Anycast DNS. WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Outline Current Anycast routing Anycast implemented Problems resolved.

Slides:

Advertisements

Similar presentations

The subnet /28 has been selected to be further subnetted to support point-to-point serial links. What is the maximum number of serial links.

Advertisements

IPv6 Victor T. Norman.

Chapter 8 Managing Windows Server 2008 Network Services

1 o Two issues in practice – Scale – Administrative autonomy o Autonomous system (AS) or region o Intra autonomous system routing protocol o Gateway routers.

June 2007APTLD Meeting/Dubai ANYCAST Alireza Saleh.ir ccTLD

An Engineering Approach to Computer Networking

DNS. DNS is a network service that enables clients to resolve names to IP address and vice-versa. Allows machines to be logically grouped by domain names.

1 DNS. 2 BIND DNS –Resolve names to IP address –Resolve IP address to names (reverse DNS) BIND –Berkeley Internet Name Domain system Version 4 is still.

Dr. Zahid Anwar. Simplified Architecture of Linux Cluster Simplified Architecture of a Single Computer Simplified architecture of an enterprise cluster.

Application Layer Anycasting: A Server Selection Architecture and Use in a Replicated Web Service Presented in by Jayanthkumar Kannan On 11/26/03.

Hands-On Microsoft Windows Server 2003 Networking Chapter 6 Domain Name System.

Terri Lahey LCLS Facility Advisory Committee 20 April 2006 LCLS Network Security Terri Lahey.

The Domain Name System Unix System Administration Download PowerPoint Presentation.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 7: Planning a DNS Strategy.

Kevin Miller Carnegie Mellon University Three Practical Ways to Improve Your Network.

IIS and PWS. What is IIS and PWS? Microsoft Internet Information Server (IIS) and Peer Web Services (PWS) enable Windows NT servers with the ability to.

Multicast DNS Draft-aboba-dnsext-mdns-00.txt. Outline Goals and objectives Scope of the multicast DNS DNS server discovery Non-zeroconf behavior Zeroconf.

Multicast and Anycast Mike Freedman COS 461: Computer Networks

Domain Name Services Oakton Community College CIS 238.

Lecturer : Ms.Trần Thị Ngọc Hoa Chapter 2 Methods Configuring Name Resolution Methods.

11.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 11: Introducing WINS, DNS,

Terri Lahey EPICS Collaboration Meeting June June 2006 LCLS Network & Support Planning Terri Lahey.

DNS and Active Directory Integration

1 Distributed DNS best practices to build redundant, reliable architecture By Ladislav Vobr SE/SOP/I&eS, Etisalat.

Name Resolution Domain Name System.

S305 – Network Infrastructure Chapter 5 Network and Transport Layers.

Connecting Networks © 2004 Cisco Systems, Inc. All rights reserved. Exploring How IP Address Protocols Work INTRO v2.0—4-1.

Computer Networks. IP Addresses Before we communicate with a computer on the network we have to be able to identify it. Every computer on a network must.

DNS (Domain Name System) Protocol On the Internet, the DNS associates various sorts of information with domain names. A domain name is a meaningful and.

© 2006 Cisco Systems, Inc. All rights reserved.1 Microsoft Network Load Balancing Support Vivek V

1 DNS: Domain Name System People: many identifiers: m SSN, name, Passport # Internet hosts, routers: m IP address (32 bit) - used for addressing datagrams.

70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network Chapter 7: Domain Name System.

Module 5: Planning a DNS Strategy. Overview Planning DNS Servers Planning a Namespace Planning Zones Planning Zone Replication and Delegation Integrating.

TCP/SYN Attack – use ACL to allow traffic from TCP connections that were established from the internal network and block packets from an external network.

Application-Layer Anycasting By Samarat Bhattacharjee et al. Presented by Matt Miller September 30, 2002.

Operating Systems Lesson 10. Networking Communications protocol is the set of standard rules for ◦ Data representation ◦ Signaling ◦ Authentication ◦

SECURITY ZONES. Security Zones  A security zone is a logical grouping of resources, such as systems, networks, or processes, that are similar in the.

70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network Chapter 6: Name Resolution.

70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network, Enhanced Chapter 6: Name Resolution.

October 8, 2015 University of Tulsa - Center for Information Security Microsoft Windows 2000 DNS October 8, 2015.

Dynamic Host Configuration Protocol and IP Address Assignment CIS 238 Oakton Community College.

Module 4: Fundamentals of Communication Technologies.

DNS Security Pacific IT Pros Nov. 5, Topics DoS Attacks on DNS Servers DoS Attacks by DNS Servers Poisoning DNS Records Monitoring DNS Traffic Leakage.

Windows routing and resolution. Basic concepts  Host name: machine.sub-domain.domain example: mail.ubalt.edu same machine name in Windows in NetBIOS.

S305 – Network Infrastructure Chapter 5 Network and Transport Layers.

Naming March 8, Networks What is naming?  Associations between some elements in a set of names and some elements in a set of values  Binding.

Microsoft Windows Server 2003 TCP/IP Protocols and Services Technical Reference Slide: 1 Lesson 7 Internet Protocol (IP) Routing.

Fundamental Network Improvements Summer 2012 Activity May 14, 2012.

