Huge rise in .nl domain name lookups
Dutch DNS infrastructure handling extra traffic with ease
Dutch DNS infrastructure handling extra traffic with ease
Originally, the internet was conceived as a way of enabling a few university scientists to share expensive equipment. They created a network, initially called the Arpanet, which for fifty years has proved remarkably capable of absorbing extraordinary growth, load peaks and technical developments. Last week, the internet demonstrated its resilience again, when the introduction of coronavirus response measures led to a significant shift in capacity demand patterns. The number of domain name lookups handled by SIDN went up by 250 million a day.
The additional lookups -- or 'queries' as they're known – represent a 10 per cent rise on the two billion-plus that SIDN normally handles daily. Fortunately, our infrastructure is dimensioned to absorb sudden traffic surges, so it can take big DDoS attacks and other major upturns in its stride.
Chart 1: domain name lookups (DNS queries) handled by SIDN per day (source: SIDN Labs, ENTRADA)
It wasn't just the number of queries that changed last week: so did the pattern. Traffic from some networks dropped sharply. The number of queries received from one particular educational institution fell by 17 per cent, for example. Meanwhile, one consumer-oriented internet access provider sent 25 per cent more queries than usual. Although we haven't investigated how typical those numbers are, they give a pointer to what's been happening.
Chart 2: anonymised domain name queries from one educational institution (source: SIDN Labs, ENTRADA)
In terms of internet hierarchy, SIDN is .nl's top-level domain operator, but certainly not the zone's only domain operator. We keep .nl operational in partnership with more than 1,100 registrars and thousands of resellers. Many of those operators are connected to hosting service providers, data centres and internet service providers (ISPs). The sector is very well developed in the Netherlands. Indeed, it's one of the best in the world. Against that background, we sought the view from ISPConnect, the organisation that speaks for ISPs.
ISPConnect's CEO Simon Besteman said, "Here in the Netherlands, we're fortunate to have a very diverse and well organised sector. There's a huge number of ISPs to choose from, and the competition drives service quality. Over the last week, the sector's shown itself to be more than able to cope with a massive switch to working from home. Nevertheless, some applications, such as Microsoft Teams, have experience overload issues. Data centres, hosters and ISPs are in constant contact with one another to address any problems that might arise."
Of course, it's also interesting to see whether the coronavirus crisis might affect new domain name registrations. However, it turns out that the total number of registrations hasn't changed. Demand for new domain names has remained at the pre-crisis level. A daily average of about 2,500 new .nl domain names are still being registered. The registrant profile is pretty much the same as well: businesses, particularly startups, continue to account for most new .nl registrations.
Chart 3: .nl domain name registrations per day (source: SIDN)
Look closely at the numbers and you'll see a sub-trend: the number of corona-related domain names. By 19 March, a total of 1,832 had been registered. That's domain names that incorporate the word 'corona' and/or associated words, such as 'COVID' and 'facemask'. We're watching all those domain names closely, so as to clamp down on any abuses that might come to light. We'll intervene promptly if, for example, we detect a fake webshop offering facemasks (see also this article). In this critical period, we're more determined than ever to keep .nl secure and trustworthy.
SIDN Labs wrote a technical paper on the impact of the coronavirus on .nl's DNS traffic.
Checklist Herken een nepwebwinkel pdf (102.5 kB)