DNS TAPIR - observe your DNS queries without loss of privacy
DNS query data from resolvers - is more and more captured into isolated islands by commercial or governmental providers of analysis and cybersecurity threat tools. The data quite often contains privacy information, such as IP addresses of the users. We think that this data should be both protected and a digital commons. Data provided by the users should benefit all Internet users.
Collaboration
Trust
Transparency
About the project
The DNS TAPIR project aims at building an open source infrastructure for collecting query data, while preserving the user’s right to privacy. By publishing data openly, cybersecurity analysis organisations and researchers can include this data in their threat analysis and provide better intel to users.
Check out the About page to learn more!
Documentation
Getting Started
DNS TAPIR platform is in an early phase of enrollment. Contact us if you're interested in setting up or use the platform, either as an ISP, cybersecurity company, analyst or similar....
Information management
Summary The challenge in analyzing DNS data is mainly that of gaining access to it. From a privacy perspective, singular queries are largely unproblematic, but an individual’s query stream taken over time will give a detailed description of their Internet activities....
DNS TAPIR Architecture
The software consists of two major parts: DNS TAPIR Edge – A service that runs close to a DNS resolver that aggregates logs and forwards data to the cloud service. DNS TAPIR Core – The cloud service that aggregates, analyses and annotates data, and produces observations. ...
DNS TAPIR Security Brief
Credentials Each TAPIR Edge node has: a unique X.509 client certificate used for mTLS a unique keypair used for signing events ...
DNS TAPIR Core
TAPIR Core is an ISP (carrier) independent data analysis system which receives aggregated, minimised and de-personified DNS data from TAPIR Edge devices. Core analyse this data and indicates possible anomalies as “observations". Individual ISPs can freely choose how to act upon the observations, if at all....
Videos
Making Recursive DNS More Robust Through Cooperation (Johan Stenstam)
October 22, 2024
Varför? (Mikael Kullberg),(SWEDISH)
November 26, 2024
What is DNS TAPIR (Lars-Johan Liman)
October 23, 2023
DNS TAPIR - Introduktion (Olle E Johansson), (SWEDISH)
November 26, 2024
DNS TAPIR Säkerhetsarkiktetur (Jakob Schlyter), (SWEDISH)
December 6, 2024