NS & NSID of Amazon Route 53
•Download as PPTX, PDF•
0 likes•447 views
This document discusses results from using the dig command with the +nsid option to analyze Amazon Route 53. The document contains the following information: (1) An agenda outlining what will be analyzed about Route 53 including the number of name servers (NS), IP addresses, edge locations, name server IDs (NSIDs) for individual NS, and unique NSIDs observed. (2) Results showing there are 2048 NS distributed across the top level domains .com, .net, .org, and .co.uk with 512 NS each. There are also around 80 edge locations. (3) Findings that a single NS/IP address can return multiple NSIDs depending on the query location, due
Recommended
More Related Content
Similar to NS & NSID of Amazon Route 53
Similar to NS & NSID of Amazon Route 53 (17)
More from @ otsuka752
More from @ otsuka752 (20)
Recently uploaded
Recently uploaded (20)
NS & NSID of Amazon Route 53
- 1. NS & NSID of Amazon Route 53 +nsid で dig ったら分かったこと What I learned with dig +nsid 2020/12/19 @otsuka0752
- 3. (1)NS の数 (2)NS の IPアドレスの数 (3)エッジロケーションの数 (4)特定の NS の NSID の数 (5)全ての NS の NSID の数 (6)ユニークな NSID の数 アジェンダ
- 4. (1)Num of NS (2)Num of IPAddr of NS (3)Num of Edge Location (4)Num of NSID for given NS (5)Num of NSID for All NS (6)Num of observed unique NSID Agenda
- 5. 2048 com : 512 net : 512 org : 512 co.uk : 512 (1)Num of NS 5 [A-1] Under the Hood of Amazon Route 53 (ARC408-R1) - AWS re:Invent 2018 https://www2.slideshare.net/AmazonWebServices/under-the-hood-of-amazon-route-53-arc408r1-aws-reinvent-2018 [B-1] stripe_ns-of-R53 https://gist.github.com/otsuka752/34ec7aa2a0315b02fb4e3eb0f449b8fd
- 6. (2)Num of IPAddr of NS 6 [B-2] list_ns-of-R53 https://gist.github.com/otsuka752/993b1851d5772f72c161effb6eb1a23e 2048 com : 512 net : 512 org : 512 co.uk : 512
- 7. 約 80 (2020年12月時点) about 80 (as of Dec 2020) (3)Num of Edge Location 7 [A-1] Under the Hood of Amazon Route 53 (ARC408-R1) - AWS re:Invent 2018 https://www2.slideshare.net/AmazonWebServices/under-the-hood-of-amazon-route-53-arc408r1-aws-reinvent-2018 [A-2(ja)] Amazon Route 53 / パブリック DNS クエリログ記録 https://docs.aws.amazon.com/ja_jp/Route53/latest/DeveloperGuide/query-logs.html [A-3] Amazon Route 53 の特徴 / Amazon Route 53 features https://aws.amazon.com/jp/route53/features/
- 8. 8 [A-3] Amazon Route 53 の特徴 / Amazon Route 53 features https://aws.amazon.com/jp/route53/features/ から抜粋 (3)Num of Edge Location
- 9. 9 [A-3] Amazon Route 53 の特徴 / Amazon Route 53 features https://aws.amazon.com/jp/route53/features/ から抜粋 (3)Num of Edge Location
- 10. Route 53 エッジロケーション クエリに応答した Route 53 エッジロケーション。 各エッジロケーションは、3 文字コードと、任意の数字で 識別されます (例: DFW3)。通常、この 3 文字コードは 、エッジロケーションの近くにある空港の、国際航空運送協 会の空港コードに対応します。 (これらの略語は今後変更 される可能性があります)。 10 [A-3] Amazon Route 53 の特徴 / Amazon Route 53 features https://aws.amazon.com/jp/route53/features/ から抜粋 (3)Num of Edge Location
- 11. 11 (3)Num of Edge Location
- 12. 12 (3)Num of Edge Location
- 13. 13 (3)Num of Edge Location
