Listing 1:
Configuration settings in pdns.conf file used by the authoritative nameservers to control cache usage.
Listing 2:
Configuration settings in pdns.conf file used by the recursor to control cache usage.
Table 1.
Testbed networking configuration.
| DNS architecture | Image | Port |
|---|---|---|
| . | pqc-auth-powerdns | 5302, tcp/udp |
| pl. | pqc-auth-powerdns | 5303, tcp/udp |
| dnsseclab.pl. | pqc-auth-powerdns | 5304, tcp/udp |
| resolver | pqc-resolver-powerdns | 5311, tcp/udp |
Table 2.
Testbed zone configuration.
| Zone | Host | IPv4/IPv6 |
|---|---|---|
| . | s.root-servers.net. | 10.0.1.2 / fc01::2 |
| pl. | ns1.example.pl. | 10.0.1.3 / fc01::3 |
| dnsseclab.pl. | n21.dnsseclab.pl. | 10.0.1.4 / fc01::4 |
| resolver | - | 10.0.1.10 / fc01::10 |
| resolver (dnssec) | - | 10.0.1.11 / fc01::11 |
Listing 3:
Key parts of the Bash script showing the overall flow of the experiments and data collection process.
Table 3.
Hardware environment—the testbed is running inside Podman containers, on a virtual machine with Ubuntu Linux kernel 6.8.0-54-generic.
| Cores | Number of CPUs | RAM |
|---|---|---|
| 11th Gen Intel(R) Core(TM) i7-1185G7 @ 3.00GHz | 4 | 8 GB |
Figure 1.
Latency measured at the authoritative nameservers for FALCON-512 with A-type DNS queries.
Figure 2.
Latency measured at the authoritative nameservers for FALCON-512 with AAAA-type DNS queries.
Figure 3.
Latency measured at the authoritative nameservers for ECDSA with A-type DNS queries.
Figure 4.
Latency measured at the authoritative nameservers for ECDSA with AAAA-type DNS queries.
Figure 5.
Error rate measured at the authoritative nameservers for FALCON-512 with A-type DNS queries.
Figure 6.
Error rate measured at the authoritative nameservers for FALCON-512 with AAAA-type DNS queries.
Figure 7.
Error rate with queries for non-existent domains.
Figure 8.
Latency measured at the authoritative nameservers for FALCON-512 with A-type DNS queries for non-existent domains.
Figure 9.
Latency measured at the authoritative nameservers for ECDSA with A-type DNS queries for non-existent domains.