ICANN flags ISPs as new source of odd DNS traffic

ICANN has identified a new anomaly in DNS traffic: some ISPs send every query to three resolvers — Google, Cloudflare and a third. Google previously fixed a Chrome flaw that made the browser generate about half of all DNS root server traffic in 2020.

• Chrome's share of DNS root server traffic fell from 45% to 1%
• Some ISPs send each DNS query three times to different resolvers
• About half of non-cached queries repeat within 100 ms
• Visible resolver farms dropped from ~250 in 2020 to ~150 today