Presented by Franz Schwarzinger in DNS Working Group at RIPE 60, Prague

1. RIPE Network Coordination Centre
The RIPE NCC DNSMON Service
Revisited & Revamped
Franz Schwarzinger
System Architect, Information Services
<franz@ripe.net>
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 1

2. RIPE Network Coordination Centre
History
• Original purpose in 2005:
- Can clients reach the DNS Server?
• Use TTM as simulated clients
• Added since 2005:
- IPv6
- ENUM
• Some new challenges:
- Anycast
- DNSSEC
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 2

3. RIPE Network Coordination Centre
How Do We Measure?
• Types:
- SOA records
- CHAOS records for anycasted root servers
• One measurement per minute
- Poisson distribution
• Don’t influence the operation of the DNS server
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 3

4. RIPE Network Coordination Centre
Stakeholders
• User survey in April 2010
- Root Server Operators
- DNSMON Subscribers
- Interested users (you?)
• 3 major questions about:
- Current usefulness
- Possible improvements
- New prototype interface
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 4

5. RIPE Network Coordination Centre
Stakeholders - Survey Results
Real-time data
Better performance
Thank you!
Traceroute
Better drill-down
functionality
approach
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 5

6. RIPE Network Coordination Centre
New Architecture
Real-Time
Data
High Performance
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 6

7. RIPE Network Coordination Centre
User Interface
• Complaints:
- 3 pre-defined views
- Difficult to find your own server
- Poor performance
• Missing:
- More flexibility
- Easier navigation
- Better performance
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 7

8. RIPE Network Coordination Centre
User Interface
DEMO
Showing a new prototype User Interface, allowing for easier navigation.
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 8

9. RIPE Network Coordination Centre
Next Steps
• Scalability
- Allow for more diverse measurement networks
- Better anycast coverage
• Improved Measurements to support:
- TCP checks
- EDNS0
- DNSSEC
- RFC 5001 (NSID)
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 9

10. RIPE Network Coordination Centre
Get Involved!
• Come to our Demo Stand
- This afternoon in the hallway
• Discuss on RIPE Labs
- http://labs.ripe.net/content/dnsmon-new-user-interface
• Send us an email!
- dnsmon@ripe.net
- franz@ripe.net
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 10

11. RIPE Network Coordination Centre
Questions?
Franz Schwarzinger RIPE 60 - May 2010 http://www.ripe.net 11