Practical handling of DNS in the data plane
Alexander Kaplan, Shir Landau Feibish
Abstract
The Domain Name System (DNS) is a significant component of modern-day internet. Despite this fact, DNS traffic is mostly unencrypted, and as such a likely target for exploitation by malicious actors. The advancement of programmable switches presents researchers with the opportunity to explore DNS traffic from a new vantage point, without sacrificing network bandwidth. In spite of the incentive, DNS research in programmable switches has been scarce, owing to the difficulty in parsing DNS packets.
Topics & Concepts
Domain Name SystemComputer scienceForwarding planeNetwork packetComputer networkThe InternetRound-robin DNSBandwidth (computing)Computer securityComponent (thermodynamics)ParsingOperating systemArtificial intelligenceThermodynamicsPhysicsCaching and Content DeliveryNetwork Security and Intrusion DetectionSoftware-Defined Networks and 5G