Report from 2024-05-02 23:19 for 17759 resolver at 9722 probes
that do QNAME Minimization

• Clear do QNAME Minimization
• do not do QNAME Minimization

• Internal, Forwarding & External
• Top 10 Authoritative ASNs
• Top 10 Resolver ASNs
• Top 10 Probe ASNs
• Qname Minimization
• Flagday
• IPv4 Route origin Validation
• IPv6 Route origin Validation
• Top EDNS Client Subnet masks
• Top 10 NX domain rewritingASNs
• Root Key Trust Anchor Sentinel for DNSSEC
• DNSKEY Algorithm ED448 support
• DNSKEY Algorithm ED25519 support
• DNSKEY Algorithm ECDSA-P384-SHA384 support
• DNSKEY Algorithm ECDSA-P256-SHA256 support
• DNSKEY Algorithm ECC-GOST support
• DNSKEY Algorithm RSA-SHA512 support
• DNSKEY Algorithm RSA-SHA256 support
• DNSKEY Algorithm RSA-SHA1-NSEC3 support
• DNSKEY Algorithm DSA-NSEC3 support
• DNSKEY Algorithm RSA-SHA1 support
• DNSKEY Algorithm DSA support
• DNSKEY Algorithm RSA-MD5 support
• DS Algorithm GOST DS support
• DS Algorithm SHA-384 DS support
• IPv6
• TCP
• TCP6

Internal, Forwarding & External

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• have the same ASN as the probe (internal)
• are forwarding to a resolver with a different ASN (forwarding)
• have a ASN different from the probe ASN (external)

Top 10 Authoritative ASNs

on 2024-05-02 23:19
with 17759 resolvers

• coming from AS15169
• coming from AS13335
• coming from AS42
• coming from AS36692
• coming from AS0
• coming from AS3320
• coming from AS12322
• coming from AS8881
• coming from AS6830

Top 10 Resolver ASNs

on 2024-05-02 23:19
with 17759 resolvers

• within AS15169
• within AS13335
• within AS19281
• within AS3320
• within AS36692
• within AS6830
• within AS12322
• within AS7922
• within AS8881

Top 10 Probe ASNs

on 2024-05-02 23:19
with 17759 resolvers

• from probes within AS3320
• from probes within AS12322
• from probes within AS6830
• from probes within AS7922
• from probes within AS8881
• from probes within AS3215
• from probes within AS701
• from probes within AS3265
• from probes within AS31334

Qname Minimization

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• Clear do QNAME Minimization
• do not do QNAME Minimization

Flagday

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• Does not work around EDNS timeouts

IPv4 Route origin Validation

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• are protected by IPv4 Route origin Validation

IPv6 Route origin Validation

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• are protected by IPv6 Route origin Validation

Top EDNS Client Subnet masks

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• send an EDNS Client Subnet option

Top 10 NX domain rewritingASNs

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• do NXDOMAIN Rewriting
• do not do NXDOMAIN Rewriting

Root Key Trust Anchor Sentinel for DNSSEC

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• have root KSK 19036 (and root KSK sentinel support)
• have root KSK 20326 (and root KSK sentinel support)
• do not have root KSK 20326 (but do have root KSK sentinel support)

DNSKEY Algorithm ED448 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm ED448
• do not validate DNSKEY algorithm ED448
• have broken DNSKEY algorithm ED448 validation support

DNSKEY Algorithm ED25519 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm ED25519
• do not validate DNSKEY algorithm ED25519
• have broken DNSKEY algorithm ED25519 validation support

DNSKEY Algorithm ECDSA-P384-SHA384 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm ECDSA384
• do not validate DNSKEY algorithm ECDSA384
• have broken DNSKEY algorithm ECDSA384 validation support

DNSKEY Algorithm ECDSA-P256-SHA256 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm ECDSA256
• do not validate DNSKEY algorithm ECDSA256
• have broken DNSKEY algorithm ECDSA256 validation support

DNSKEY Algorithm ECC-GOST support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm ECC-GOST
• do not validate DNSKEY algorithm ECC-GOST
• have broken DNSKEY algorithm ECC-GOST validation support

DNSKEY Algorithm RSA-SHA512 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm RSA-SHA512
• do not validate DNSKEY algorithm RSA-SHA512
• have broken DNSKEY algorithm RSA-SHA512 validation support

DNSKEY Algorithm RSA-SHA256 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm RSA-SHA256
• do not validate DNSKEY algorithm RSA-SHA256
• have broken DNSKEY algorithm RSA-SHA256 validation support

DNSKEY Algorithm RSA-SHA1-NSEC3 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm RSA-NSEC3
• do not validate DNSKEY algorithm RSA-NSEC3
• have broken DNSKEY algorithm RSA-NSEC3 validation support

DNSKEY Algorithm DSA-NSEC3 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validates DNSKEY algorithm DSA-NSEC3
• do not validate DNSKEY algorithm DSA-NSEC3
• have broken DNSKEY algorithm DSA-NSEC3 validation support

DNSKEY Algorithm RSA-SHA1 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm RSA-SHA1
• do not validate DNSKEY algorithm RSA-SHA1
• have broken DNSKEY algorithm RSA-SHA1 validation support

DNSKEY Algorithm DSA support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm DSA
• do not validate DNSKEY algorithm DSA
• have broken DNSKEY algorithm DSA validation support

DNSKEY Algorithm RSA-MD5 support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DNSKEY algorithm RSAMD5
• do not validate DNSKEY algorithm RSAMD5
• have broken DNSKEY algorithm RSAMD5 validation support

DS Algorithm GOST DS support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DS algorithm GOST
• do not validate DS algorithm GOST
• have broken DS algorithm GOST validation support

DS Algorithm SHA-384 DS support

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• validate DS algorithm SHA384
• do not validate DS algorithm SHA384
• have broken DS algorithm SHA384 validation support

IPv6

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• can reach IPv6 only nameservers

TCP

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• can return over TCP

TCP6

on 2024-05-02 23:19
with 17759 resolvers	with 9722 probes

• can return over TCP (to an IPv6 only nameserver)