Distributed Denial of Service Attacks On Root Nameservers

Distributed denial of service attacks on root nameservers are Internet events in which distributed denial-of-service attacks target one or more of the thirteen Domain Name System root nameserver clusters. The root nameservers are critical infrastructure components of the Internet, mapping domain names to Internet Protocol (IP) addresses and other resource record (RR) data.

Attacks against the root nameservers could, in theory, impact operation of the entire global Domain Name System, and thus all Internet services that use the global DNS, rather than just specific websites. However, in practice, the root nameserver infrastructure is highly resilient and distributed, using both the inherent features of DNS (result caching, retries, and multiple servers for the same zone with fallback if one or more fail), and, in recent years, a combination of anycast and load balancer techniques used to implement most of the thirteen nominal individual root servers as globally distributed clusters of servers in multiple data centers.

In particular, the caching and redundancy features of DNS mean that it would require a sustained outage of all the major root servers for many days before any serious problems were created for most Internet users, and even then there are still numerous ways in which ISPs could set their systems up during that period to mitigate even a total loss of all root servers for an extended period of time: for example by installing their own copies of the global DNS root zone data on nameservers within their network, and redirecting traffic to the root server IP addresses to those servers. Nevertheless, DDoS attacks on the root zone are taken seriously as a risk by the operators of the root nameservers, and they continue to upgrade the capacity and DDoS mitigation capabilities of their infrastructure to resist any future attacks.

Famous quotes containing the words distributed, denial, service, attacks and/or root:

    Indiana was really, I suppose, a Democratic State. It has always been put down in the book as a state that might be carried by a close and careful and perfect organization and a great deal of—[from audience: “soap”Ma reference to purchased votes, the word being followed by laughter].
    I see reporters here, and therefore I will simply say that everybody showed a great deal of interest in the occasion, and distributed tracts and political documents all through the country.
    Chester A. Arthur (1829–1886)

    The denial of our duty to act in this case is a denial of our right to act; and if we have no right to act, then may we well be termed “the white slaves of the North,” for like our brethren in bonds, we must seal our lips in silence and despair.
    Angelina Grimké (1805–1879)

    Night City was like a deranged experiment in Social Darwinism, designed by a bored researcher who kept one thumb permanently on the fast-forward button. Stop hustling and you sank without a trace, but move a little too swiftly and you’d break the fragile surface tension of the black market; either way, you were gone ... though heart or lungs or kidneys might survive in the service of some stranger with New Yen for the clinic tanks.
    William Gibson (b. 1948)

    Under peaceful conditions, the warlike man attacks himself.
    Friedrich Nietzsche (1844–1900)

    And a man of tan engages
    For the springtime of her pride,
    Eats the green by easy stages,
    Nibbles at the root beneath
    With intimidating teeth.
    Gwendolyn Brooks (b. 1917)