AI-generated image
DNS Synchronization: Full Copies, rsync and Merkle Trees
Geoff Huston explains the synchronization methods that keep DNS and RPKI data consistent, from full copies and rsync to deltas and Merkle trees.
AI-generated image
DNS cold start: how resolvers bootstrap from an empty cache
APNIC's Geoff Huston and George Michaelson explain the circular dependency when a DNS resolver cache is empty and why it matters for query load.
AI-generated image
Local copies of the DNS root zone can spike resolver traffic, researchers find
Measurements by Ilyas Rahimi and Willem Toorop show that locally serving the DNS root zone can create more network traffic than it saves in some setups, while also identifying an Unbound bug.
AI-generated image
APNIC Labs: DNS clients refuse to take NXDOMAIN for an answer, sending 4.4 queries per name
New 2026 measurements show an average of 4.4 DNS queries for every nonexistent domain name, up from 2.4 in 2019, as clients and resolvers appear unwilling to accept a clear negative response.
AI-generated image
Four classes of routing attack still escaping validation, new survey warns
A new survey maps eight attack types across four macro-categories, showing origin validation covers only one while IPv6 deaggregation and attribute-based resets remain unchecked.
AI-generated image
How a time server glitch took down Australia's Telstra and halted trains
A misaligned time server caused a nationwide outage for Australian telecom Telstra, showing that accurate time synchronization is critical infrastructure many overlook.
AI-generated image
Why port numbers below 1024 still shape the internet after four decades
A home network reconfiguration exposes the deep history of reserved ports and why DNS may be the last service that can never escape port 53.
AI-generated image
Cloudflare trims 100 TB of memory from 1.1.1.1 by redesigning its DNS cache internals
Cloudflare shrunk the data structures behind 1.1.1.1's DNS cache, saving about 100 TB of RAM without slowing down lookups.
AI-generated image
Seven Years of Development: External Audit Gives Routinator a Clean Bill of Health
An external audit by X41 D-Sec confirms Routinator is on a good security level, while reporting several vulnerabilities that have been fixed in v0.15.2.