3 ms·
So APNIC essentially gets an "anonymized" firehose of DNS requests sent through 1.1.1.1? What is their retention policy? From https://www.cloudflare.com/resour
by QUFB 7y ago
So APNIC essentially gets an "anonymized" firehose of DNS requests sent through 1.1.1.1? What is their retention policy?
From https://www.cloudflare.com/resources/assets/slt3lc6tev37/5xlHCvvNBrvrIoWbuk1vTy/e1058b0d366adf4e983aef99a6ed2a1f/Cloudflare_1.1.1.1_Public_Resolver_Report_-_03302020__2_.pdf https://www.cloudflare.com/resources/assets/slt3lc6tev37/5xl...:
"A log of the DNS request, with truncated source IP address, is routed from Cloudflare’s edge data centers to
Cloudflare’s main data center. The data first enters a stream processing platform that translates the truncated
source IP address into the autonomous system number (“ASN”) of its originating network, and deletes the data
within 25 hours of ingestion. Moving from the stream processing platform, the data flows into a database table,
where the DNS data record is stored with the ASN instead of the truncated source IP. The DNS data records in this
database table are deleted within 25 hours...
Cloudflare has an agreement with Asia-Pacific Network Information Centre (“APNIC”) that allows Cloudflare the use
of the 1.1.1.1 IP address. In exchange, APNIC has access to the anonymized logs stored in the Public Resolver
table in Cloudflare’s data center for research purposes. APNIC has access to this data through the use of a unique,
authorized API key."