Janus: Leveraging Incremental Computation for Efficient DNS Verification
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2025
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866917059646980096 |
|---|---|
| author | Wang, Yao Yu, Kexin Xu, Wenyun Hu, Kaiqiang Wang, Ziyi You, Lizhao Su, Qiang Guo, Dong Du, Haizhou Feng, Wanjian Song, Qingyu Kong, Linghe Xiang, Qiao Shu, Jiwu |
| author_facet | Wang, Yao Yu, Kexin Xu, Wenyun Hu, Kaiqiang Wang, Ziyi You, Lizhao Su, Qiang Guo, Dong Du, Haizhou Feng, Wanjian Song, Qingyu Kong, Linghe Xiang, Qiao Shu, Jiwu |
| contents | Existing DNS configuration verification tools face significant issues (e.g., inefficient and lacking support for incremental verification). Inspired by the advancements in recent work of distributed data plane verification and the resemblance be- tween the data plane and DNS configuration, we tackle the challenge of DNS misconfiguration by introducing Janus, a DNS verification tool. Our key insight is that the process of a nameserver handling queries can be transformed into a matching process on a match-action table. With this insight, Janus consists of (1) an efficient data structure for partition query space based on the behaviors, (2) a symbolic execution algorithm that specifies how a single nameserver can efficiently cover all possible queries and ensure the accuracy of verification, (3) a mechanism to support incremental verification with less computational effort. Extensive experiments on real-world datasets (with over 6 million resource records) show that Janus achieves significant speedups, with peak improvements of up to 255.7x and a maximum 6046x reduction in the number of LECs. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2511_02559 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Janus: Leveraging Incremental Computation for Efficient DNS Verification Wang, Yao Yu, Kexin Xu, Wenyun Hu, Kaiqiang Wang, Ziyi You, Lizhao Su, Qiang Guo, Dong Du, Haizhou Feng, Wanjian Song, Qingyu Kong, Linghe Xiang, Qiao Shu, Jiwu Networking and Internet Architecture Existing DNS configuration verification tools face significant issues (e.g., inefficient and lacking support for incremental verification). Inspired by the advancements in recent work of distributed data plane verification and the resemblance be- tween the data plane and DNS configuration, we tackle the challenge of DNS misconfiguration by introducing Janus, a DNS verification tool. Our key insight is that the process of a nameserver handling queries can be transformed into a matching process on a match-action table. With this insight, Janus consists of (1) an efficient data structure for partition query space based on the behaviors, (2) a symbolic execution algorithm that specifies how a single nameserver can efficiently cover all possible queries and ensure the accuracy of verification, (3) a mechanism to support incremental verification with less computational effort. Extensive experiments on real-world datasets (with over 6 million resource records) show that Janus achieves significant speedups, with peak improvements of up to 255.7x and a maximum 6046x reduction in the number of LECs. |
| title | Janus: Leveraging Incremental Computation for Efficient DNS Verification |
| topic | Networking and Internet Architecture |
| url | https://arxiv.org/abs/2511.02559 |