<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>DNS | Aqualab - Northwestern University</title><link>https://aqualab.cs.northwestern.edu/tag/dns/</link><atom:link href="https://aqualab.cs.northwestern.edu/tag/dns/index.xml" rel="self" type="application/rss+xml"/><description>DNS</description><generator>Hugo Blox Builder (https://hugoblox.com)</generator><language>en-us</language><lastBuildDate>Tue, 09 Oct 2012 00:00:00 +0000</lastBuildDate><image><url>https://aqualab.cs.northwestern.edu/media/logo_hu_8646b2b27455bd.png</url><title>DNS</title><link>https://aqualab.cs.northwestern.edu/tag/dns/</link></image><item><title>namehelp</title><link>https://aqualab.cs.northwestern.edu/project/namehelp/</link><pubDate>Tue, 09 Oct 2012 00:00:00 +0000</pubDate><guid>https://aqualab.cs.northwestern.edu/project/namehelp/</guid><description>&lt;div class="article-style"&gt;
&lt;h2 id="overview"&gt;Overview&lt;/h2&gt;
&lt;p&gt;namehelp improved web performance by obtaining more accurate redirections to
nearby content delivery network servers. In short: it helped whenever you, or
your ISP, used a remote DNS service.&lt;/p&gt;
&lt;h2 id="the-problem"&gt;The Problem&lt;/h2&gt;
&lt;p&gt;DNS is the Internet&amp;rsquo;s phone book, and it is invisible to almost everyone. Every
site you visit, every message you send, begins with a lookup; a complex page may
need dozens, and a browser may perform hundreds in a day. Most people never
think about it, because their ISP provides the service transparently.&lt;/p&gt;
&lt;p&gt;Over the preceding years, third-party public DNS services from Google, OpenDNS
and Norton had become popular, and for good reasons — better security, better
privacy, faster resolution. Through a large-scale study spanning &lt;strong&gt;over 10,000
hosts in nearly 100 countries&lt;/strong&gt;, we found that while public DNS may indeed
resolve names faster, web performance could suffer badly.&lt;/p&gt;
&lt;p&gt;The cause is a hidden interaction with another invisible service. More than
&lt;strong&gt;70% of the top 1,000 websites&lt;/strong&gt; rely on CDNs, which replicate content across
thousands of servers and steer each user to a nearby copy — using the location
of the user&amp;rsquo;s &lt;em&gt;resolver&lt;/em&gt; as a proxy for the user. When the resolver is a public
service somewhere else entirely, that proxy fails: users were being sent to
replicas &lt;strong&gt;three times farther away than necessary&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;CDNs and public resolvers were working on a fix, but the proposed standard had
not achieved broad adoption, leaving users choosing between good web performance
and the security and privacy they had switched for.&lt;/p&gt;
&lt;h2 id="what-namehelp-did"&gt;What namehelp Did&lt;/h2&gt;
&lt;p&gt;namehelp let users have both. It ran personalized benchmarks in the background,
from the user&amp;rsquo;s own machine, to determine the optimal DNS configuration, and
when it detected less than optimal web performance it corrected it by
interacting with DNS and CDNs so content came from the nearest available replica.&lt;/p&gt;
&lt;p&gt;Beyond benchmarking, which existing tools such as namebench and DNS Benchmark
already did, namehelp added:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;automatic DNS server configuration based on the sites a user actually visits&lt;/li&gt;
&lt;li&gt;caching so frequently-visited sites resolved instantly&lt;/li&gt;
&lt;li&gt;faster failover when a DNS server went down&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;It installed as a local system service — users pointed their machine at
&lt;code&gt;127.0.0.1&lt;/code&gt; — with browser extensions for Chrome and Firefox providing a
dashboard.&lt;/p&gt;
&lt;p&gt;
&lt;figure &gt;
&lt;div class="d-flex justify-content-center"&gt;
&lt;div class="w-100" &gt;&lt;img alt="namehelp dashboard showing DNS latency: namehelp 9.51 ms against a network default of 148.28 ms, a personalized benchmark of 344.43 ms and a generic benchmark of 881.09 ms" srcset="
/project/namehelp/dns-performance_hu_72e72ddd8e179da.webp 400w,
/project/namehelp/dns-performance_hu_5438e0461bca8fb3.webp 760w,
/project/namehelp/dns-performance_hu_238ade10f8a3a016.webp 1200w"
