Registry of the future

Late last year, we submitted an article to IEEE Communications Magazine, describing our vision of how the registry of the future will function at the technical level. The vision had been developed on the basis of work carried out by SIDN Labs and its research partners.

Accepted

We're very pleased to report that the article was accepted and appears in the January 2017 issue of IEEE ComMag. The magazine is a global leader in its field with a wide readership. It publishes carefully selected tutorial-style articles based on research by universities and enterprises. Our article has been included under the theme Network and Service Management.

Control plane

At the heart of our vision is the concept of a ‘control plane’: an intelligent system for use by TLD registries, i.e. the registries that run top-level domains, such as PIR for .org and SIDN for .nl. (In the article, we refer to TLD registries as 'TLD operators'.)

We envisage a control plane being central to the way the registry of the future functions. A control plane is essentially an extension to the traditional registry functions of DNS management and domain name registration. It will automatically flag up potential threats in the TLD by continuously analysing the registry's two key datasets: the typically large amounts of DNS traffic that the registry handles and its database of registered domain names. Early awareness of threats in the TLD will enable the registry to share intelligence with registrars, ISPs and others. So the plane will support a system of collaborative security, with the various stakeholders working together to enhance the security and stability of the TLD. Used in combination with DNS anycast, the control plane will also allow the registry to dynamically scale its DNS infrastructure, and thus to head off DDoS attacks, for example.

Prototype under development

With the help of research partners such as the University of Twente, SIDN Labs is currently developing a prototype of the control plane. Our implementation is based on ENTRADA, a series of open-source modules built on top of a Hadoop data storage cluster. Using the modules, a registry or DNS operator can develop and run threat-detection software, such as the New Domains Early Warning System (NDEWS) created by SIDN Labs. The set-up also makes it easy for the registry to import DNS traffic to the control plane.

The control plane additionally provides a technical, legal and organisational framework for protecting the privacy of the TLD's users. SIDN has already developed such a framework, which is now in use for .nl.

Expert recognition

Publication in IEEE ComMag is an important form of recognition for us. It shows that the research community recognises that we are engaged in innovative and relevant research.

Our article was originally submitted in June, after which it was reviewed by three anonymous experts in the field. We then produced a final version reflecting the reviewers' feedback.

In the period ahead, we plan to refine the TLD control plane concept in tandem with our research partners.