Select your language

Google and OpenDNS present an improvement to the DNS protocol

Google y OpenDNS presentan una mejora al protocolo DNS Google and OpenDNS, two of the most popular public name resolution services on the network, have proposed and implemented an extension of the DNS protocol that will improve browsing speed when using resources from a content distribution network.

Large content distribution companies have servers spread around the world in systems called the Content Delivery Network (CDN). A good example of this is, for example, Akamai, which serves as a file store for third parties.

If we assume that cdNs have an exclusive server to serve a country with all available content replicated, the great advantage obtained with respect to having everything centralized in a single location is that in theory the time of access to the contents (latency) is minimized since, for example, a user in Seville, instead of communicating with the headquarters in the United States, it will do so with the server they have in Spain.

To achieve this, CDNs use a DNS system that, based on the IP address of the computer making the request, can find out its origin and respond with the IP of the content server closest to that country or area.

However, this is no longer ideal when there are many, and more and more, network users who do not use the DNS provided by their operator and configure public ones on their computer, such as those of Google or OpenDNS, to name the two examples involved in the article.

We write in the browser bar the website bandaancha.eu.The computer, which does not know which IP corresponds to the name, requests a translation from the DNS server (1) that it has configured (that of the operator, or another). If we assume that this server has its cache empty, you will have to ask for help from the so-called root-servers, which will tell you which server is in charge of all the .eu addressing space (2). Then, the operation is repeated. In this case, the DNS server that we have configured will interrogate (3) the one that takes care of all the .eu names on the server that has under its control the name bandaancha.eu and its subdomains (e.g. linebenchmark.bandaancha.eu). Finally, the last DNS request is made to the latter server, which will return the IP address of bandaancha.eu (4) and will be passed to the computer that originated the query in the first instance (5), to finally open the HTTP session and download the web page (6). As you can see, it is a fairly complex process although it happens transparently in the eyes of the network user.

Improving DNS performance when accessing CDNs

The problem of the DNS systems for traditional CDNs that we mentioned is the following: as the DNS negotiation to obtain the IP of the desired destination is carried out by the intermediate server, the CDNs detect as the source of the request the Google DNS servers, which are in the United States. Faced with this, the CDN responds with the IP of its servers for the United States and not for Spain. We lose throughput because latency increases.
- Publicidad -

To solve this, a modification of the DNS protocol has been devised that takes advantage of the extensions proposed in RFC 2671 to provide greater intelligence to the resolution of names.

The idea, which is called The Global Internet Speedup and is still in the draft phase, is helped by the original address of the client, which adds as one more data field to the request ("edns-client-subnet").

Although really, to maintain the privacy of the user what is sent is part of the user's public IP address (bits are removed from the end), so instead of sending 1.2.3.4 (if this were the user's public IP), it is truncated by 1.2.3.0 (all intermediate DNS servers will be able to read this information), accompanied by a 24-bit netmask.

With this, it does not matter that Google DNS is used, since by going the user information attached as data in the request, if the destination server is compatible with this new initiative you can correctly determine from where you really want to access its contents and answer with the server closest to the client, minimizing latency and, therefore, improving browsing speed.

For those who are more suspicious of their privacy, it can be configured so that no part of the user's IP address is sent (0.0.0.0/0 is sent). In these cases we understand that the service would work like traditional DNS on CDNs. That is, having no clue as to its actual origin, the CDN would respond with the IP closest to the DNS server that makes the request.

At the moment, both Google and OpenDNS have already installed this new function in their systems, which they have developed together with CDNetworks, EdgeCast, BitGravity and Akamai itself, which has lent a hand in the drafting of the draft.

Although it still seems unclear how much impact this will have on the actual performance of the network, it is not at all far-fetched that the IETF ends up adopting this technique as a standard that could also be adopted by operators, either in its current draft version, or in the final one.

- Publicidad -

Source: Broadband

See original.

No comments

• If you're already registered, please log in first. Your email will not be published.

Comments are closed

The comments for this content are closed.

Security becomes a technological platform

Security becomes a technological platform

Mexico. Security is moving from a set of standalone systems to an integrated technology platform that combines artificial intelligence, video analytics, sensors, access control, and data platforms....

Security industry in Mexico and Latin America continues its expansion and professionalization

Security industry in Mexico and Latin America continues its expansion and professionalization

International. The security industry in Mexico and Latin America maintains a growth trend driven by digital transformation, the increase in physical and cyber risks, as well as the need to protect...

Veeam Introduces Agent Commander to Address AI Agent Risks in Enterprise Environments

Veeam Introduces Agent Commander to Address AI Agent Risks in Enterprise Environments

United States. Veeam Software today announced the launch of Agent Commander, a solution aimed at helping organizations detect risks associated with artificial intelligence, protect AI-based systems...

Key and asset management, the key to optimizing operations in logistics, distribution and construction companies

Key and asset management, the key to optimizing operations in logistics, distribution and construction companies

In industries where every minute counts, efficient asset and resource management has become a strategic factor to ensure operational continuity, safety, and productivity. By: Héctor Meléndez,...

Genesis Security Reduces False Alarms by 62% Through Milestone Integration and Actuate AI Analytics

Genesis Security Reduces False Alarms by 62% Through Milestone Integration and Actuate AI Analytics

Puerto Rico. A centralized monitoring operation developed by Genesis Security was able to significantly reduce the volume of false alarms in its security systems, thanks to the integration of...

Case study: Solar cameras and thermal intelligence optimize the safety of aquaculture farms

Case study: Solar cameras and thermal intelligence optimize the safety of aquaculture farms

Türkiye. An open-ocean fish farming farm in Turkey implemented a smart surveillance system based on Dahua solar cameras, thermal monitoring, and wireless data transmission to improve safety and...

 The Hidden Security Gap in Data Centers

The Hidden Security Gap in Data Centers

Imagine the journey of an authorized technician inside a data center. When he arrives, he presents his credential and enters the premises, and before entering the server corridor he needs a key to...

Digital fraud increased at Christmas

Digital fraud increased at Christmas

Colombia. During the holiday season, as e-commerce and digital transactions intensified, online fraud attempts also increased. Fake promotions, impersonation of businesses and messages that...

Milestone XPerience Days arrived in Mexico City with innovations in intelligent video management

Milestone XPerience Days arrived in Mexico City with innovations in intelligent video management

Mexico. Milestone Systems, a leading provider of open platform video management software (VMS), hosted the Milestone XPerience Days Mexico 2025 event, a gathering that brought together industry...

Hikvision Mexico launches the third edition of

Hikvision Mexico launches the third edition of "Hikvision Women"

Mexico. Hikvision Mexico announced the launch of the third edition of its "Hikvision Women" program, an initiative aimed at strengthening the participation and professional development of women in...

Suscribase Gratis
Remember Me
SUBSCRIBE TO OUR ENGLISH NEWSLETTER
DO YOU NEED A SERVICE OR PRODUCT QUOTE?
LATEST INTERVIEWS
SITE SPONSORS










LATEST NEWSLETTER
Latest Newsletter