Андрей Лескин, QratorLabs/HLL

Download Андрей Лескин, QratorLabs/HLL

Post on 08-Jul-2015

954 views

Category:

Documents

3 download

Embed Size (px)

DESCRIPTION

HighLoad++ 2013

TRANSCRIPT

<ul><li> 1. DNS- QratorLabs/HLL</li></ul> <p> 2. DNS? 3. DNS? : highloadlab.com 178.248.233.7 4. DNS? : highloadlab.com 178.248.233.7 :( ) 5. DNS- minidns dns server https://code.google.com/p/minidns/source/browse/minidns wc -l minidns 107 (!!!) 6. DNS- minidns dns server https://code.google.com/p/minidns/source/browse/minidns wc -l minidns 107 (!!!) 7. DNS- minidns dns server https://code.google.com/p/minidns/source/browse/minidns wc -l minidns 107 (!!!) Authoritative. There can be only one! Caching. The cache is out there... 8. ? 9. ? SUPER Authoritative ServerSLOW Authoritative ServerSUPER Caching ServerQUERIES QUERIES 10. ? SUPER Authoritative ServerSLOW Authoritative ServerSUPER Caching ServerQUERIES : : QUERIES 11. DNS test. ? 12. DNS test. ? dnsperf &amp; resperf? 13. DNS test. ? dnsperf &amp; resperf? NO tcpreplay? 14. DNS test. ? dnsperf &amp; resperf? NO tcpreplay? NO Ideal/real world data? NOOO!!! 15. DNS test. How? 16. DNS test. How? 17. DNS test. Measurements QPS, RPS = PPS Traffic: Mbit/s CPU load avg ! 18. DNS test. ? Knot (1.2.0 &amp; 1.3.0-RC5) Yadifa (1.0.2) NSD3 (3.2.15) NSD4 (4.0.0b4) PowerDNS (3.3) TinyDNS (1.05) Unbound (1.4.16) Pdnsd (1.2.8) Server: Dual Xeon E5-2670 32Gb RAM DDR3 1333Mhz Intel X520-DA2 10Gbit Generator: Single Xeon E5-2670 32Gb RAM DDR3 1333Mhz Intel X520-DA2 10Gbit Gentoo Linux 3.7.9 19. DNS test. Setup ! Authoritative: 300 Caching: 20. Results. . Knot-1.2.0, queries=1 21. Results. . Knot-1.2.0, queries=1 22. Results. Queries in flow: 01 Knot NSD Unbound Yadifa PowerDNS Pdnsd TinyDNS 23. Results. Queries in flow: 01 Knot NSD Unbound Yadifa PowerDNS Pdnsd TinyDNS 24. Results. Queries in flow: 02 Knot NSD Unbound PowerDNS Pdnsd Yadifa TinyDNS 25. Results. Queries in flow: 02 Knot NSD Unbound PowerDNS Pdnsd Yadifa TinyDNS 26. Results. Queries in flow: 02 Knot NSD Unbound PowerDNS Pdnsd Yadifa TinyDNS 27. Results. Queries in flow: 20 Knot NSD Unbound PowerDNS Pdnsd Yadifa TinyDNS 28. .IT HAPPENS. BE PREPARED 29. . Local. Knot-1.2.0 ... ? 30. . Local. Knot-1.2.0 ... ? Yadifa-1.0.2 ! 31. . Local. Knot-1.2.0 ... ? Yadifa-1.0.2 ! Pdnsd . 32. . Global. - UDP BCP38 , ... ! ! 33. . Global. - UDP BCP38 , ... ! DNS cache poisoning (Kaminsky) ! ! ! DNSSec , 34. . Global. - UDP BCP38 , ... ! DNS cache poisoning (Kaminsky) ! DNSSec ! ! , DNS Amplifier : - - RRL (DROP, SLIP) - DROP src_port 53 - - dig isoc.org ANY (26 vs 2435) - 35. . . 36. . . 37. . . 38. ! serenheit@highloadlab.com</p>