- 14. dig +nsid +norec dublin.red. @(NS) $ dig +nsid +norec dublin.red. @ns-403.awsdns-50.com. $ dig +nsid +norec dublin.red. @ns-583.awsdns-08.net. $ dig +nsid +norec dublin.red. @ns-1272.awsdns-31.org. $ dig +nsid +norec dublin.red. @ns-1703.awsdns-20.co.uk. (4)Num of NSID for given NS 14 [A-4] Extension Mechanisms for DNS (EDNS(0)) https://tools.ietf.org/html/rfc6891 [A-5] DNS Name Server Identifier (NSID) Option https://tools.ietf.org/html/rfc5001
- 15. 15 $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-403.awsdns-50.com. | grep NSID; done | sort | uniq (Tokyo) $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-403.awsdns-50.com. | grep NSID; done | sort | uniq ; NSID: 31 66 65 64 38 (snip) ("1fed879e7b00acca68a7e7db540d00f7 -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-583.awsdns-08.net. | grep NSID; done | sort | uniq ; NSID: 33 37 61 38 39 (snip) ("37a891510b45947b7726a19f7dd91d4a -") ; NSID: 36 36 35 30 62 (snip) ("6650b0d815f8e393eeec143eb43d0247 -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-1272.awsdns-31.org. | grep NSID; done | sort | uniq ; NSID: 37 66 61 38 33 (snip) ("7fa83c9c969912ddc4879d7345f92bdb -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-1703.awsdns-20.co.uk. | grep NSID; done | sort | uniq ; NSID: 37 62 37 66 35 (snip) ("7b7f544786a9137526bae741205a9e10 -") (4)Num of NSID for given NS
- 16. $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-403.awsdns-50.com. | grep NSID; done | sort | uniq (Dublin) $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-403.awsdns-50.com. | grep NSID; done | sort | uniq ; NSID: 37 35 38 39 38 (snip) ("758989b8a91eaa6347c0e27feb0a1605 -") ; NSID: 38 61 32 61 62 (snip) ("8a2abc144e689bc33f9df80b5a23565d -") ; NSID: 39 35 38 64 62 (snip) ("958dba0a19c99922f1ae25fe6fc8bf0e -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-583.awsdns-08.net. | grep NSID; done | sort | uniq ; NSID: 32 64 33 64 30 (snip) ("2d3d08a3f0e76ed0357000a68cce130c -") ; NSID: 35 34 63 34 30 (snip) ("54c400ded644b372d67bdc32b0ce877a -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-1272.awsdns-31.org. | grep NSID; done | sort | uniq ; NSID: 37 39 62 38 30 (snip) ("79b804fb4e3859e8f9d1bb26ecd9d20d -") ; NSID: 39 64 62 66 62 (snip) ("9dbfb025f33727284d02147e3cf48cd8 -") ; NSID: 63 39 35 62 62 (snip) ("c95bb8fa616a51e607f53d4cdbb7eab3 -") $ for j in {1..20}; do dig +nsid +norec dublin.red. @ns-1703.awsdns-20.co.uk. | grep NSID; done | sort | uniq ; NSID: 65 62 37 33 38 (snip) ("eb7380e70e586e5c96a57319720cc43e -") 16 (4)Num of NSID for given NS
- 17. • 1つの NS/IPアドレスに複数の NSID(サーバ) • dig するエリアで NSID も NSID の数も異なる Anycast で到達するエッジロケーションが異なるから 17 [B-2] list_ns-of-R53 https://gist.github.com/otsuka752/993b1851d5772f72c161effb6eb1a23e (4)Num of NSID for given NS
- 18. 18 NRT12-C4 ICN54-C2 ICN54-C1 ICN55-C1 NRT20-C3 ns-403.awsdns-50 .com ns-583.awsdns-08 .net ns-1272.awsdns-31 .org ns-1703.awsdns-20 .co.uk Tokyo CloudWatch Log stream Tokyo (4)Num of NSID for given NS
- 19. 19 CDG3-C1 CDG3-C2 CDG53-C1 MAN50-C2 MAN50-C3 LHR62-C3 LHR62-C4 LHR62-C5 LHR61-C2 ns-403.awsdns-50 .com ns-583.awsdns-08 .net ns-1272.awsdns-31 .org ns-1703.awsdns-20 .co.uk Dublin CloudWatch Log stream Dublin (4)Num of NSID for given NS
