Traffic Centralization and Digital Sovereignty: An Analysis Under the Lens of DNS Servers (2307.01300v1)
Abstract: The Domain Name System (DNS) service is one of the pillars of the Internet. This service allows users to access websites on the Internet through easy-to-remember domain names rather than complex numeric IP addresses. DNS acts as a directory that translates the domain names into a corresponding IP address, allowing communication between computers on different networks. However, the concentration of DNS service providers on the Internet affects user security, privacy, and network accessibility. The reliance on a small number of large DNS providers can lead to (a) risks of data breaches and disruption of service in the event of failures and (b) concerns about the digital sovereignty of countries regarding DNS hosting. In this sense, this work approaches this issue of DNS concentration on the Internet by presenting a solution to measure DNS hosting centralization and digital sovereignty in countries. With the data obtained through these measurements, relevant questions are answered, such as which are the top-10 DNS providers, if there is DNS centralization, and how dependent countries are on such providers.
- P. Mockapetris and K. J. Dunlap, “Development of the Domain Name System,” in Symposium Proceedings on Communications Architectures and Protocols (SIGCOMM 1988), August 1988, pp. 123–133.
- S. Hao, H. Wang, A. Stavrou, and E. Smirni, “On the DNS Deployment of Modern Web Services,” in IEEE International Conference on Network Protocols (ICNP 2015), San Francisco, United States of America, November 2015, pp. 100–110.
- Cloudflare, Inc., “Cloudflare DNS - Authoritative and Secondary DNS,” 2023, https://www.cloudflare.com/dns/.
- K. Schomp, O. Bhardwaj, E. Kurdoglu, M. Muhaimen, and R. K. Sitaraman, “Akamai DNS: Providing Authoritative Answers to the World’s Queries,” in Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication (SIGCOMM 2020), Virtual Event, USA, July 2020, pp. 465–478.
- G. C. M. Moura, S. Castro, W. Hardaker, M. Wullink, and C. Hesselman, “Clouding up the Internet: How Centralized is DNS Traffic Becoming?” in ACM Internet Measurement Conference (IMC 2020), Virtual Event, USA, October 2020, pp. 42–49.
- M. Allman, “Comments on DNS Robustness,” in Proceedings of the Internet Measurement Conference (IMC 2018), Boston, USA, October 2018, pp. 84–90.
- L. Zembruzki, A. S. Jacobs, G. S. Landtreter, L. Z. Granville, and G. C. M. Moura, “dnstracker: Measuring Centralization of DNS Infrastructure in the Wild,” in Advanced Information Networking and Applications (AINA 2020), L. Barolli, F. Amato, F. Moscato, T. Enokido, and M. Takizawa, Eds., Caserta, Italy, April 2020, pp. 871–882.
- T. V. Doan, J. Fries, and V. Bajpai, “Evaluating Public DNS Services in the Wake of Increasing Centralization of DNS,” in IFIP Networking Conference (IFIP Networking 2021), Espoo, Finland, 2021, pp. 1–9.
- J. Pohle and T. Thiel, “Digital Sovereignty,” Journal of Internet Regulation, vol. 9, no. 4, pp. 76–88, 2020.
- V. Le Pochat, T. Van Goethem, S. Tajalizadehkhoob, M. Korczyński, and W. Joosen, “Tranco: A Research-Oriented Top Sites Ranking Hardened Against Manipulation,” in 26th Network and Distributed System Security Symposium (NDSS 2019), San Diego, United States of America, Feb. 2019.
- P. Foremski, O. Gasser, and G. C. Moura, “DNS observatory: The big picture of the DNS,” in ACM Internet Measurement Conference, Amsterdam, Netherlands, 2019, pp. 87–100.
- C. Hesselman, P. Grosso, R. Holz, F. Kuipers, H. Xue, M. Jonker, J. Ruiter, A. Sperotto, R. Rijswijk-Deij, G. Moura, A. Pras, and C. Laat, “A Responsible Internet to Increase Trust in the Digital World,” Journal of Network and Systems Management, vol. 28, pp. 882–922, October 2020.
- R. Li, X. Jia, Z. Zhang, J. Shao, R. Lu, J. Lin, X. Jia, and G. Wei, “A Longitudinal and Comprehensive Measurement of DNS Strict Privacy,” IEEE/ACM Transactions on Networking, pp. 1–16, 2023.
- M. Franco, J. von der Assen, L. Boillat, C. Killer, B. Rodrigues, E. J. Scheid, L. Granville, and B. Stiller, “SecGrid: A Visual System for the Analysis and ML-Based Classification of Cyberattack Traffic,” in IEEE 46th Conference on Local Computer Networks (LCN 2021), Edmonton, Canada, October 2021, pp. 1–8.
