An Example of Simulation

The below movie shows the processes of DNSSEC simulation. This movie is a concept demonstration of DNSSEC Re-Keying simulation using our software.

  • A pink circle shows an authoritative DNS server
  • A blue circle shows a resolver DNS server
  • A ¬†purple circle shows a resolver DNS server with outdated trust anchor
  • A red big circle shows a key server.
  • The allows in the movie show traffic of DNS Key exchanges.

Around 1:00 to 1:30, the trust anchors of authoritative DNS servers are expired and a lot of Re-keying queries from key server to authoritative DNS servers are observed. This is an evaluation of traffic impacts when DNSSEC is enabled.

The simulation is performed by collaboration with NICT StarBED.