- 20. 20 (5)Num of NSID for All NS • 全て(x2048)の NS に対して dig dig +nsid (domain-name) @(ns-0) dig +nsid (domain-name) @(ns-1) dig +nsid (domain-name) @(ns-2) … dig +nsid (domain-name) @(ns-2046) dig +nsid (domain-name) @(ns-2047) • dig +nsid するエリアも変える 世界各地の 17の地域から Virginia, Ohio, California, Oregon, Canada, Dublin, London, Paris, Frankfurt, Stockholm, Tokyo, Seoul, Osaka, Singapore, Sydney, Mumbai, SaoPaulo
- 22. • NS 上に無いドメイン名だと status:REFUSED デタラメなドメイン名指定では NSID を得られない • NS ごとに適切なドメイン名を指定する必要あり [B-7] valid_domain_name_per_IPAddr 参照 22 [B-7] valid_domain_name_per_IPAddr https://gist.github.com/otsuka752/f327e82ff1ed520e053748ca1ea258a8 (5)Num of NSID for All NS
- 23. 23 [B-7] valid_domain_name_per_IPAddr https://gist.github.com/otsuka752/f327e82ff1ed520e053748ca1ea258a8 (5)Num of NSID for All NS
- 24. 24 Virginia 8046 Ohio 5736 California 4054 Oregon 4061 Canada 3747 Dublin 4567 London 3483 Paris 3553 Frankfurt 4059 ∑ 𝑋=0 2047 {dig +nsid (domain-name) @(ns-X) | grep NSID | sort | uniq | wc -l} Stockholm 2539 Tokyo 2539 Seoul 4418 Osaka 3047 Singapore 3552 Sydney 2539 Mumbai 3554 SaoPaulo 2031 (5)Num of NSID for All NS
- 25. 25 . . . . . . . . . . . . (5)Num of NSID for All NS
- 26. 26 [B-3] R53-nsid_Tokyo https://gist.github.com/otsuka752/6b48e1104ee4144e6bb8f57516f5e391 [B-4] R53-nsid_Dublin https://gist.github.com/otsuka752/0bb6e1965109b9105ceda9ea2dad02dc [B-5] R53-nsid_Sydney https://gist.github.com/otsuka752/b7b11ace18df339e49e8f8b6c38e855f [B-6] R53-nsid_All-Cities https://gist.github.com/otsuka752/03f42d18b42a7826d8b042b9ceeb476a (5)Num of NSID for All NS
- 27. 27 … … … … … … … … … ns-{512..1023} .net Tokyo ns-{0..511} .com ns-{1536..2047} co.uk ns-{1024..1535} .org 2539 ?Tokyo (5)Num of NSID for All NS
- 28. 28 … … … … … … … … … ns-{512..1023} .net Dublin ns-{0..511} .com ns-{1536..2047} co.uk ns-{1024..1535} .org 4567 ?Dublin (5)Num of NSID for All NS
- 30. Virginia 110 Ohio 80 California 48 Oregon 65 Canada 53 Dublin 53 London 42 Paris 42 Frankfurt 48 (6)Num of observed unique NSID 30 Stockholm 29 Tokyo 28 Seoul 69 Osaka 36 Singapore 40 Sydney 29 Mumbai 42 SaoPaulo 24 $ for X in {0..2047}; do dig +nsid (domain-name) @(ns-X)| grep NSID ; done | sort | uniq | wc -l
- 31. 31 … … … … … … … … … ns-{512..1023} .net Tokyo ns-{0..511} .com ns-{1536..2047} co.uk ns-{1024..1535} .org 28 Tokyo (6)Num of observed unique NSID
- 32. 32 … … … … … … … … … ns-{512..1023} .net Dublin ns-{0..511} .com ns-{1536..2047} co.uk ns-{1024..1535} .org 53 Dublin (6)Num of observed unique NSID
- 33. 33 … … … … … … … … … ns-{512..1023} .net Virginia ns-{0..511} .com ns-{1536..2047} co.uk ns-{1024..1535} .org 110 Virginia (6)Num of observed unique NSID
- 34. 34 ns-1 205.251.192.1 NSID-000 ns-2 205.251.192.2 NSID-001 ns-3 205.251.192.3 NSID-002 ns-2045 205.251.199.253 NSID-X-1 ns-2046 205.251.199.254 NSID-X 2048 の NS/IPAddr を(正確には .0 .255 以外の 2032 を) com net org co.uk ごとに複数の NSID でカバーしている まとめ . . .
- 35. END 35