 14TZ United Republic of Tanzania 15TR Turkey 16MY Malaysia 17EG Egypt 18CR Costa Rica 19BR Brazil 20IT Italy 21UA Ukraine 22LB Lebanon 23CM Cameroon 24PA Panama 25AL Albania 26KE Kenya 27AR Argentina 28CZ Czech Republic 29MK The former Yugoslav Republic of Macedonia 30UG Uganda 31KZ Kazakhstan

19 Who Turned Google OFF? Rank CC Delta OFF MAY% SEP % Country 1NI37.77%56.15%18.38%Nicaragua 2PS22.73%53.15%30.42%Occupied Palestinian Territory 3BO21.54%33.28%11.74%Bolivia 4BN10.27%56.10%45.83%Brunei Darussalam 5KE8.28%27.50%19.22%Kenya 6AL6.41%16.78%10.37%Albania 7LA6.36%26.00%19.64%Lao People's Democratic Republic 8MZ6.33%17.54%11.21%Mozambique 9PK6.18%18.27%12.09%Pakistan 10JM5.34%27.95%22.61%Jamaica 11TR5.25%19.99%14.74%Turkey 12AZ5.17%49.15%43.98%Azerbaijan 13TZ4.98%39.73%34.75%United Republic of Tanzania 14GT3.54%36.45%32.91%Guatemala 15BA3.17%9.05%5.88%Bosnia and Herzegovina 16SR2.59%5.09%2.50%Suriname 17IT2.38%14.40%12.02%Italy 18EG2.21%18.88%16.67%Egypt 19UG2.11%18.47%16.36%Uganda 20AF2.10%50.25%48.15%Afghanistan 21AO1.93%27.86%25.93%Angola 22JO1.92%5.37%3.45%Jordan 23SI1.82%6.25%4.43%Slovenia 24LY1.65%10.74%9.09%Libya 25JP1.56%3.74%2.18%Japan 26KG1.33%8.91%7.58%Kyrgyzstan 27PR1.25%11.61%10.36%Puerto Rico 28PA1.10%10.81%9.71%Panama 29TW1.07%6.35%5.28%Taiwan 30FJ0.99%14.29%13.30%Fiji % of users per country who reduced their use of Google’s Public DNS: May to September

20 Who Turned Google ON? RankCC Delta ON MAY% SEP%Country 1KH21.74%9.51%31.25%Cambodia 2TN18.71%4.32%23.03%Tunisia 3EU17.03%8.23%25.26%European Union 4DZ16.14%37.18%53.32%Algeria 5NG15.78%29.93%45.71%Nigeria 6AM15.15%10.08%25.23%Armenia 7MW14.40%24.75%39.15%Malawi 8AW9.13%2.84%11.97%Aruba 9BD8.25%22.19%30.44%Bangladesh 10LK8.21%3.75%11.96%Sri Lanka 11ZW7.63%22.15%29.78%Zimbabwe 12GH7.38%21.38%28.76%Ghana 13IQ6.96%22.06%29.02%Iraq 14MV6.59%18.92%25.51%Maldives 15BH5.63%7.97%13.60%Bahrain 16MM5.52%11.44%16.96%Myanmar 17PH5.25%7.01%12.26%Philippines 18VN5.15%42.03%47.18%Vietnam 19DO4.35%5.31%9.66%Dominican Republic 20AR4.03%6.95%10.98%Argentina 21SV4.02%4.59%8.61%El Salvador 22KZ3.85%8.71%12.56%Kazakhstan 23ET3.11%7.66%10.77%Ethiopia 24BW3.09%1.75%4.84%Botswana 25BR2.68%11.86%14.54%Brazil 26HN2.60%37.06%39.66%Honduras 27MD2.59%3.10%5.69%Republic of Moldova 28TT2.57%2.35%4.92%Trinidad and Tobago 29PY2.48%5.54%8.02%Paraguay 30TH2.47%10.40%12.87%Thailand % of users per country who increased their use of Google’s Public DNS: May to September

21 “It’s not me – it’s my ISP!” So lets look at the data again by origin AS rather than by country Which ISPs send most of their customer’s DNS queries to Google’s Public DNS?

