Download - DNSMON DNS Server Monitoring
![Page 1: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/1.jpg)
1
DNSMON
DNS Server Monitoring
RIPE NCC
April 22, 2023
![Page 2: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/2.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net2
DNSMON, Goals
• Monitor DNS servers from many places
• Independent and Objective
• Novel and Interactive Presentation
![Page 3: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/3.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net3
•There are lots of bad measurements out there!–Ping - what does it measure??–From single locations …
•People (press, regulators) use them!
![Page 4: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/4.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net4
•Better Measurements are Needed–From multiple points–Real DNS traffic–Use measurement probes from TTM service
![Page 5: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/5.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net5
The Basic Building Block:
Single Point Measurement
![Page 6: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/6.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net6
dnsmon Probe Locations
![Page 7: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/7.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net7
•Server View–shows quality of service provided by the server to all probes
![Page 8: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/8.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net8
•Vertical featuresproblem near server
![Page 9: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/9.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net9
![Page 10: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/10.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net10
•Server View
unanswered queries
![Page 11: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/11.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net11
“time zoom”
![Page 12: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/12.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net12
•Domain View–summarises quality of service provided by all servers serving a domain
![Page 13: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/13.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net13
Domain View
![Page 14: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/14.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net14
Probe View
![Page 15: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/15.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net15
What is Not Measured
• DNS queries used in actual name resolution• Total DNS service quality, e.g. ‘user experience’
• global service quality: 60+ points, RIPE region bias
• Effects that last less than about a minute
But still very comprehensive measurements!
![Page 16: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/16.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net16
DNSMON Users
• Network Operators– LIR, ISP and other RIPE NCC members– Paid for development and beta service
• TLD Administrators
• Internet Community– Including governments and regulators
![Page 17: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/17.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net17
Participate as TLD Administrator
• Obtain data about quality of core service• Service improvements• Documentation of (non)-problems• Demonstrate service quality to the public• Should be paying part of production service
operating cost– €2000-6000/year, depending on size
• Every TLD administrator world-wide
![Page 18: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/18.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net18
Service for TLD Administrators
• Non-exclusive– RIPE NCC Membership also a paying user
• Benefits– Credible third party monitoring– Web site and help desk service level guarantees – Guarantee of 12 months service continuity– Presence on dnsmon web site– Visibility of support– Comments on data (to be implemented)– "Real Time" data– Influence development
![Page 19: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/19.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net19
Participate as a Network Operator
• Have to install a test box in your network– DNSMON– Network performance (delay, loss, jitter, …)
• RFC2679-2680
– NTP server
• Independently monitor critical service– Can identify interesting TLD’s
• Better understand customer problems• Have to buy a probe and service contract
– €2500 hardware, €1000/year service
• Available for everybody (LIR, ISP, …)
![Page 20: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/20.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net20
Service for Network Operators
• Non-exclusive– TLD Administrators are also a paying user
• Benefits – as for the TLD admin’s plus– other network measurements– NTP server
![Page 21: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/21.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net21
Internet Community
• Regulators, researchers, ISP’s without a TB, …
• Monitor Key Infrastructure– Go to the site and look at the plots– Raw data available for analysis on request
• Data delayed by 2 hours• Free• Support on best effort basis
http://dnsmon.ripe.net
![Page 22: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/22.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net22
Time Line
• Currently ‘public beta” – Has provided useful service for > 1year– Operated by developers
• Production service March 1, 2005– Operated by service people– Current version
• Requests for features are welcomed
![Page 23: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/23.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net23
More information
• Sites:– http://dnsmon.ripe.net: DNSMON site– http://www.ripe.net/ttm: TTM site
• Documentation (http://www.ripe.net/ripe/docs):– RIPE324: DNSMON for TLD Administrators– RIPE297: TTM/DNSMON service for LIR’s– TTM Glossy
• Email:– [email protected]
![Page 24: DNSMON DNS Server Monitoring](https://reader036.vdocuments.site/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/24.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net24
Questions, Discussion