基于QUIC的DNS数据报扩展:物联网中可靠的资源保护

IF 8.9 1区 计算机科学 Q1 COMPUTER SCIENCE, INFORMATION SYSTEMS
Darius Saif;Ashraf Matrawy
{"title":"基于QUIC的DNS数据报扩展:物联网中可靠的资源保护","authors":"Darius Saif;Ashraf Matrawy","doi":"10.1109/JIOT.2025.3584661","DOIUrl":null,"url":null,"abstract":"In this article, we investigate the domain name system (DNS) over QUIC (DoQ) and propose a nondisruptive extension, which can greatly reduce DNS over QUIC (DoQ)’s resource consumption. This extension can benefit all DNS clients—especially Internet of Things (IoT) devices. This is important because even resource-constrained IoT devices can generate dozens of DNS requests every hour. DNS is a crucial service that correlates IP addresses and domain names. It is traditionally sent as plain-text, favoring low-latency results over security and privacy. The repercussion of this can be eavesdropping and information leakage about IoT devices. To address these concerns, the newest and most promising solution is DoQ. QUIC offers features similar to TCP and TLS while also supporting early data delivery and stream multiplexing. DoQ’s specification requires that DNS exchanges occur over independent streams in a long-lived QUIC connection. Our hypothesis is that due to DNS’s typically high transaction volume, managing QUIC streams may be overly resource intensive for IoT devices. Therefore, we have designed and implemented a data delivery mode for DoQ using QUIC datagrams, which we believe to be more preferable than stream-based delivery. To test our theory, we analyzed the memory, CPU, signaling, power, and time of each DoQ delivery mode in a setup generating real queries and network traffic. Our novel datagram-based delivery mode proved to be decisively more resource-friendly with little compromise in terms of functionality or performance. Furthermore, this article is the first to investigate multiple queries over DoQ, to our knowledge.","PeriodicalId":54347,"journal":{"name":"IEEE Internet of Things Journal","volume":"12 18","pages":"37809-37818"},"PeriodicalIF":8.9000,"publicationDate":"2025-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"A Datagram Extension to DNS Over QUIC: Proven Resource Conservation in Internet of Things\",\"authors\":\"Darius Saif;Ashraf Matrawy\",\"doi\":\"10.1109/JIOT.2025.3584661\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"In this article, we investigate the domain name system (DNS) over QUIC (DoQ) and propose a nondisruptive extension, which can greatly reduce DNS over QUIC (DoQ)’s resource consumption. This extension can benefit all DNS clients—especially Internet of Things (IoT) devices. This is important because even resource-constrained IoT devices can generate dozens of DNS requests every hour. DNS is a crucial service that correlates IP addresses and domain names. It is traditionally sent as plain-text, favoring low-latency results over security and privacy. The repercussion of this can be eavesdropping and information leakage about IoT devices. To address these concerns, the newest and most promising solution is DoQ. QUIC offers features similar to TCP and TLS while also supporting early data delivery and stream multiplexing. DoQ’s specification requires that DNS exchanges occur over independent streams in a long-lived QUIC connection. Our hypothesis is that due to DNS’s typically high transaction volume, managing QUIC streams may be overly resource intensive for IoT devices. Therefore, we have designed and implemented a data delivery mode for DoQ using QUIC datagrams, which we believe to be more preferable than stream-based delivery. To test our theory, we analyzed the memory, CPU, signaling, power, and time of each DoQ delivery mode in a setup generating real queries and network traffic. Our novel datagram-based delivery mode proved to be decisively more resource-friendly with little compromise in terms of functionality or performance. Furthermore, this article is the first to investigate multiple queries over DoQ, to our knowledge.\",\"PeriodicalId\":54347,\"journal\":{\"name\":\"IEEE Internet of Things Journal\",\"volume\":\"12 18\",\"pages\":\"37809-37818\"},\"PeriodicalIF\":8.9000,\"publicationDate\":\"2025-07-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Internet of Things Journal\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://ieeexplore.ieee.org/document/11062607/\",\"RegionNum\":1,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Internet of Things Journal","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11062607/","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0

