ARTICLES TAGGED PUBLICATION

Authenticated Denial of Existence in the DNS (part 2)

Authenticated Denial of Existence in the DNS (part 2)

A new version of the paper on denial of existence in the DNS and how the protocol evolved. Version 2.
Authenticated Denial of Existence in the DNS

Authenticated Denial of Existence in the DNS

Paper on denial of existence in the DNS and how the protocol evolved. It answers two simple questions: Why do you need at most two NSEC records in negative responses? And why does NSEC3 requires...
Multi-Path Inter-Domain Routing: The Impact on BGP's Scalability, Stability, and Resilience to Link Failures

Multi-Path Inter-Domain Routing: The Impact on BGP's Scalability, Stability, and Resilience to Link Failures

Multi-path routing protocols are proposed to solve transient disconnectivity during convergence time. As their name implies, these protocols are designed to explore more paths than BGP in the...
NLnet Labs Annual Report 2010

NLnet Labs Annual Report 2010

We are happy to present NLnet Labs Annual report 2010. It is intended to present an overview of Labs' various activities to those who support NLnet Labs financially, through grants or support...
Secure Routing: State-of-the-Art Deployment and Impact on Network Resilience

Secure Routing: State-of-the-Art Deployment and Impact on Network Resilience

This ENISA publication reports on a study by NLnet Labs and GNKS Consult, surveying current state-of-the-art secure routing technologies. Network operators, engineers, and researchers are...
Impact of Topology on BGP Convergence

Impact of Topology on BGP Convergence

This MSc. thesis in collaboration with VU University Amsterdam, reports on the study to understand how the underlying topology of the Internet influences BGP performance. A highly scalable...
NLnet Labs Annual Report 2009

NLnet Labs Annual Report 2009

We are happy to present NLnet Labs Annual report 2009. It is intended to present an overview of Labs' various activities to those who support NLnet Labs financially, through grants or support...
NSEC3 Hash Performance

NSEC3 Hash Performance

We have measured the effect ofthe number of hash iterations in NSEC3 in terms of maximum query load usingNSD and Unbound. This document presents the results of these measurementsand compares the...
Securing DNS: Extending DNS Servers with a DNSSEC Validator

Securing DNS: Extending DNS Servers with a DNSSEC Validator

DNS Security Extensions (DNSSEC) is a proposed standard for securely authenticating information in the Domain Name System. DNSSEC validators check the digital signatures on DNS data. However,...