22 “It’s not me – it’s my ISP!” RankASCount%All%Some%NotDNSSEC%All%Some%NoneASName BAKCELL-AS "Baksell LTD" LLC,AZ,Azerbaijan LINKEM-AS Linkem spa,IT,Italy DIGICEL ASN-Digicel,JM,Jamaica GOOGLE - Google Inc.,US,United States of America Televisao Cidade S/A,BR,Brazil SK-DSIDATA DSi data s.r.o.,SK,Slovakia SATFILM-AS Sat Film Sp. z o.o. i Wspolnicy Sp. k.,PL,Poland PROCONO-AS PROCONO S.A.,ES,Spain PURELINE Pure Line Co.,IQ, Iraq Silica Networks Argentina S.A.,AR,Argentina VNPT-AS-VN VNPT Corp,VN,Vietnam EXCELL-AS Excellmedia,IN,India Cablemas Telecomunicaciones SA de CV,MX,Mexico SCTV-AS-VN SaiGon Tourist cable Televition Company,VN,Vietnam COMCEL S.A.,CO,Colombia VIETEL-AS-AP Vietel Corporation,VN,Vietnam MADA-AS Mada Alarab AS,PS,Occupied Palestinian Territory Cablevision Red, S.A de C.V.,MX,Mexico COPEL Telecom S.A.,BR,Brazil Newcom Limited,GT,Guatemala MILLENICOM-AS MILLENI.COM,DE,Germany RO-TVSAT-AS TV SAT 2002 SRL,RO,Romania EMBRATEL-EMPRESA BRASILEIRA DE TELECOMUNICA??ES SA,BR,Brazil SERVIHOSTING-AS ServiHosting Networks S.L.,ES,Spain MERCO COMUNICACIONES,AR,Argentina Cablemas Telecomunicaciones SA de CV,MX,Mexico AZTELEKOM Azerbaijan Telecomunication ISP,AZ,Azerbaijan Telefonica de Argentina,AR,Argentina COMPANHIA DE TELECOMUNICACOES DO BRASIL CENTRAL,BR,Brazil DELTA-TELECOM-AS Delta Telecom LTD.,AZ,Azerbaijan May 2013

23 “It’s not me – it’s my ISP!” RankASCount%All%Some%NotDNSSEC%All%Some%NoneASName GOOGLE - Google Inc.,US,United States of America VNPT-AS-VN VNPT Corp,VN,Vietnam VIETEL-AS-AP Vietel Corporation,VN,Vietnam FPT-AS-AP TFinancing & Promoting Technology,VN,Vietnam EMBRATEL-EMPRESA BRASILEIRA DE TELECOMUNICA??ES SA,BR,Brazil MILLENICOM-AS MILLENI.COM,DE,Germany HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd,IN,India TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID,Indonesia GBLX Global Crossing Ltd.,US,United States of America CAT-IDC-4BYTENET-AS-AP,TH,Thailand MTS-INDIA-IN 334,Udyog Vihar,IN,India TE-AS TE-AS,EG,Egypt ULAKNET National Academic Network and Information Center,TR,Turkey COGENT Cogent/PSI,US,United States of America RSMANI-NKN-AS-AP National Knowledge Network,IN,India BIZNET-AS-AP BIZNET NETWORKS,ID,Indonesia AUGERE-PK AUGERE-Pakistan,PK,Pakistan ALGTEL-AS,DZ,Algeria Telgua,GT,Guatemala RELIANCE-COMMUNICATIONS-IN Reliance Communications.DAKC MUMBAI,IN,India TKTELEKOM-AS TK Telekom sp. z o.o.,PL,Poland CENTENNIAL-PR - Centennial de Puerto Rico,PR,Puerto Rico TTNET-MY TIME dotCom Berhad,MY,Malaysia Gigared S.A.,AR,Argentina DOGAN-ONLINE DOGAN TV DIGITAL PLATFORM ISLETMECILIGI A.S.,TR,Turkey ASMedi,MA,Morocco BBIL-AP BHARTI Airtel Ltd.,IN,India Global Village Telecom,BR,Brazil TMNET-AS-AP TM Net, Internet Service Provider,MY,Malaysia TTNET Turk Telekomunikasyon Anonim Sirketi,TR,Turkey September 2013

