Enhancing DNS Performance with Efficient Cryptographic Algorithms: A Comparative Study of DoT Frameworks

Abstract

The Domain Name System (DNS) is a critical component of the Internet, and its disruption can significantly affect service quality. To enhance security and protect user privacy, encrypted protocols, such as DNS over TLS (DoT), DNS over Quick UDP Internet Connections (DoQ), and DNS over HTTPS (DoH), have been introduced. This study evaluates the performance impact of different cryptographic algorithms within the DoT framework, focusing on how encryption influences DNS query performance and resolver efficiency. Performance evaluations were conducted using various cryptographic algorithms under different client load conditions. Metrics such as response rate, timeout rate, and resource utilization were analyzed to assess the impact of encryption on DNS recursive resolvers. The analysis revealed that the choice of encryption algorithm and client load significantly affect performance. Advanced Encryption Standard-Galois/Counter Mode (AES-GCM) 128 and ChaCha20-Poly1305 demonstrated superior performance, exhibiting higher response rates and lower timeout rates compared to AES-GCM 256. Organizations managing DNS infrastructure should monitor client loads and consider adopting efficient encryption algorithms, such as AES-GCM 128 or ChaCha20-Poly1305. These choices can optimize DNS recursive resolver performance while maintaining robust security in dynamic network environments.