ICANN turns on root server cluster in Singapore

The Internet Corporation for Assigned Names and Numbers (ICANN) has turned on an ICANN Managed Root Server (IMRS) cluster in Singapore, marking it the first of such site in Asia-Pacific. The region currently sees the highest volume of queries worldwide, receiving twice as many as Europe.

The new cluster will help boost the root server capacity for this region as well as the overall resiliency of the root server system, said ICANN in a statement Thursday. The organisation’s Asia-Pacific office is located in Singapore.

With its acquisition of Auth0, Okta goes all in on CIAM

Singapore Airlines frequent flyer members hit in third-party data security breach

Ransomware as a service is the new big problem for business

Comprising “dozens of servers with substantial internet connectivity”, the Singapore cluster is ICANN’s fourth worldwide with two residing in North America and one in Europe, according to the organisation’s senior vice president and CTO, David Conrad.

Global pandemic opening up can of security worms

Caught by the sudden onslaught of COVID-19, most businesses lacked or had inadequate security systems in place to support remote work and now have to deal with a new reality that includes a much wider attack surface and less secured user devices.

“Our existing, smaller IMRS sites in the Asia-Pacific region already receive twice as many queries as Europe, the next-busiest region. Adding an IMRS cluster in Singapore is both strategic and a good use of ICANN resources,” Conrad said.

Established in 1998 under the US Department of Commerce, the ICANN oversees the infrastructure that matches Web addresses to their corresponding IP addresses. It coordinates these identify-and-match tasks, enabling internet users anywhere to locate and access a site via a decipherable Web address, rather than a string of numbers. This means that the DNS (Domain Name System) will translate Web addresses typed into a browser, such as “zdnet.com”, into the numerical language that machines use to communicate.

After years of delay, ICANN’s administrative functions were officially transferred out of US jurisdiction in October 2016, but the non-profit organisation’s operations remains bound by Californian laws.

Citing its OCTO-008 research paper released in April, ICANN said global DNS traffic climbed nearly 30% during the COVID-19 pandemic lockdown.

It said the Singapore IMRS cluster would will enable more of the queries originating in Asia-Pacific to be answered, regardless of the behaviour of networks or servers in other regions.

“In the event of an attack resulting in significant additional traffic globally, the extra capacity provided by the Singapore cluster will absorb the traffic and help to mitigate the attack,” it noted. “Queries in the region can then continue to be answered, thus, reducing the risk of downtime caused by an inability to query the top of the DNS name hierarchy.”

According to ICANN, root servers respond to initial DNS lookup requests made by DNS resolvers — generally operated by Internet service providers (ISPs) such as Reliance in India or iiNet in Australia. For all other queries, the root server will respond with either a referral to the appropriate top-level domain (TLD) name server or an error response.

Each root server comprises several independent machines located across multiple locations, and the entire root name server network encompasses more than 1,000 machines that are operated by 12 organisations. These are mostly located in the US and include ICANN, Verisign, US Department of Defense, University of Maryland, and NASA.

The IMRS itself comprises nearly 170 large and small sites worldwide, where machines at the large sites are called clusters, while the ones at small sites are known as instances.