dnsmon dns server monitoring
DESCRIPTION
DNSMON DNS Server Monitoring. RIPE NCC 21 August 2014. DNSMON, Goals. Monitor DNS servers from many places Independent and Objective Novel and Interactive Presentation. There are lots of bad measurements out there! Ping - what does it measure?? From single locations … - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/1.jpg)
1
DNSMON
DNS Server Monitoring
RIPE NCC
April 22, 2023
![Page 2: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/2.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net2
DNSMON, Goals
• Monitor DNS servers from many places
• Independent and Objective
• Novel and Interactive Presentation
![Page 3: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/3.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net3
•There are lots of bad measurements out there!–Ping - what does it measure??–From single locations …
•People (press, regulators) use them!
![Page 4: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/4.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net4
•Better Measurements are Needed–From multiple points–Real DNS traffic–Use measurement probes from TTM service
![Page 5: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/5.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net5
The Basic Building Block:
Single Point Measurement
![Page 6: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/6.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net6
dnsmon Probe Locations
![Page 7: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/7.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net7
•Server View–shows quality of service provided by the server to all probes
![Page 8: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/8.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net8
•Vertical featuresproblem near server
![Page 9: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/9.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net9
![Page 10: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/10.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net10
•Server View
unanswered queries
![Page 11: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/11.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net11
“time zoom”
![Page 12: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/12.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net12
•Domain View–summarises quality of service provided by all servers serving a domain
![Page 13: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/13.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net13
Domain View
![Page 14: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/14.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net14
Probe View
![Page 15: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/15.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net15
What is Not Measured
• DNS queries used in actual name resolution• Total DNS service quality, e.g. ‘user experience’
• global service quality: 60+ points, RIPE region bias
• Effects that last less than about a minute
But still very comprehensive measurements!
![Page 16: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/16.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net16
DNSMON Users
• Network Operators– LIR, ISP and other RIPE NCC members– Paid for development and beta service
• TLD Administrators
• Internet Community– Including governments and regulators
![Page 17: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/17.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net17
Participate as TLD Administrator
• Obtain data about quality of core service• Service improvements• Documentation of (non)-problems• Demonstrate service quality to the public• Should be paying part of production service
operating cost– €2000-6000/year, depending on size
• Every TLD administrator world-wide
![Page 18: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/18.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net18
Service for TLD Administrators
• Non-exclusive– RIPE NCC Membership also a paying user
• Benefits– Credible third party monitoring– Web site and help desk service level guarantees – Guarantee of 12 months service continuity– Presence on dnsmon web site– Visibility of support– Comments on data (to be implemented)– "Real Time" data– Influence development
![Page 19: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/19.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net19
Participate as a Network Operator
• Have to install a test box in your network– DNSMON– Network performance (delay, loss, jitter, …)
• RFC2679-2680
– NTP server
• Independently monitor critical service– Can identify interesting TLD’s
• Better understand customer problems• Have to buy a probe and service contract
– €2500 hardware, €1000/year service
• Available for everybody (LIR, ISP, …)
![Page 20: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/20.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net20
Service for Network Operators
• Non-exclusive– TLD Administrators are also a paying user
• Benefits – as for the TLD admin’s plus– other network measurements– NTP server
![Page 21: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/21.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net21
Internet Community
• Regulators, researchers, ISP’s without a TB, …
• Monitor Key Infrastructure– Go to the site and look at the plots– Raw data available for analysis on request
• Data delayed by 2 hours• Free• Support on best effort basis
http://dnsmon.ripe.net
![Page 22: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/22.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net22
Time Line
• Currently ‘public beta” – Has provided useful service for > 1year– Operated by developers
• Production service March 1, 2005– Operated by service people– Current version
• Requests for features are welcomed
![Page 23: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/23.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net23
More information
• Sites:– http://dnsmon.ripe.net: DNSMON site– http://www.ripe.net/ttm: TTM site
• Documentation (http://www.ripe.net/ripe/docs):– RIPE324: DNSMON for TLD Administrators– RIPE297: TTM/DNSMON service for LIR’s– TTM Glossy
• Email:– [email protected]
![Page 24: DNSMON DNS Server Monitoring](https://reader036.vdocuments.us/reader036/viewer/2022081511/568158b9550346895dc60306/html5/thumbnails/24.jpg)
RIPE NCC . Apricot, February 2005, Kyoto . http://dnsmon.ripe.net24
Questions, Discussion