src="https://aqualab.cs.northwestern.edu/project/namehelp/dns-performance_hu_72e72ddd8e179da.webp"
width="664"
height="500"
loading="lazy" data-zoomable /&gt;&lt;/div&gt;
&lt;/div&gt;&lt;/figure&gt;
&lt;em&gt;The dashboard&amp;rsquo;s DNS view. In this example namehelp resolved in 9.51 ms against
the network default&amp;rsquo;s 148.28 ms.&lt;/em&gt;&lt;/p&gt;
&lt;p&gt;
&lt;figure &gt;
&lt;div class="d-flex justify-content-center"&gt;
&lt;div class="w-100" &gt;&lt;img src="http-performance.png" alt="Bar chart of the top CDN domains where namehelp improved HTTP performance, led by www.update.microsoft.com.nsatc.net at 24.1 ms" loading="lazy" data-zoomable /&gt;&lt;/div&gt;
&lt;/div&gt;&lt;/figure&gt;
&lt;em&gt;Where the gain came from: the CDN-hosted domains for which namehelp found a
nearer replica.&lt;/em&gt;&lt;/p&gt;
&lt;h2 id="reception"&gt;Reception&lt;/h2&gt;
&lt;p&gt;The first release went out on &lt;strong&gt;9 October 2012&lt;/strong&gt; for Windows, macOS and
Debian/Ubuntu, with RHEL and CentOS packages following. Within a month it had
&lt;strong&gt;10,000 users&lt;/strong&gt;. Coverage in McCormick News led to ACM TechNews, Computerworld
and Network World, and from there to Lifehacker — which brought 2,000 new users
in a single day — and on to outlets in France, Poland, Russia, Turkey, Brazil
and Vietnam. Several reported the tool as speeding up web performance by 40%.&lt;/p&gt;
&lt;p&gt;Source was released on 26 October 2012. A Firefox extension followed in 2013, a
2.0 beta for macOS in January 2018, and &lt;em&gt;Namehelp Mobile&lt;/em&gt; brought DNS
performance comparison to Android.&lt;/p&gt;
&lt;h2 id="privacy"&gt;Privacy&lt;/h2&gt;
&lt;p&gt;The privacy policy was deliberately short: namehelp never collected personally
identifiable information or the sites a user visited. Anonymous reporting —
usage statistics, performance-improvement results, benchmark results for a
generic set of popular sites, and results of other network measurements — could
be switched off entirely.&lt;/p&gt;
&lt;details class="spoiler " id="spoiler-0"&gt;
&lt;summary&gt;Sinopsis y ¿por qué usar namehelp? (español)&lt;/summary&gt;
&lt;p&gt;&lt;p&gt;La página original de namehelp se publicó en inglés y español. Se conserva aquí
la versión en español.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Sinopsis.&lt;/strong&gt; namehelp mejora el rendimiento web obteniendo redirecciones más
apropiadas hacia servidores de contenido más cercanos. Básicamente, namehelp
mejora tu rendimiento web si vos o tu proveedor de internet utiliza un servicio
de DNS remoto.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;¿Por qué usar namehelp?&lt;/strong&gt; El Servicio de Nombres de Dominio (DNS) es una
especie de guía telefónica para el Internet y es esencial para su
funcionamiento. La mayoría de nosotros no nos percatamos de su existencia porque
nuestro proveedor generalmente lo ofrece de manera transparente.&lt;/p&gt;
&lt;p&gt;Los últimos años han visto el surgimiento de servicios de DNS público ofrecidos
por compañías como Google, OpenDNS y Norton DNS, que presentan ventajas de
seguridad, privacidad y velocidad de resolución. Aun así, a través de un estudio
de gran escala que incluyó a más de 10,000 usuarios en más de 100 países,
nuestro laboratorio descubrió que tu rendimiento web puede sufrir seriamente,
aún cuando el servicio de DNS público efectivamente reduce el tiempo de
resolución.&lt;/p&gt;
&lt;p&gt;El problema se debe a la interacción del servicio DNS con las redes de entrega
de contenido (redes CDN). Aproximadamente el 70% de los 1,000 sitios más
populares utilizan redes CDN, que replican el contenido en miles de servidores y
redireccionan a los usuarios al más cercano. La utilización de servicios de DNS
público puede ocasionar que los usuarios sean redireccionados a servidores
¡mucho más lejos de lo necesario!&lt;/p&gt;
&lt;p&gt;namehelp te permite obtener lo mejor de ambos mundos — utilizar un servicio de
DNS público sin reducir tu rendimiento web. Ejecuta pruebas desde tu computadora
para determinar tu configuración óptima de DNS y, si determina que estás
recibiendo un rendimiento sub-óptimo, lo corrige automáticamente interactuando
con DNS y CDNs para asegurar que el contenido sea entregado desde la copia más
cercana.&lt;/p&gt;
&lt;/p&gt;
