Scholarlink

<p>The Domain Name System (DNS), one of the pivotal components of the Internet, translates the domain name portion of a URL into its corresponding IP address, which is necessary to establish connections with websites. Initially, UDP and TCP were used as transport layer protocols to transmit DNS messages. The traditional unencrypted nature of DNS queries and their underlying protocols leaves them susceptible to interception and alteration, posing serious privacy and security risks. Recognizing these vulnerabilities, recent advancements in DNS technology have led to the development of encrypted alternatives DoT, DoH, and DoQ. Evaluating the performance of the encrypted DNS protocols is crucial to know their impact on DNS query resolution, which directly influences user experience. In this paper, we compare the three encrypted DNS protocols based on time-based metrics. To assess the performance of each protocol, a local server that supports all encrypted DNS protocols was created, and also, servers supporting all of the encrypted DNS protocols globally were considered. Nearly 80% of DoQ’s handshake time was found to be negligible which makes it better than other encrypted protocols in terms of handshake time. Although the response time of all the protocols was comparable across the Internet, DoQ demonstrated a slight advantage in terms of the total time taken to resolve a DNS query. Our research also indicates a rise in the number of DoH and DoQ resolvers.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Evaluating the performance of encrypted DNS protocols across local and internet-connected DNS resolvers

  • 期刊论文

  • 发表日期：

    2026年6月1日

查看全文
  • Moulya D. M.,
  • Vijaya Krishna H. C.,
  • Saumya Hegde

摘要

The Domain Name System (DNS), one of the pivotal components of the Internet, translates the domain name portion of a URL into its corresponding IP address, which is necessary to establish connections with websites. Initially, UDP and TCP were used as transport layer protocols to transmit DNS messages. The traditional unencrypted nature of DNS queries and their underlying protocols leaves them susceptible to interception and alteration, posing serious privacy and security risks. Recognizing these vulnerabilities, recent advancements in DNS technology have led to the development of encrypted alternatives DoT, DoH, and DoQ. Evaluating the performance of the encrypted DNS protocols is crucial to know their impact on DNS query resolution, which directly influences user experience. In this paper, we compare the three encrypted DNS protocols based on time-based metrics. To assess the performance of each protocol, a local server that supports all encrypted DNS protocols was created, and also, servers supporting all of the encrypted DNS protocols globally were considered. Nearly 80% of DoQ’s handshake time was found to be negligible which makes it better than other encrypted protocols in terms of handshake time. Although the response time of all the protocols was comparable across the Internet, DoQ demonstrated a slight advantage in terms of the total time taken to resolve a DNS query. Our research also indicates a rise in the number of DoH and DoQ resolvers.