About the talk
The Domain Name System (DNS) plays a vital role in today's Internet but relies on complex distributed management of records. DNS misconfiguration related outages have rendered popular services like GitHub, HBO, LinkedIn, and Azure inaccessible for extended periods. This paper introduces GRoot, the first verifier that performs static analysis of DNS configuration files, enabling proactive and exhaustive checking for common DNS bugs; by contrast, existing solutions are reactive and incomplete. GRoot uses a new, fast verification algorithm based on generating and enumerating DNS query equivalence classes. GRoot symbolically executes the set of queries in each equivalence class to efficiently find (or prove the absence of) any bugs such as rewrite loops. To prove the correctness of our approach, we develop a formal semantic model of DNS resolution. Applied to the configuration files from a campus network with over a hundred thousand records, GRoot revealed 109 bugs within seconds. When applied to internal zone files consisting of over 3.5 million records from a large infrastructure service provider, GRoot revealed around 160k issues of blackholing, initiating a cleanup. Finally, on a synthetic dataset with over 65 million real records, we find GRoot can scale to networks with tens of millions of records.
I am a third-year Ph.D. student, in the CS department at UCLA, where I am fortunate to be advised by two amazing people, Prof. Todd Millstein, and Prof. George Varghese.View the profile
Hello everyone. I'm single and I need to talk about how to include apply to addition to eat for dinner conversations and me from your city. Dennis, the Dominion system, as most of us have it allows users to connect online services, through Tuesday, evening to my name's by transit. A such a thing, as competition dinners, can you to service disruptions as is evident from the decent Global outage digital database? I'm stories Think I should get these services in services. And
another, The Fixx You'll be surprised to know, like what it was such a cute outing. It was just a one-day, nothing good configuration to him during migration to my destinations. The Janet and he's approaching this today to check for Dennis correctness is black boxes in this approach, all queries and a gentleman should not need it for some reason. Does not want that to happen but any update So he doesn't stop with your business and can you still drive it in the system? And this is the only place with some
answers. I need the address of the alignment system. The second approach used by someone called me since today is configuration on vines before they put in their production system. The drawback to this approach and that is not an automated process. And if so what would be the ideal situation has configurations? the ideal situation would be verification to the 10 things to do in this conflicts and properties as in food, and it is certified that the property
but there is no such medications to the Texas relay for DNS configurations. As Avatar divisions, we present the first practice verification tool for Dennis, configurations, that can verify if a Property Holdings for all the Spells. I thought division two a paper into it and I'll get into gender Equity equals classes to cover all possible. Dennis producing a scalable model as they're too many credits to intimidate. It also the first person to form a solution from a disease that can be use for automatically chickens on fence.
We also, should I be using Bali clear glasses that we generated music on. Put any to place in Anakin's last Adidas as a nation is to say, Our approach is also complete, a zip code all queries since each Cleveland Stratus 2020 class. Route 109 bus on campus on fights and 160 Blackalicious on the internet service provider. Group text doesn't put the contradictions, which are known as owned by Indian astrology and a property of interest to the user to this picture today. the more interesting properties of those
that have been satisfied by on quiz, but it's not Oh. It could be that we saw earlier. Do a type of property, holds one can animals all about all the trees and check the property for each good. Dennis is a domain name like you said the dirty to you and the tight lately but I did record but to anywhere to go characters and like 10 to 15 times. So how does blue check the properties? Efficient, as the region, did the sequence letters and checks properties?
Goat twisting, The Zone fines and Concepts exam, which record label graph, which is basically the union of all the domain names for ninjas on Facebook. What's an 808? Please see our paper for more details on this challenges. Bluetooth disable. Each equals class is a printed by symbolic play. It's symbolic when he's like a representative. Equals class and these grades are symbolically exhibited. I'll look at them to interpretation club for the Egyptians class representing places that are
using The key inside the expense of the independent, you can make to get that and be testing interpretation. The next step after the interpretation darkening fate is the property checking fees. Property, 500 sunglass, property for example on how to satisfy certain criteria. I didn't say that I lost my lip piercing is that so the glass can also be checking palette by need the glass in spending of the verification process. We are in route to the university.
Departments managing their own zone 5 in total, higher than 20 cases records of which they referred to as follows. Mutakala 7 seconds on this date of the first table function relations and it answered. But, I understand the behavior of the DNS configurations of this property, early birds. But interesting Behavior They were fortunate delegation consistency with the match between parent and child Zone fines, and delegation as these birds affects the visibility and redundancy of the song and also responds back.
