Resilient domain name service (DNS) resolution when an authoritative name server is degraded

1. A computer-implemented method for modifying domain name service (DNS) resolution, the method comprising:

determining, by a resolution resiliency application included with a recursive resolver and based on a status record received from a first authoritative name server or a second authoritative name server, that the first authoritative name server is in a degraded state;

setting a first rate limit on a query rate, wherein the query rate specifies a frequency associated with the recursive resolver transmitting DNS queries to the first authoritative name server;

determining, by the resolution resiliency application, that the first authoritative name server has begun recovering from a degraded state by detecting:

(i) an increase in a quantity of positive DNS responses received from the first authoritative name server from a first quantity detected while the first authoritative name server is in the degraded state, or

(ii) an increase in a response rate of positive DNS responses received from the first authoritative name server from a first response rate detected while the first authoritative name server is in the degraded state; and

in response, removing, by the resolution resiliency application, the first rate limit on the query rate.

2. The computer-implemented method of claim 1 , further comprising, subsequent to removing the first rate limit, setting a flush time equal to a current time.

3. The computer-implemented method of claim 1 , further comprising setting second rate limit on the query rate, wherein the second rate limit is higher than the first rate limit.

4. The computer-implemented method of claim 3 , wherein the second rate limit is based on an elapsed time between a current time and an initial recovery time associated with the degraded state.

5. The computer-implemented method of claim 3 , further comprising:

after removing the first rate limit, receiving a DNS query;

determining that a cache does not include a DNS record associated with the DNS query;

determining that the second rate limit allows the DNS query to be transmitted to the first authoritative name server; and

transmitting the DNS query to the first authoritative name server, wherein the first authoritative name server provides the DNS response.

6. The computer-implemented method of claim 3 , wherein generating the DNS response comprises:

after removing the first rate limit, receiving a DNS query;

determining that a cache does not include a DNS record associated with the DNS query;

determining that the second rate limit prohibits the DNS query from being transmitted to the first authoritative name server; and

transmitting the DNS query to the second authoritative name server, wherein the second authoritative name server provides the DNS response.

7. The computer-implemented method of claim 3 , wherein the second rate limit is an unlimited rate.

8. The computer-implemented method of claim 1 , wherein removing the first rate limit on the query rate comprises modifying the first rate limit from a first rate to a second rate, wherein the second rate is higher than the first rate.

9. The computer-implemented method of claim 8 , wherein the second rate is an unlimited rate.

10. One or more non-transitory computer-readable storage media including instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of:

determining, by a resolution resiliency application included with a recursive resolver and based on a status record received from a first authoritative name server or a second authoritative name server, that the first authoritative name server is in a degraded state;

setting a first rate limit on a query rate, wherein the query rate specifies a frequency associated with the recursive resolver transmitting DNS queries to the first authoritative name server;

determining, by the resolution resiliency application, that the first authoritative name server has begun recovering from a degraded state, by detecting:

(i) an increase in a quantity of positive DNS responses received from the first authoritative name server from a first quantity detected while the first authoritative name server is in the degraded state, or

(ii) an increase in a response rate of positive DNS responses received from the first authoritative name server from a first response rate detected while the first authoritative name server is in the degraded state; and

in response, removing, by the resolution resiliency application, the first rate limit on the query rate.

11. The one or more non-transitory computer-readable storage media of claim 10 , further including instructions that, when executed by the one or more processors, cause the one or more processors to perform the steps of:

upon determining that the first authoritative name server has begun recovering from the degraded state, receiving, by the resolution resiliency application from the first authoritative name server, a flush list update;

determining that a first DNS record, included in a cache of the recursive resolver, is included in the flush list update; and

deleting the first DNS record from the cache.

12. The one or more non-transitory computer-readable storage media of claim 10 , further comprising setting a second rate limit on the query rate, wherein the second rate is based on an elapsed time between a current time and an initial recovery time associated with the degraded state.

13. The one or more non-transitory computer-readable storage media of claim 12 , wherein generating the DNS response comprises:

after removing the first rate limit, receiving a DNS query;

determining that a cache does not include a DNS record associated with the DNS query;

determining that the second rate limit allows the DNS query to be transmitted to the first authoritative name server; and

transmitting the DNS query to the first authoritative name server, wherein the first authoritative name server provides the DNS response.

14. The one or more non-transitory computer-readable storage media of claim 13 , wherein:

the DNS query specifies a domain name that is included in a first zone,

the first authoritative name server is associated with the first zone, and

the second authoritative name server is associated with the first zone.

15. The one or more non-transitory computer-readable storage media of claim 12 , wherein generating the DNS response comprises:

after removing the first rate limit, receiving a DNS query;

determining that a cache does not include a DNS record associated with the DNS query;

determining that the second rate limit prohibits the DNS query from being transmitted to the first authoritative name server; and

specifying a DNS return code that indicates a server error.

16. The one or more non-transitory computer-readable storage media of claim 10 , wherein each positive DNS response includes a requested DNS record.

17. A system comprising:

a memory storing a resolution resiliency application; and

a processor that is coupled to the memory, and executes the resolution resiliency application by:

determining, by a resolution resiliency application included with a recursive resolver and based on a status record received from a first authoritative name server or a second authoritative name server, that the first authoritative name server is in a degraded state;

setting first rate limit on a query rate, wherein the query rate specifies a frequency associated with the recursive resolver transmitting DNS queries to the first authoritative name server;

determining, by the resolution resiliency application, that the first authoritative name server has begun recovering from a degraded state, by detecting:

(i) an increase in a quantity of positive DNS responses received from the first authoritative name server from a first quantity detected while the first authoritative name server is in the degraded state, or

(ii) an increase in a response rate of positive DNS responses received from the first authoritative name server from a first response rate detected while the first authoritative name server is in the degraded state; and

in response, removing, by the resolution resiliency application, the first rate limit on the query rate.

18. The system of claim 17 , wherein:

the memory further comprises a cache; and

the processor further executes the resolution resiliency application by:

upon determining that the first authoritative name server has begun recovering from the degraded state, receiving, from the first authoritative name server, a flush list update;

determining that a first DNS record, included in the cache, is included in the flush list update; and

deleting the first DNS record from the cache.

19. The system of claim 17 , further comprising setting a second rate limit on the query rate, wherein the second rate is based on an elapsed time between a current time and an initial recovery time associated with the degraded state.

20. The system of claim 19 , wherein:

the memory further comprises a cache; and

the processor further executes the resolution resiliency application to generate the DNS response by:

after removing the first rate limit, receiving a DNS query;

determining that the cache does not include a DNS record associated with the DNS query;

determining that the second rate limit prohibits the DNS query from being transmitted to the first authoritative name server; and

transmitting the DNS query to the second authoritative name server, wherein the second authoritative name server provides the DNS response.

21. A computer-implemented method for modifying domain name service (DNS) resolution, the method comprising:

determining, by a resolution resiliency application included with a recursive

resolver and based on a status record received from a first authoritative name server or a second authoritative name server, that the first authoritative name server is in a degraded state;

determining, by the resolution resiliency application, that the first authoritative name server has begun recovering from a degraded state;

in response, transmitting, to the first authoritative name server, a flush inquiry;

receiving, from the first authoritative name server in response to the flush inquiry, a flush list update;

modifying, by the resolution resiliency application and based on the flush list update, one or more DNS records stored in a cache; and

generating, based on the modification to the one or more DNS records, a DNS response to a DNS query.

22. The computer-implemented method of claim 21 , further comprising:

determining that a first DNS record, included in the cache, is included in the flush list update; and

deleting the first DNS record from the cache.