Blockchain-Based Decentralized Domain Name System
By: Guang Yang , Peter Trinh , Alma Nkemla and more
Potential Business Impact:
Makes internet addresses safer from hackers.
The current Domain Name System (DNS) infrastructure faces critical vulnerabilities including poisoning attacks, censorship mechanisms, and centralized points of failure that compromise internet freedom and security. Recent incidents such as DNS poisoning attacks on ISP customers highlight the urgent need for resilient alternatives. This paper presents a novel blockchain-based Decentralized Domain Name System (DDNS). We designed a specialized Proof-of-Work blockchain to maximize support for DNS-related protocols and achieve node decentralization. The system integrates our blockchain with IPFS for distributed storage, implements cryptographic primitives for end-to-end trust signatures, and achieves Never Trust, Always Verify zero-trust verification. Our implementation achieves 15-second domain record propagation times, supports 20 standard DNS record types, and provides perpetual free .ddns domains. The system has been deployed across distributed infrastructure in San Jose, Los Angeles, and Orange County, demonstrating practical scalability and resistance to traditional DNS manipulation techniques. Performance evaluation shows the system can handle up to Max Theor. TPS 1,111.1 tx/s (minimal transactions) and Max Theor. TPS 266.7 tx/s (regular transactions) for domain operations while maintaining sub-second query resolution through intelligent caching mechanisms.
Similar Papers
Overcoming DNSSEC Islands of Security: A TLS and IP-Based Certificate Solution
Cryptography and Security
Secures internet addresses without needing everyone to update.
Is Protective DNS Blocking the Wild West?
Cryptography and Security
Blocks bad websites to keep people safe online.
A Survey and Evaluation Framework for Secure DNS Resolution
Cryptography and Security
Makes internet addresses safer from hackers.