When are the operator said that, you check if an insult is working properly, the Galaxy use the IP address instead of the name so they never caught these issues. Acid Elliot operators can use group text for properties to understand. They convict better example and he guaranteed that they said, the only 24 cases possible. Be a big do today in Tamil song Pines of a large infrastructure service provider in too deep like that. It is his due to incomplete. Decommissioning of posting that are no longer in use to be cleaned up if they want to be.
Related work into suggesting linking approaches from building dust in the search bar from live boxing from my vantage point. And is it just her proposed numerous techniques to pass on stage with kitchen, Chandelier and feed, efficient example, and expensive with quality number of predicate intersections Look Angelic, defense classes, asymptotically faster than his approaches, the construction of domain names, that is group of the greatest. Superfruit vacation of the Nissan files and if we found online
examples of the campus 160 K black polling places on the Zone price of a large infrastructure, service provider and feel free to contact me on this email. Thank you. Thank you, Sarah. Who is questions? We have Michael Parrish, and Company on snack. The first one is, how do you know what is a generator equivalent class is correct. This depends on the subway station to check whether certain tienes blacks are implemented correctly. No, this is independent of the Cyber implementation. This is with respect to the domain names, like a peasant, his
own files. We argue that the sequences that region date are correct. And if it is wrong, then it affects the way that they can grab something. So the bugs and the diving competition shows up in the interpretation graphs. What? Actually, so to actually send the question that I visit them, this is all done, that could be using Overlake internal model of the Earth. So, on the next question, how do you compare DNS verification with low-level network? Configuration verification, control
plan, verification techniques line Minesweeper, could be, totally used to verify DNS. Make a mine supercloset use, abilities, and smt solvers. Then it becomes like an awfully expensive as that is not expecting the dinner that you were throwing away to just use it as a cell data. Me pretty cases similar, and if you just use atomic radius pipes of the Bee, Gees are so expensive. Is the same with mine supposed to let you use that. It can be logical than
just using the height of 2/3 of the DNS. We have one last question and the remaining questions. I'm sure several can also just sucks. We are still looking. How do we change the eclipse glasses on the fly to adjust for like two, small recording sections and deletions and we're still looking into it? This is for just one, snap shortly parent and then give me the direction of the Snapchats yet. Congratulations on the best shooter in the world. Again, thank you very much for a really great talk and congratulations again on the
dresser received as an artifact evaluation at badges, which is fantastic. It's great to see work like this, that where folks are actually releasing the artifacts, others can build on an extender work. Thank you. I'm, so we have some questions from from slakah, see, ready answer, but let's do it on video as well. And I'm so from Samuel, how many quillin's classes are generated for a typical property in your experience? And, of course, I need the number of eagles catching any if there are no demons, but if
we move, and we can just anybody at all the credits, like other shows has lice. Like, it's going to be some of color 255 character possible, quizzes. But if you use a vertical shaft engine. Almost a quarter of any plans classes and resource records in the zone times. I have a question about the phone model, the seems like it's really cool to see my things that were previously specified in in rsc's would get action mechanized it in some sort of like the fact
about your experience. And I'm also curious if you didn't evaluation besides the decidedly virus in your paper to make sure that the mother you had, you not captured what, what was intended me RCS and get some action figures for the band Testament. Solid, whether I really see the same but I haven't, we haven't, like, leaving it anywhere. So, anyway, that you have did this evolution by Pearl Jam. Pump it into and test on the phone with water. They don't do it like me songs, like Bittersweet like a live band. Invitational, some of the, invitation of the illness. And anything especially
tricky or novel or interesting about the model of self. What is it? Anything especially sort of interesting about the model itself as you or I think it's, it's hard to explain because there are three cases which involved the names, wildcards and Lexie names and the inner circle of the interplay between all these portents of records of what rule will apply ban. And what, what happens when it is on his way to court and what type of all of this? I wish I could have time for one more question on slack from Milan, can you say about the running time of Groot and does it have a limit on the number
of rules or some files? I think it's be able to show that group wasn't too scary deliver the number to Social cost. The largest domain that which I was around like 20 million records and it took, but only acting as far as I remember on this data set. So it doesn't mean it doesn't get any crazier than about your social course. Great, maybe. I'll ask one more quick, question. Sounds like you work with some some artists like, yes. I'm met of them. That's when it falls to, and willing to share their experiences and try to figure out and fix this stuff. I think most of the stuff that
Buy this talk
Buy this video
Our other topics
With ConferenceCast.tv, you get access to our library of the world's best conference talks.