Go go, check your DNS resolver(s)!

It’s time for a very big update to Check My DNS!

This update is a complete rewrite from Perl to Go which brings a lot of performance enhancements and easier ways to deploy and manage nodes. The interface has also undergone some changes and is now using ChartJS to display progress and results. The API communication is now performed over a WebSocket, instead of an AJAX loop, which gives it a lot more rapid and fluid feel.

As development progressed with this update and it came time to start implementing DNSSEC… I kinda hit a brick wall! DNSSEC is surely not easy, and adding that you want to be able to manipulate records at every step… well that’s kinda the point of DNSSEC, to prevent that.

So after a few miserable failed tries, I stopped to rethink and came up with the idea to run actual authoritative name-server software and just proxy the queries to them. Some hours later it was up and running and DNSSEC “just worked”! This will also add another level to Check My DNS, namely be able to run the entire suite of checks against different back-end authoritative name-server software, pretty cool.

As for tests, or rather checks as they are called now, a few more things are checked for now. Two new meta checks have been added that will analyze the results of all other checks to give a rating on the randomness of port numbers and DNS IDs in the same way PortTest and DnsEntropy do it.

In the future Check My DNS will replace other DNS-OARC services like that but we are not there just yet.

A new addition to Check My DNS is the tutorial mode. In this mode the interface will take you through each step of the process and give you hints on where to click to drill down into the results.


Now, Check My DNS awaits queries from your resolver(s) and remember that as an OARC member you can get access to all the results and much more, be sure to contact us if so, and hope to see you in San Jose for the 27th OARC Workshop!