摘要

本文对基于QUIC (DoQ)的域名系统(DNS)进行了研究,提出了一种非中断扩展,可以大大降低基于QUIC (DoQ)的DNS的资源消耗。此扩展可以使所有DNS客户端受益-特别是物联网(IoT)设备。这一点很重要,因为即使是资源受限的物联网设备也可能每小时生成数十个DNS请求。DNS是将IP地址和域名联系起来的关键服务。它传统上以纯文本形式发送,倾向于低延迟结果而不是安全性和隐私性。其后果可能是对物联网设备的窃听和信息泄露。为了解决这些问题,最新和最有希望的解决方案是DoQ。QUIC提供了类似于TCP和TLS的功能,同时也支持早期数据传输和流复用。DoQ规范要求DNS交换在长期QUIC连接中的独立流上进行。我们的假设是,由于DNS通常的高交易量,管理QUIC流对于物联网设备来说可能过于资源密集。因此,我们设计并实现了一种使用QUIC数据报的DoQ数据交付模式,我们认为这种模式比基于流的交付更可取。为了测试我们的理论,我们分析了生成真实查询和网络流量的设置中每种DoQ传递模式的内存、CPU、信令、功耗和时间。事实证明,我们新颖的基于数据报的交付模式在功能或性能方面几乎没有妥协的情况下,绝对更加资源友好。此外,据我们所知,本文是第一个研究DoQ上的多个查询的文章。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
A Datagram Extension to DNS Over QUIC: Proven Resource Conservation in Internet of Things
In this article, we investigate the domain name system (DNS) over QUIC (DoQ) and propose a nondisruptive extension, which can greatly reduce DNS over QUIC (DoQ)’s resource consumption. This extension can benefit all DNS clients—especially Internet of Things (IoT) devices. This is important because even resource-constrained IoT devices can generate dozens of DNS requests every hour. DNS is a crucial service that correlates IP addresses and domain names. It is traditionally sent as plain-text, favoring low-latency results over security and privacy. The repercussion of this can be eavesdropping and information leakage about IoT devices. To address these concerns, the newest and most promising solution is DoQ. QUIC offers features similar to TCP and TLS while also supporting early data delivery and stream multiplexing. DoQ’s specification requires that DNS exchanges occur over independent streams in a long-lived QUIC connection. Our hypothesis is that due to DNS’s typically high transaction volume, managing QUIC streams may be overly resource intensive for IoT devices. Therefore, we have designed and implemented a data delivery mode for DoQ using QUIC datagrams, which we believe to be more preferable than stream-based delivery. To test our theory, we analyzed the memory, CPU, signaling, power, and time of each DoQ delivery mode in a setup generating real queries and network traffic. Our novel datagram-based delivery mode proved to be decisively more resource-friendly with little compromise in terms of functionality or performance. Furthermore, this article is the first to investigate multiple queries over DoQ, to our knowledge.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
IEEE Internet of Things Journal
IEEE Internet of Things Journal Computer Science-Information Systems
CiteScore
17.60
自引率
13.20%
发文量
1982
期刊介绍: The EEE Internet of Things (IoT) Journal publishes articles and review articles covering various aspects of IoT, including IoT system architecture, IoT enabling technologies, IoT communication and networking protocols such as network coding, and IoT services and applications. Topics encompass IoT's impacts on sensor technologies, big data management, and future internet design for applications like smart cities and smart homes. Fields of interest include IoT architecture such as things-centric, data-centric, service-oriented IoT architecture; IoT enabling technologies and systematic integration such as sensor technologies, big sensor data management, and future Internet design for IoT; IoT services, applications, and test-beds such as IoT service middleware, IoT application programming interface (API), IoT application design, and IoT trials/experiments; IoT standardization activities and technology development in different standard development organizations (SDO) such as IEEE, IETF, ITU, 3GPP, ETSI, etc.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信