&lt;/details&gt;
&lt;hr&gt;
&lt;h2 id="availability"&gt;Availability&lt;/h2&gt;
&lt;p&gt;namehelp is no longer distributed. It was released for Windows, macOS, and
Debian- and RHEL-based Linux, with source available from October 2012.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="papers"&gt;Papers&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2012/jotto-imc12/"&gt;Content Delivery and the Natural Evolution of DNS&lt;/a&gt; — IMC 2012&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2012/jotto-sigcomm-poster12/"&gt;namehelp: Intelligent, Client-Side DNS Resolution&lt;/a&gt; — SIGCOMM 2012 poster, also in CCR&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="coverage"&gt;Coverage&lt;/h2&gt;
&lt;p&gt;Network World, Computerworld, ACM TechNews and McCormick News (2012); Lifehacker
and ghacks.net (2012); MakeUseOf (2013); and coverage in France (Korben), Poland
(Spider&amp;rsquo;s Web), Russia (Софт@Mail.Ru), Turkey (chip.com.tr), Brazil (IDG Now!,
Dicas para Computador) and Vietnam (PC World VN, Mía Lùi).&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="people"&gt;People&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;Lead &amp;amp; PI&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/fabian-e.-bustamante/"&gt;Fabián E. Bustamante&lt;/a&gt; (Northwestern University)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Students&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/john-otto/"&gt;John S. Otto&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/mario-a.-sanchez/"&gt;Mario A. Sanchez&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/john-rula/"&gt;John P. Rula&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/zachary-bischof/"&gt;Zachary S. Bischof&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/ted-stein/"&gt;Ted Stein&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/dipendra-kumar-jha/"&gt;Dipendra K. Jha&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;With thanks to&lt;/strong&gt; Andrés Bustamante for the logo, Mario Sánchez for the Spanish
translation, and Richard Campbell and Keith Petersen for early feedback.&lt;/p&gt;
&lt;p&gt;namehelp built on namebench, BeautifulSoup, dnspython, Flask, Jinja2, Werkzeug,
graphy, httplib2, ntplib, PyASN1, pydhcplib and Python-RSA.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="related-links"&gt;Related Links&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/project/dns-client-side/"&gt;Client-Side DNS and Content Delivery&lt;/a&gt; — the project namehelp was built for&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;</description></item><item><title>Client-Side DNS and Content Delivery</title><link>https://aqualab.cs.northwestern.edu/project/dns-client-side/</link><pubDate>Fri, 01 Jun 2012 00:00:00 +0000</pubDate><guid>https://aqualab.cs.northwestern.edu/project/dns-client-side/</guid><description>&lt;div class="article-style"&gt;
&lt;h2 id="project-overview"&gt;Project Overview&lt;/h2&gt;
&lt;p&gt;Content delivery networks decide which replica should serve you based on where
your DNS query appears to come from. For most of the Web&amp;rsquo;s history that was a
reasonable proxy: your resolver belonged to your ISP, so it sat near you, and a
CDN steering toward the resolver was steering toward you.&lt;/p&gt;
&lt;p&gt;Public resolvers broke that assumption. When users moved to third-party DNS
services for speed, reliability, or filtering, their queries began arriving at
CDNs from somewhere else entirely — and the CDN, doing exactly what it was
designed to do, sent them to a replica near the resolver rather than near the
user. Users adopting a service to make browsing faster could end up fetching
content from much further away.&lt;/p&gt;
&lt;p&gt;This project measured that interaction at scale and then did something about it.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="measuring-the-interaction"&gt;Measuring the Interaction&lt;/h2&gt;
&lt;p&gt;&lt;em&gt;Content Delivery and the Natural Evolution of DNS&lt;/em&gt; measured the end-to-end cost
of remote DNS on CDN performance, and gave the first evaluation of the
industry&amp;rsquo;s answer to it: the EDNS client-subnet extension, which attaches a
truncated client address to the query so a CDN can steer on the client rather
