Open Root Server Network and the Future of Internet

The Open Root Server Network is a decentralized system that ensures the stability and security of the internet. It's a network of servers that help resolve domain names into IP addresses.

These servers are scattered all over the world, which helps prevent any single point of failure. This is a huge advantage, as it allows the internet to keep functioning even if one or more servers go down.

The Open Root Server Network is made up of a total of 13 root servers, each located in a different country. This geographic diversity helps to distribute the workload and prevent any single server from becoming overwhelmed.

The Open Root Server Network is operated by a non-profit organization called the Internet Systems Consortium (ISC).

For another approach, see: Types of Email Servers

The Open Root Server Network is a hub of innovation, with various implementations and projects aiming to improve the DNS infrastructure. Some organizations provide alternative DNS root services, such as additional top-level domains.

A unique perspective: Alternative DNS Root

The Yeti DNS Project is a notable example, sponsored by a Chinese state agency, which aims to build an alternative root server dedicated to IPv6. This project enables sovereign countries to explore and control the Internet and enhance their network sovereignty.

Other projects focus on specific areas, such as research and development. For instance, the DIINER project supports new research in Internet naming and trust, while the LocalRoot project allows you to serve a cached copy of the DNS Root Zone from your recursive resolver.

Here are some selected research projects that are part of the Open Root Server Network:

You can use a better method to update the DNS root servers, thanks to Jonathan de Boyne Pollard. This method uses the dnsqr tool to lookup all the current top-level nameservers, awk to extract their names, and the dnsip utility to find the corresponding IP addresses.

The magic is in the second command sequence. This method ensures you get the most current list of top-level DNS nameservers actually in use at any point in time.

Here's a breakdown of the steps involved in this method:

This method is a significant improvement over other methods, and it's a great example of how open-source tools can be used to make tasks easier and more efficient.

Public DNS servers were operated by the community of ORSN, providing Domain Name System access freely for everyone, without any limitation.

These public DNS servers were intended to respect user privacy and not log usage, although there was no technical means to enforce this. Anyone could choose to run an ORSN public DNS server and submit it via web form.

The ORSN public DNS servers were an alternative option for users who didn't have a local ORSN-ready server or whose local ISP didn't support the use of ORSN. Most of these servers are now non-operational, but a couple still work.

Here are some examples of ORSN public DNS servers:

OpenNIC is a user-owned and -controlled alternative to traditional domain registries. It provides a non-national democratic alternative to InterNIC and ICANN.

OpenNIC servers are able to resolve all ICANN top-level domains. They can also resolve OpenNIC-specific top-level domains.

OpenNIC has reached peering agreements with other alternative DNS roots, allowing for even more domain resolution options.

The Russian Domain System is an alternative DNS root project started in 2019 by Roskomnadzor, a government department. It's designed to provide an alternative DNS root for all users of the Internet within Russia.

This project is located on the Moscow Internet Exchange, which is a hub for internet traffic in Russia. As of March 2021, servers are already in place.

The main goal of the Russian Domain System is to continue the functioning of the Russian Internet subnetwork in case of its disconnection from the rest of the Internet. This is in line with the Sovereign Internet Law.

Some organizations provide alternative DNS root services, such as additional top-level domains. This is an example of how the Open Root Server Network can be supplemented by other entities.

Alternative DNS root services can be provided by organizations, which can create additional top-level domains.

For your interest: Voip and Internet Services

Our Open Root Server Network is committed to supporting research and development in the field of Internet naming and trust. We provide a testbed for researchers to experiment with new ideas and protocols.

We've developed a tool called LocalRoot that allows you to serve a cached copy of the DNS Root Zone from your recursive resolver, similar to RFC8806. This can help improve the stability and performance of your DNS infrastructure.

Our CLASSNET project aims to develop a framework for collaborative, community-driven enrichment and labeling of data. This will enable the use of our datasets for machine learning in networking and security.

We've also concluded a project called DDIDD, which applied existing and developed new defenses against Distributed-Denial-of-Service attacks for operational DNS infrastructure. These tools are now available as open source.

Here are some of our current research projects:

Existing TLDs are reserved in the Handshake blockchain, ensuring that resolving traditional domain names through a Handshake node or name server directs traffic back to ICANN's root servers.

This approach provides a level of security and stability, as it preserves the existing DNS infrastructure while still allowing for the creation of new TLDs.

The decentralized nature of Handshake's blockchain technology also enables owners of Handshake TLDs to add or change top-level resource records directly, without the need for intermediate registrars or delegating authorities.

This level of control and autonomy can help prevent malicious activity and ensure the integrity of domain name records.

The top 100,000 most popular domains are reserved as Handshake TLDs, which can be redeemed by the original domain owner, providing an added layer of security and ownership protection.

For more insights, see: Network Domain