A recent report by NS1 provides a comprehensive look at global DNS traffic trends. It reveals that public resolvers dominate the internet, accounting for nearly 60% of recursive DNS usage. Telecom giants represent nearly 9%, with Google the clear front-runner at a little over 30%, followed by Amazon Web Services at 16%. The report also highlights the declining usage of EDNS Client Subnet (ECS), the slow adoption of IPv6 and DNSSEC, and the emergence of HTTPS records as a solution to the “CNAME-at-apex” challenge.
The report is based on the analysis of data collected over a three-month period from customers of NS1 Managed DNS. This data included more than 7.54 trillion queries and 15.1 trillion packets, amounting to an average of one million queries per second every second of every day. Most of the traffic originated in North America (42%) and Europe (26%), while the rest was distributed among other regions, such as Asia.
NXDOMAIN traffic is an often ignored but useful source of data about network health. It is generally expected that a certain amount of NXDOMAIN (Non-Existent Domain) traffic is normal. The research found that a rate of 3-4% is typical in most large enterprises. However, if the rate of NXDOMAIN responses rises to single digits, this can be an indication that something is wrong.