- M. F. Franco, L. Z. Granville, and B. Stiller, “CyberTEA: a Technical and Economic Approach for Cybersecurity Planning and Investment,” in 36th IEEE/IFIP Network Operations and Management Symposium (NOMS 2023), Miami, USA, 2023, pp. 1–6.
- Y. Jin, M. Tomoishi, and S. Matsuura, “Detection of hijacked authoritative dns servers by name resolution traffic classification,” in IEEE International Conference on Big Data (Big Data). Los Angeles, USA: IEEE, 2019, pp. 6084–6085.
- C. Aishwarya, M. Sannidhan, and B. Rajendran, “DNS Security: Need and Role in the Context of Cloud Computing,” in International Conference on Eco-friendly Computing and Communication Systems, 2014, pp. 229–232.
- B.-S. Lee, Y. S. Tan, Y. Sekiya, A. Narishige, and S. Date, “Availability and Effectiveness of Root DNS servers: A Long Term Study,” in IEEE Network Operations and Management Symposium (NOMS), Osaka, Japan, 2010, pp. 862–865.
- A. Aydın and T. K. Bensghir, “Digital Data Sovereignty: Towards a Conceptual Framework,” in 1st International Informatics and Software Engineering Conference (UBMYK), Ankara, Turkey, 2019, pp. 1–6.
- P. Roguski, “Layered Sovereignty: Adjusting Traditional Notions of Sovereignty to a Digital Environment,” in 11th International Conference on Cyber Conflict (CyCon), vol. 900, Tallinn, Estonia, 2019, pp. 1–13.
- S. Manski and B. Manski, “No Gods, No Masters, No Coders? The future of Sovereignty in a Blockchain World,” Law and Critique, vol. 29, pp. 151–162, 2018.
- CAIDA, “Routeviews Prefix-to-AS Mappings (pfx2as) for IPv4 and IPv6,” 2013, https://publicdata.caida.org/datasets/routing/routeviews-prefix2as/.
- ——, “Inferred AS to Organization Mapping Dataset,” 2014, https://www.caida.org/catalog/datasets/as-organizations/.
- D. F. Boeira, L. Zembruzki, E. J. Scheid, M. F. Franco, “DNS Sovereignty Repository,” 2023, https://github.com/ComputerNetworks-UFRGS/DNS-Sovereignty.
- Dnspython Contributors, “dnspython Library,” 2020, https://www.dnspython.org/.
- International Organization for Standardization, “ISO 3166 - Country Codes,” 2023, https://www.iso.org/iso-3166-country-codes.html.
- P. Pearce, B. Jones, F. Li, R. Ensafi, N. Feamster, N. Weaver, and V. Paxson, “Global Measurement of DNS Manipulation,” in 26th USENIX Conference on Security Symposium (SEC 2017), Vancouver, BC, Canada, August 2017, pp. 307–323.
- K. Borgolte, T. Chattopadhyay, N. Feamster, M. Kshirsagar, J. Holland, A. Hounsel, and P. Schmitt, “How DNS over HTTPs is Reshaping Privacy, Performance, and Policy in the Internet Ecosystem,” in 47th Research Conference on Communication, Information and Internet Policy (TPRC), Washington, DC, July 2019, pp. 1–9.
- L. Zembruzki, R. Sommese, L. Z. Granville, A. Selle Jacobs, M. Jonker, and G. C. M. Moura, “Hosting Industry Centralization and Consolidation,” in IEEE/IFIP Network Operations and Management Symposium (NOMS 2022, Budapest, Hungary, April 2022, pp. 1–9.
- J. Opara-Martins, R. Sahandi, and F. Tian, “Critical Analysis of Vendor Lock-in and its Impact on Cloud Computing Migration: a Business Perspective,” Journal of Cloud Computing, vol. 5, no. 4, pp. 1–18, April 2016.
- MarketsAndMarkets, “Managed Domain Name System (DNS) Services Market,” 2023, https://www.marketsandmarkets.com/Market-Reports/dns-service-market-240632025.html.
- Handelsblatt, “Appell von vier Regierungschefinnen an die EU: “Europa muss seine digitale Souveränität stärken”,” 2021, https://goo.by/xIVUn.
- G. D. Rodosek, M. Broy, U. Helmbrecht, “Quo Vadis European Digital Sovereignty?” 2021, https://www.concordia-h2020.eu/blog-post/quo-vadis-european-digital-sovereignty/.
- L. Belli, B. Franqueira, E. Bakonyi, L, Chen, N. Couto, S. Chang. N. da Hora, W. Gaspar, “Cibersegurança: Uma Visão Sistêmica Rumo A Uma Proposta De Marco Regulatório Para Um Brasil Digitalmente Soberano,” 2023, https://goo.by/32fNL.
- Demétrio F. Boeira (1 paper)
- Eder J. Scheid (2 papers)
- Muriel F. Franco (2 papers)
- Luciano Zembruzki (2 papers)
- Lisandro Z. Granville (2 papers)