80 likes | 238 Views
DNS Alphabet Soup. IPv6. Increases packet size Both transport and question/answer sections Preference: goes first Fragmentation done by end points (ICMPv6!). DNSSEC. Created to add security to server answers Needs chain of trust (from root, now signed)
E N D
IPv6 • Increases packet size • Both transport and question/answer sections • Preference: goes first • Fragmentation done by end points (ICMPv6!)
DNSSEC • Created to add security to server answers • Needs chain of trust (from root, now signed) • Manual periodic updates by server operator (zone owner, and recursive as well) • Significant increase in packet size
EDNS • Added size of DNS packets • TCP transport • Fragmentation may be needed – caution Ipv6 • Real servers need to support it (not your home router) • Latency issue – especially for mobile operator
IDN • домены.на.другом.языке • Confusion by user and operator possible • Variant IDNs coming – more confusion?
Conclusion • Challenges: DNS in new ISP service • If it works, your customers happy as before • If not, they look elsewhere • Technology keeps changing – be aware
Contacts • Dmitry Kohmanyuk • http://kohmanyuk.tel/ • dk@hostmaster.ua