Detecting and Refactoring Operational Smells within the Domain Name System

The Domain Name System (DNS) is one of the most important components of the Internet infrastructure. DNS relies on a delegation-based architecture, where resolution of names to their IP addresses requires resolving the names of the servers responsible for those names. The recursive structures of the inter dependencies that exist between name servers associated with each zone are called dependency graphs. System administrators' operational decisions have far reaching effects on the DNSs qualities. They need to be soundly made to create a balance between the availability, security and resilience of the system. We utilize dependency graphs to identify, detect and catalogue operational bad smells. Our method deals with smells on a high-level of abstraction using a consistent taxonomy and reusable vocabulary, defined by a DNS Operational Model. The method will be used to build a diagnostic advisory tool that will detect configuration changes that might decrease the robustness or security posture of domain names before they become into production.Comment: In Proceedings GaM 2015, arXiv:1504.0244

RANS Equations with Explicit Data-Driven Reynolds Stress Closure Can Be Ill-Conditioned

Reynolds-averaged Navier--Stokes (RANS) simulations with turbulence closure models continue to play important roles in industrial flow simulations. However, the commonly used linear eddy viscosity models are intrinsically unable to handle flows with non-equilibrium turbulence. Reynolds stress models, on the other hand, are plagued by their lack of robustness. Recent studies in plane channel flows found that even substituting Reynolds stresses with errors below 0.5% from direct numerical simulation (DNS) databases into RANS equations leads to velocities with large errors (up to 35%). While such an observation may have only marginal relevance to traditional Reynolds stress models, it is disturbing for the recently emerging data-driven models that treat the Reynolds stress as an explicit source term in the RANS equations, as it suggests that the RANS equations with such models can be ill-conditioned. So far, a rigorous analysis of the condition of such models is still lacking. As such, in this work we propose a metric based on local condition number function for a priori evaluation of the conditioning of the RANS equations. We further show that the ill-conditioning cannot be explained by the global matrix condition number of the discretized RANS equations. Comprehensive numerical tests are performed on turbulent channel flows at various Reynolds numbers and additionally on two complex flows, i.e., flow over periodic hills and flow in a square duct. Results suggest that the proposed metric can adequately explain observations in previous studies, i.e., deteriorated model conditioning with increasing Reynolds number and better conditioning of the implicit treatment of Reynolds stress compared to the explicit treatment. This metric can play critical roles in the future development of data-driven turbulence models by enforcing the conditioning as a requirement on these models.Comment: 35 pages, 18 figure

A microscopic approach to nonlinear Reaction-Diffusion: the case of morphogen gradient formation

We develop a microscopic theory for reaction-difusion (R-D) processes based on a generalization of Einstein's master equation with a reactive term and we show how the mean field formulation leads to a generalized R-D equation with non-classical solutions. For the $n$-th order annihilation reaction $A+A+A+...+A\rightarrow 0$, we obtain a nonlinear reaction-diffusion equation for which we discuss scaling and non-scaling formulations. We find steady states with either solutions exhibiting long range power law behavior (for $n>\alpha$) showing the relative dominance of sub-diffusion over reaction effects in constrained systems, or conversely solutions (for $n<\alpha<n+1$) with finite support of the concentration distribution describing situations where diffusion is slow and extinction is fast. Theoretical results are compared with experimental data for morphogen gradient formation.Comment: Article, 10 pages, 5 figure

DNS zones revisited

Recent research [Pap04b] suggests DNS reliability and performance is not up to the levels it should be due to misconfigurations. This paper checks the configuration of nameserver zones against additional requirements, recommendations and best-practices. It shows that almost one in four domains fails to pass one or more of these checks. During the checks an interesting correlation is established: a higher number of nameservers for a single zone usually decreases reliability and performance instead of increasing both

Understanding Internet topology: principles, models, and validation

Building on a recent effort that combines a first-principles approach to modeling router-level connectivity with a more pragmatic use of statistics and graph theory, we show in this paper that for the Internet, an improved understanding of its physical infrastructure is possible by viewing the physical connectivity as an annotated graph that delivers raw connectivity and bandwidth to the upper layers in the TCP/IP protocol stack, subject to practical constraints (e.g., router technology) and economic considerations (e.g., link costs). More importantly, by relying on data from Abilene, a Tier-1 ISP, and the Rocketfuel project, we provide empirical evidence in support of the proposed approach and its consistency with networking reality. To illustrate its utility, we: 1) show that our approach provides insight into the origin of high variability in measured or inferred router-level maps; 2) demonstrate that it easily accommodates the incorporation of additional objectives of network design (e.g., robustness to router failure); and 3) discuss how it complements ongoing community efforts to reverse-engineer the Internet

A novel middleware for the mobility management over the Internet

The features of mobility, which enormously impact on how communication is evolving into the future, represent a particular challenge in today’s wireless networking research. After an identification and evaluation of the gap between the discontinuities of the communication service inherent to the physical layer of mobile networks and the continuity requirements issue from the stream centric multimedia applications, we propose a novel middleware 3MOI (Middleware for the Mobility Management Over the Internet) which can perform efficient and context-aware mobility management and satisfy new mobility requirements such as dynamical location management, fast handover, and continuous connection support

Securing The Root: A Proposal For Distributing Signing Authority

Management of the Domain Name System (DNS) root zone file is a uniquely global policy problem. For the Internet to connect everyone, the root must be coordinated and compatible. While authority over the legacy root zone file has been contentious and divisive at times, everyone agrees that the Internet should be made more secure. A newly standardized protocol, DNS Security Extensions (DNSSEC), would make the Internet's infrastructure more secure. In order to fully implement DNSSEC, the procedures for managing the DNS root must be revised. Therein lies an opportunity. In revising the root zone management procedures, we can develop a new solution that diminishes the impact of the legacy monopoly held by the U.S. government and avoids another contentious debate over unilateral U.S. control. In this paper we describe the outlines of a new system for the management of a DNSSEC-enabled root. Our proposal distributes authority over securing the root, unlike another recently suggested method, while avoiding the risks and pitfalls of an intergovernmental power sharing scheme