24 Who turned Google OFF? RankASDeltaMaySepAS Name %75.99%13.50%EXCELL-AS Excellmedia,IN,India %57.96%10.97%HADARA-AS Hadara Technologies Private Shareholding Company,PS,Occupied Palestinian Territory %37.46%22.73%Telgua,GT,Guatemala %38.97%24.76%WITRIBE-AS-AP WITRIBE PAKISTAN LIMITED,PK,Pakistan %16.22%3.02%Telmex Colombia S.A.,CO,Colombia %12.45%1.75%BHARTI-MOBILITY-AS-AP Bharti Airtel Ltd. AS for GPRS Service,IN,India %18.05%10.37%SAN-JUAN-CABLE - San Juan Cable, LLC,PR,Puerto Rico %14.29%6.86%PKTELECOM-AS-PK Pakistan Telecom Company Limited,PK,Pakistan %20.41%13.48%TELLCOM-AS TELLCOM ILETISIM HIZMETLERI A.S.,TR,Turkey %19.35%12.48%TURKSAT-AS Turksat Uydu Haberlesme ve Kablo TV Isletme A.S.,TR,Turkey %21.69%14.83%DOGAN-ONLINE DOGAN TV DIGITAL PLATFORM ISLETMECILIGI A.S.,TR,Turkey %21.50%15.11%SEEDNET Digital United Inc.,TW,Taiwan %6.21%0.00%NETWORX-BG Networx-Bulgaria Ltd.,BG,Bulgaria %15.99%10.41%OPITEL Vodafone Omnitel N.V.,IT,Italy %41.00%35.51%CAT-IDC-4BYTENET-AS-AP,TH,Thailand %18.65%13.30%TTNET TTNet A.S.,TR,Turkey %14.28%9.11%TISCALI-IT Tiscali Italia S.P.A.,IT,Italy %24.75%20.04%BBIL-AP BHARTI Airtel Ltd.,IN,India %19.26%14.56%TTNET Turk Telekomunikasyon Anonim Sirketi,TR,Turkey %30.35%25.88%TE-AS TE-AS,EG,Egypt %19.94%15.65%GHANATEL-AS,GH,Ghana %18.39%14.16%KOCNET VODAFONE NET ILETISIM HIZMETLERI A.S,TR,Turkey %6.81%3.67%CHINANET-SH-AP China Telecom (Group),CN,China %6.65%3.69%AS-NLAYER - nLayer Communications, Inc.,US,United States of America %13.77%10.86%ASN-INFOSTRADA WIND Telecomunicazioni S.p.A.,IT,Italy %2.70%0.00%MTC-VB-AS MTC-Vodafone Bahrain,BH,Bahrain %15.01%12.39%ASN-IBSNAZ Telecom Italia S.p.a.,IT,Italy %15.71%13.32%YTLCOMMS-AS-AP YTL COMMUNICATIONS SDN BHD,MY,Malaysia %6.62%4.31%MAGIX-SG-AP Magix Broadband Network,SG,Singapore %6.57%4.33%ETISALAT-MISR,EG,Egypt % of users per Origin AS who decreased their use of Google’s Public DNS: May to September

25 Who turned Google ON? RankASDeltaMaySepAS Name %0.22%64.94%MOBITEL-LK IS Group, No:108, W A D Ramanayake Mawatha,,LK,Sri Lanka %5.40%30.14%TN-BB-AS Tunisia BackBone AS,TN,Tunisia %26.88%45.56%BAYAN-TELECOMMUNICATIONS Bayan Telecommunications, Inc.,PH,Philippines %36.67%54.01%ALGTEL-AS,DZ,Algeria %30.91%44.71%MTS-INDIA-IN 334,Udyog Vihar,IN,India %6.29%17.50%MTNNS-AS,ZA,South Africa %28.11%37.11%FPT-AS-AP The Corporation for Financing & Promoting Technology,VN,Vietnam %2.70%10.56%TRICOM,DO,Dominican Republic %7.87%15.69%CITYCOMNETWORKS-AS CITYCOM NETWORKS PVT LTD,IN,India %12.71%19.66%Techtel LMDS Comunicaciones Interactivas S.A.,AR,Argentina %1.40%7.44%SMARTBRO-PH-AP Smart Broadband, Inc.,PH,Philippines %5.63%11.52%HURRICANE - Hurricane Electric, Inc.,US,United States of America %8.77%14.50%ASN-SPBNIT OJSC Rostelecom,RU,Russian Federation %14.13%19.38%TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN,India %28.47%33.51%RSMANI-NKN-AS-AP National Knowledge Network,IN,India %49.01%53.56%VNPT-AS-VN VNPT Corp,VN,Vietnam %4.41%8.60%Axtel, S.A.B. de C.V.,MX,Mexico %2.55%6.70%CWJAM ASN-CWJAMAICA,JM,Jamaica %5.59%9.59%Telecom Argentina S.A.,AR,Argentina %4.47%8.45%BSNL-NIB National Internet Backbone,IN,India %25.02%28.92%GBLX Global Crossing Ltd.,US,United States of America %5.63%9.42%TRUE-AS-AP True Internet Co.,Ltd.,TH,Thailand %3.94%7.66%America Movil Peru S.A.C.,PE,Peru %21.86%25.57%TTNET-MY TIME dotCom Berhad,MY,Malaysia %5.20%8.81%CTE S.A. de C.V.,SV,El Salvador %3.42%6.99%ASIANET Cable ISP in India,IN,India %3.09%6.65%Maxcom Telecomunicaciones, S.A.B. de C.V.,MX,Mexico %3.76%7.13%WIRELESSNET-ID-AP WIRELESSNET AS,ID,Indonesia %2.62%5.92%Prima S.A.,AR,Argentina %3.08%6.35%Compa??a Dominicana de Tel?fonos, C. por A. - CODETEL,DO,Dominican Republic % of users per Origin AS who increased their use of Google’s Public DNS: May to September

26


Download ppt "Geoff Huston APNIC Measuring ‘s Public DNS. How many of you have done this? And in the last few months did any of you switch it back off again?"

Similar presentations


Ads by Google