than on the resolver.&lt;/p&gt;
&lt;p&gt;The extension works where it is deployed. The difficulty is that it requires
both the resolver and the CDN to participate, and adoption was thin — so the
performance cost kept falling, unevenly and invisibly, on precisely the content
CDNs work hardest to place well. That gap is what made a client-side answer
worth building.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="namehelp"&gt;namehelp&lt;/h2&gt;
&lt;p&gt;namehelp is the response, built on what the paper calls Direct Resolution: a
proxying DNS server on the user&amp;rsquo;s own machine that keeps a third-party resolver
for general queries — so users keep the reliability and speed they chose it for
— while resolving CDN-hosted names directly, so the query carries the client&amp;rsquo;s
own network position rather than the resolver&amp;rsquo;s. It recovers most of the
performance that remote resolution gives away, and it needs neither the CDN nor
the resolver to agree to anything.&lt;/p&gt;
&lt;p&gt;Running at the client is the point. It needs no cooperation from the CDN, no
change at the resolver, and no support from the ISP, which is what made it
deployable by an individual user rather than by agreement among providers.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="software"&gt;Software&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;&lt;a href="https://aqualab.cs.northwestern.edu/project/namehelp/"&gt;namehelp&lt;/a&gt;&lt;/strong&gt; — a proxying DNS server that
keeps the benefits of third-party DNS while avoiding the performance penalty
for CDN-hosted content. Ten thousand users within a month of release.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="papers"&gt;Papers&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2012/jotto-imc12/"&gt;Content Delivery and the Natural Evolution of DNS&lt;/a&gt; — IMC 2012&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2012/jotto-sigcomm-poster12/"&gt;namehelp: Intelligent, Client-Side DNS Resolution&lt;/a&gt; — SIGCOMM 2012 (demo)&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2014/jrula-imc14/"&gt;Behind the Curtain – Cellular DNS and Content Replica Selection&lt;/a&gt; — IMC 2014. Carries the same question into cellular networks, and also belongs to the mobile thread.&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="coverage"&gt;Coverage&lt;/h2&gt;
&lt;p&gt;namehelp was covered by Network World in 2012, and picked up by outlets in
France, Turkey, Brazil, Vietnam, Poland, and Russia.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="people"&gt;People&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;Lead &amp;amp; PI&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/fabian-e.-bustamante/"&gt;Fabián E. Bustamante&lt;/a&gt; (Northwestern University)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Students&lt;/strong&gt;&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/john-otto/"&gt;John S. Otto&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/mario-a.-sanchez/"&gt;Mario A. Sanchez&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/john-rula/"&gt;John P. Rula&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/author/ted-stein/"&gt;Ted Stein&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;hr&gt;
&lt;h2 id="ongoing-work"&gt;Ongoing Work&lt;/h2&gt;
&lt;p&gt;The questions namehelp raised — where resolution should happen, and what it
costs the user when it happens somewhere else — are still open, and two efforts
currently under submission continue them: &lt;strong&gt;Onoma&lt;/strong&gt;, and a study of &lt;strong&gt;hidden DNS
resolvers&lt;/strong&gt;. Both have been presented as posters.&lt;/p&gt;
&lt;hr&gt;
&lt;h2 id="related-links"&gt;Related Links&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/publication/2021/rkumar-dns-poster/"&gt;Decentralization, Privacy and Performance for DNS&lt;/a&gt; — SIGCOMM 2021&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/project/thealeph/"&gt;The Aleph&lt;/a&gt; — decoding geographic information from DNS records&lt;/li&gt;
&lt;li&gt;&lt;a href="https://aqualab.cs.northwestern.edu/" target="_blank" rel="noopener"&gt;AquaLab Research Group&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/div&gt;</description></item></channel></rss>