120 likes | 228 Vues
Stability is vital for root server operations. As a Senior Systems Specialist at Autonomica AB, I focus on critical factors such as server and network operations, software diversity, and operational models that enhance resilience. Our strategic approach addresses threats like DDoS attacks and ensures data integrity through authenticated transfers. Ongoing monitoring and collaboration with the organizational teams optimize our response to vulnerabilities, guaranteeing the root server’s reliability for end users and domain name holders alike.
E N D
Root Name ServiceStability Lars-Johan Liman, M.Sc.Senior Systems SpecialistAutonomica AB(i.root-servers.net)
Disclaimer • Root server organizations operate indivitually. • I can only speak authoritatively for i.root-servers.net operated by Autonomica AB based in Stockholm, Sweden.
Stability Factors • Server and network operations. • Software and hardware diversity • Location and networking diversity • Diversity in operational models • Organizational diversity • Monitoring • Operational experience • Data integrity. • Authenticated data transfers. • Monitoring
ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP AS root
ISP ISP ISP ISP AS root ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP AS root
ISP ISP ISP ISP AS root ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP AS root
ISP ISP ISP ISP AS root ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP ISP AS root
Unicast: INTERNET RootNS
Root Anycast: Root Root Inter-net Root Root Root Root Root
Strategic Challenges • Fundaments • Content governance. STABILITY IS CRUCIAL! • Technology. • Internet Standard compliance • Finance. • Scaling • Growing in line with the demand ... • ... from end users. • ... from (top level) domain name holders. • ... from the root content authority.
Some Direct Threats • Distributed Denial of Service Attacks? • Anycast • "Packet of Death"? • Software and platform diversity • VERY close relationship with software developers • Social Engineering? • Organizational diversity • Very good collaboration btw. root ops
Some Direct Threats • Bad data? • Need unquestionable authority for data! • Strong editing procedures are essential • Signed data transfers • False root servers? • TSIG doesn't scale • SIG(0) might work, but not widespread, cumbersome • Legal prosecution? Slow! • Waiting for DNSSEC (helps authenticating data, not servers, but mitigates problem)