Paper on IPv6 DNS Measurement

Mukund Sivaraman muks at isc.org
Tue Sep 30 11:25:35 UTC 2014


Hi Gaurav

On Tue, Sep 30, 2014 at 03:57:49PM +0530, Gaurav Kansal wrote:
> Our finding was:-
> 
> 1. About 50% of the query is from Google AS
> 2. Around 7.4% queries are from Facebook AS (i.e., 32934)
> and many other......
> 
> Fb is on the 2nd spot in the AS wise query statistics. (Paper
> http://kansal15.blogspot.in/2014/09/ipv6-dns-measurement-stats.html )
> 
> I was wondering why Fb is querying us and that too in so much quantity ?
> Did anyone face similar behavior from FB ASn ??

(The dns-operations list may be better suited for such a question.)

The result you are seeing could be because Facebook is one of the most
popular applications used by the general public, and many people post
many links often on Facebook (including those in the .nic.in and .gov.in
domains), and when the Facebook application tries to download the
webpage, Facebook's resolvers contact your authoritative server using
IPv6.

See https://www.facebook.com/externalhit_uatext.php

It wouldn't be surprising if Facebook also refreshes information about a
URL after a time period, or periodically checks webpages during a user's
link click before a redirect, creating additional queries.

The statistic of IPv6 queries could be very different from overall
traffic, as you are measuring only networks that could contact your
servers over IPv6.

		Mukund
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 2881 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140930/39aa9b59/attachment.bin>


More information about the bind-users mailing list