MIF Current Practices draft-mrw-mif-current-practices-01.txt Margaret Wasserman

Internet Protocols. ICMP ICMP – Internet Control Message Protocol Each ICMP message is encapsulated in an IP packet – Treated like any other datagram,

CERN IT Department CH-1211 Genève 23 Switzerland PES 1 Ermis service for DNS Load Balancer configuration HEPiX Fall 2014 Aris Angelogiannopoulos,

MICROSOFT TESTS /291/293 Fairfax County Adult Education Courses 1477/1478/1479.

IP Addressing & Routing - Down Downlink addressing –Normal addressing to any ground destination with normal ground routing –Packets addressed to another.

S305 – Network Infrastructure Chapter 5 Network and Transport Layers.

: MobileIP. : r Goal: Allow machines to roam around and maintain IP connectivity r Problem: IP addresses => location m This is important for efficient.

Rob Lister UKNOF24 17 January 2013 IXPs and Robust Configuration aka. “interesting” configs we have seen…

Chapter 4: server services. The Complete Guide to Linux System Administration2 Objectives Configure network interfaces using command- line and graphical.

THE DOMAIN NAME SYSTEM AS AN ADDRESS DIRECTORY FOR THE WORLDWIDE WEB. 1.

Naming and Service Discovery (draft-troan-homenet-naming-and-sd) IETF 85, Nov 2012 Authors: Ole Trøan(Cisco) Shwetha Bhandari (Cisco) Stephen Orr(Cisco)

1 Distributed DNS best practices to build redundant, reliable & scalable DNS architecture By Ladislav Vobr SE/SOP/I&eS Etisalat, UAE.

High Availability Linux (HA Linux)

Planning and Troubleshooting Routing and Switching

ICMP ICMP – Internet Control Message Protocol

COMP 3270 Computer Networks

IP Network Layer and Ethernet Encapsulation

DNS: Domain Name System

Windows Name Resolution

An Engineering Approach to Computer Networking

Using Service Function Chaining for In-Network Computation

Mobile IP Neil Tang 11/12/2008 CS440 Computer Networks.

Presentation transcript:

Anycast DNS

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Outline Current Anycast routing Anycast implemented Problems resolved Future

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Definitions DNS Authoritative Recursive/Caching

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Current DNS IP Address Management: Maintain DNS: ISC BIND

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Current DNS – Layer 1

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Current DNS Layer 7

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS DNS Problems 1 Load Redundancy Configuration

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS DNS Problems 2 Constituency Caching Monitoring Complexity Non-standard Domains

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS DNS Requirements Availability Redundancy Complexity Integration

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS “New” DNS Design* + Linux + ISC Bind + Cfengine + Anycast Routing

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Why Linux? Cost Hardware

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Routing - Unicast Single machine to single machine Web browsing

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Routing - Broadcast Single machine to all ARP lookup

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Routing - Multicast Single machine to some (not all) Save resources IP TV

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Routing - Anycast Single machine to one of some DNS/RADIUS/ NTP Single machine to one of some DNS/RADIUS/ NTP

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Anycast – Is it new? 95% of the root name servers Corporations (eg: easydns.com) Google

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Anycast - Implemented1 RHEL host runs Quagga (open source router) Hosts have a /30 uplink to a constituency router

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Anycast - Implemented 2 The router config for cr-adns-mc-1 router ospf ospf router-id passive-interface sit0 network /32 area network /32 area network /30 area network /32 area

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Anycast - Implemented 3 Routing entry for /32 Known via "ospf 10", distance 110, metric 11, type intra area Last update from on Vlan505, 1d05h ago Routing Descriptor Blocks: , from , 1d05h ago, via Vlan500 Route metric is 11, traffic share count is 1 * , from , 1d05h ago, via Vlan502 Route metric is 11, traffic share count is , from , 1d05h ago, via Vlan503 Route metric is 11, traffic share count is 1

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Anycast Cluster – Layer 1

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Failure - Single Node Hardware Failure Network failure Routine Maintenance

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Failure - Single Node

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Failure – MC Machine Room

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Failure – All MC

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Failure Timings Expected Worst case: 65s Technical Worst case: 105s Mitigate with unicast secondary

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Load - Authoritative

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Load - Caching

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problems Addressed – Total Load Current Total 9/5k Anycast Total 100/30K Load ~ 2k/sec Auth = 2/3

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problems Addressed – Redundancy Anycast DNS provides non instant automated fail-over

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problems Addressed – Configuration Single config for all Anycast servers

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problem Addressed - Constituency Caching Can only recommend

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problems Addressed - Monitoring

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Problem Addressed - Complexity Still complex layout Automated

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS But what about the dots? Stern warning

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Time line

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Try it $ dig HOSTNAME.BIND CH TXT "cr-adns-ech-1" >nslookup -type=TXT -class=CHAOS HOSTNAME.BIND Server: cn-ns1.uwaterloo.ca Address: HOSTNAME.BIND text = "cr-adns-ech-1"

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Future NS1 Slave diversity Second Cluster MS DNS / DDNS DHCP

WatITis | Strengthening Collaboration | December 8, 2009 | Anycast DNS Questions?