@inproceedings{3b55974acc00485ca693edc90ec12f5e,
title = "PREFETCHing to overcome DNSSEC performance issue on large resolving platform",
abstract = "Todays' DNS resolving platforms have been designed for DNS with fast and light resolutions over the Internet. With signature checks and larger payload, experimental measurements [10] showed that DNSSEC resolutions require up to 4 times more CPU. While DNSSEC requires more CPU than DNS, this paper proposes PREFETCHX, an architecture that optimizes the use of CPU and thus avoids that resolving platforms increase their size for DNSSEC migration. Current resolving platforms IPXOR split the traffic between the nodes according to the IP addresses. Alternatively, PREFETCHX takes advantage of the FQDN's popularity distribution (Zipf), a layered cache and cache sharing mechanisms between the nodes and requires at least 4 times less nodes. Furthermore PREFETCHX does not impact the network infrastructure which eases its deployment. Then, defining X the number of prefetched FQDNs makes PREFETCHX highly scalable and flexible to different type of traffic.",
keywords = "Cache sharing, DHT, DNS, DNSSEC, Pastry",
author = "Daniel Migault and Stephane Senecal and Stanislas Francfort and Emmanuel Herbert and Maryline Laurent",
year = "2013",
month = dec,
day = "1",
doi = "10.1109/TrustCom.2013.84",
language = "English",
isbn = "9780769550220",
series = "Proceedings - 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013",
pages = "694--703",
booktitle = "Proceedings - 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013",
note = "12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2013 ; Conference date: 16-07-2013 Through 18-07-2013",
}