Serving Stale Data to Improve DNS Resiliency
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 12
- Abstract
- This document defines a method (serve-stale) for recursive resolvers to use stale DNS data to avoid outages when authoritative nameservers cannot be reached to refresh expired data. One of the motivations for serve-stale is to make the DNS more resilient to DoS attacks and thereby make them less attractive as an attack vector. This document updates the definitions of TTL from RFCs 1034 and 1035 so that data can be kept in the cache beyond the TTL expiry; it also updates RFC 2181 by interpreting values with the high-order bit set as being positive, rather than 0, and suggests a cap of 7 days.
- Publication Date
- 2020-03-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC8767- Link
- https://doi.org/10.17487/RFC8767
- Author(s)
- David C LawrenceWarren KumariPuneet Sood
- Keyword(s)
- DNS, DDoS, Resilience, DoS
Latest version of IETF RFC 8767
Document Versions — IETF RFC 8767
-
▶ IETF RFC 8767 (2020-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2181 [Active*]
- IETF RFC 2308 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- 10.1145-3232755.3232859 — CloudStrife EXTERNAL
- 10.1145-3278532.3278534 — DikeBreaks EXTERNAL
- DNS-OARC, "DITL Traces and Analysis", January 2018, <https://www.dns-oarc.net/oarc/data/ditl>. EXTERNAL
- IETF RFC 6672 [Active*]
- IETF RFC 6891 [Active*]
- IETF RFC 8499 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8767.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8767, Serving Stale Data to Improve DNS Resiliency. Available at https://doi.org/10.17487/RFC8767
Snippet:
IETF RFC 8767, Serving Stale Data to Improve DNS Resiliency. Available at https://doi.org/10.17487/RFC8767
HTML (ISO 690 compliant)
Preview:
IETF RFC 8767, Serving Stale Data to Improve DNS Resiliency. Available at https://doi.org/10.17487/RFC8767
Snippet:
<span class="citation"><cite>IETF RFC 8767</cite>, Serving Stale Data to Improve DNS Resiliency. Available at <a href="https://doi.org/10.17487/RFC8767" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8767</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8767, Serving Stale Data to Improve DNS Resiliency
doi: 10.17487/RFC8767
url: https://doi.org/10.17487/RFC8767
doi: 10.17487/RFC8767
url: https://doi.org/10.17487/RFC8767
Snippet:
<li> <cite id="bib-rfc8767">IETF RFC 8767</cite>, Serving Stale Data to Improve DNS Resiliency <span class="doi">10.17487/RFC8767</span> </li>
Referenced By
- IETF RFC 9520 [Active*]