Sunday, December 1, 2013

EDU Top Level Domain statistics

Some DNS Top Level Domain (TLD) operators publish statistics about their DNS zones. Some others have a zone file access program that allows others to examine their data and publish statistics. Frederic Cambus (@fcambus on Twitter) maintains a site called statdns ( ) that keeps statistics for several of the TLDs.

The EDU top level domain is conspicuously absent from the statdns site because the operators don't publish any statistics and also don't have a zone file access program in place. The EDU domain has a very complicated operational policy arrangement. It is managed by Educause (a higher education IT consortium), but operated by Verisign, under a contract with the United States Department of Commerce. I recently spoke with colleagues at Educause about current prospects for publishing some statistics or making the zone data available. The good news is that a zone file access program request is in fact in the queue to be approved by the Dept of Commerce. But it's stuck behind a few other requests, so it may still take some time to come to fruition.

In the meantime, to satisfy my own curiosity, I've been looking at other ways to obtain some statistics. In particular I'm interested in seeing how much DNSSEC deployment has happened so far, and how EDU compares with some of the other TLDs in this respect. One way to gain visibility into zone contents is to examine passive DNS databases. A number of folks and organizations run such databases that collect historical information seen from DNS responses at collections of resolvers. By searching records over a period of time in these databases, it's possible to reconstruct a substantial portion of the active records in a zone. I did this for EDU and analyzed the results recently.

The passive DNS database search managed to find about 7,158 second level domains under EDU. Of these, 6955 domains turned out to be valid (the others probably existed at one point but don't any more). EDU is known to have in the neighborhood of 7,000 delegations, so this is most probably a pretty good approximation of the active contents of the zone.

EDU Zone Statistics:

Number of Domains from passive DNS db: 7158
Number of Valid Domains: 6955

Total NS records: 19527
Unique NS records: 9757
Number of (glue) IPv4 address records: 4555
Number of (glue) IPv6 address records: 246

DNSSEC Specific Stats for EDU:

Number of DNSSEC Signed Zones: 94 (1.37%)
Number of NSEC3 Zones: 29 (30.1% of the signed zones)
Number of Zones with DS records: 76
Number of Zones with DLV records at 7

As expected, only a very small fraction (1.37%) of domains have deployed DNSSEC. This compares with about 0.25% in .COM, 0.41% in .NET, and 0.30% in .ORG.

The 94 zones in EDU signed with DNSSEC are:

The 29 zones that use the NSEC3 variety of DNSSEC are:

There are 18 zones that do not have DS records published (not sure why):

There are also 7 zones with DLV records published at ISC's DLV registry, but this set is disjoint with the set that doesn't have DS records:

-- Shumon Huque


  1. One approach to pick the correct section entryway is to pick the correct material. Aluminum door supplier Passage entryways can be made out of various materials and each has a particular capacity and advantages.

    1. Microwave Ovens: With over-the-range and countertop models available, these versatile kitchen cooking appliances can help you make quick work microwave toaster oven combo

  2. Medium actually has the information stuck in it. Presently, the most secure technique external hard disk cases manufacturers to recoup information from bombed circles is to take help from qualified specialists or from proficient recuperation instrument.

  3. fixed costs yet normally You can study pack homes online when you visit the official site survival kit manufacturer

  4. Wouldn't it be decent in the event that you could get a more extravagant tasting, completely sweet-smelling, hot mug of coffee to begin your day. coffee bag manufacturer

  5. It is among the four of those uber occasions delivered by WWE that watchers could never like avoid off. Thunder is an expert wrestling wwe headliner which is communicated each year in January.wweraw

  6. How to Fix a Leaking Moen Kitchen Faucet | Hunker. The fact that all Moen faucets have cartridge valves simplifies Moen kitchen faucet repair moen kitchen faucet

  7. Car Insurance company | Auto Insurance Quotes Gilbert, AZ | Safe Street Insurance:Are you comparing car insurance quotes between companies in Gilbert, AZ? Safe Street Insurance is more than just an auto insurance company. Let us take care of your car insurance needs and so much more!

    Source: Auto insurance company

  8. The domain was created in 1985 to create a domain name hierarchy for organisations that focus on education, even if they are not linked with the United States.

  9. After all the country slogan is it's more fun in the Philippines. You can take our word that the Philippines has the happiest and friendliest people in the world. Pinoyflix - Pinoy Channel -

  10. The term “jacket” may seem straightforward, but it actually encompasses a vast variety of different styles and designs. As such, choosing the Topcelebsjackets, from may help you to get the best for your personality.
    Visit Here

  11. In the meantime, I've been looking for alternative ways to get some numbers to Do My Coursework satisfy my personal curiosity. I'm especially curious to see how much DNSSEC has been deployed so far, and how EDU compares to some of the other TLDs in this regard.