{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T10:05:10Z","timestamp":1775815510673,"version":"3.50.1"},"reference-count":52,"publisher":"Association for Computing Machinery (ACM)","issue":"CoNEXT3","funder":[{"name":"Minist\u00e8re des arm\u00e9es, France"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Netw."],"published-print":{"date-parts":[[2025,9,3]]},"abstract":"<jats:p>Obtaining an accurate, explainable and Internet scale IP geolocation dataset has been a longstanding goal of the research community. Despite decades of research on IP geolocation, no current technique can provide such a dataset. In particular, latency-based geolocation techniques do not scale, because, on one hand, we have thousands of available vantage points to perform measurements, but on the other hand, we have no way to select the right ones for each IP address. In this paper, we present GeoResolver, which is a serious step towards our goal, by using the idea that when multiple operators redirect two prefixes to the same servers, these prefixes should be close to each other. With this intuition, we define a methodology to measure and compare the redirection of prefixes to servers using ECS DNS measurements, and select the prefixes with the smallest redirection distance to a target prefix to issue the latency measurements to targets in that prefix. GeoResolver performs nearly as well as a brute force approach, geolocating 94% of the targets that could actually be geolocated at metro level, while using 4.3% of the probing budget compared to the state of the art. On the Internet scale CAIDA ITDK dataset, GeoResolver geolocates 16% of the IP addresses at metro level, 3.4 times more than the state of the art. In addition, GeoResolver is robust to public resolvers or hypergiants stopping supporting ECS.<\/jats:p>","DOI":"10.1145\/3749219","type":"journal-article","created":{"date-parts":[[2025,9,4]],"date-time":"2025-09-04T13:42:01Z","timestamp":1756993321000},"page":"1-21","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["GeoResolver: An Accurate, Scalable, and Explainable Geolocation Technique Using DNS Redirection"],"prefix":"10.1145","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-0962-845X","authenticated-orcid":false,"given":"Hugo","family":"Rimlinger","sequence":"first","affiliation":[{"name":"LIP6, Sorbonne Universit\u00e9 - CNRS, LINCS, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6885-9378","authenticated-orcid":false,"given":"Olivier","family":"Fourmaux","sequence":"additional","affiliation":[{"name":"LIP6, Sorbonne Universit\u00e9 - CNRS, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1653-3552","authenticated-orcid":false,"given":"Timur","family":"Friedman","sequence":"additional","affiliation":[{"name":"LIP6, Sorbonne Universit\u00e9 - CNRS, LINCS, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6168-7887","authenticated-orcid":false,"given":"Kevin","family":"Vermeulen","sequence":"additional","affiliation":[{"name":"LIX, CNRS, \u00c9cole Polytechnique, Paris, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,9,4]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Crux-top-lists. https:\/\/github.com\/zakird\/crux-top-lists."},{"key":"e_1_2_1_2_1","unstructured":"Ripe-atlas-tcp-ping. https:\/\/labs.ripe.net\/author\/wilhelm\/measuring-your-web-server-reachability-with-tcp-ping\/."},{"key":"e_1_2_1_3_1","unstructured":"Akamai edgeScape. https:\/\/techdocs.akamai.com\/property-mgr\/reference\/latest-edge-scape."},{"key":"e_1_2_1_4_1","unstructured":"Caida as to org. https:\/\/www.caida.org\/archive\/as2org\/."},{"key":"e_1_2_1_5_1","unstructured":"Google public dns. https:\/\/developers.google.com\/speed\/public-dns\/docs\/ecs."},{"key":"e_1_2_1_6_1","unstructured":"IP info website. https:\/\/ipinfo.io."},{"key":"e_1_2_1_7_1","unstructured":"MaxMind website. https:\/\/www.maxmind.com\/."},{"key":"e_1_2_1_8_1","unstructured":"opentelecomdata. https:\/\/opentelecomdata.org\/cdns\/."},{"key":"e_1_2_1_9_1","unstructured":"AWS Route 53 . https:\/\/docs.aws.amazon.com\/Route53\/latest\/DeveloperGuide\/routing-policy-geoproximity.html."},{"key":"e_1_2_1_10_1","unstructured":"Routeviews . https:\/\/www.routeviews.org\/routeviews\/."},{"key":"e_1_2_1_11_1","volume-title":"client subnet in dns queries","author":"RFC","year":"2016","unstructured":"RFC 7871, client subnet in dns queries, 2016. URL https:\/\/datatracker.ietf.org\/doc\/html\/rfc7871."},{"key":"e_1_2_1_12_1","unstructured":"Overlap coefficient 2022. https:\/\/en.wikipedia.org\/wiki\/Overlap_coefficient."},{"key":"e_1_2_1_13_1","unstructured":"Peering DB 2023. URL https:\/\/www.peeringdb.com\/."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355586"},{"key":"e_1_2_1_15_1","volume-title":"Proc. ACM IMC","author":"Anderson Scott","year":"2022","unstructured":"Scott Anderson, Loqman Salamatian, Zachary S Bischof, Alberto Dainotti, and Paul Barford. igdb: connecting the physical and logical layers of the internet. In Proc. ACM IMC, 2022."},{"key":"e_1_2_1_16_1","volume-title":"The CAIDA ark IPv4 Internet topology data kits dataset","author":"CAIDA.","year":"2019","unstructured":"CAIDA. The CAIDA ark IPv4 Internet topology data kits dataset, 2019. https:\/\/www.caida.org\/catalog\/datasets\/internettopology-data-kit\/."},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504754"},{"key":"e_1_2_1_18_1","volume-title":"IEEE TMC","author":"Callejo Patricia","year":"2022","unstructured":"Patricia Callejo, Marco Gramaglia, Ruben Cuevas, and Angel Cuevas. A deep dive into the accuracy of ip geolocation databases and its impact on online advertising. IEEE TMC, 2022."},{"key":"e_1_2_1_19_1","volume-title":"Proc. USENIX NSDI","author":"Cunha \u00cdtalo","year":"2016","unstructured":"\u00cdtalo Cunha, Pietro Marchetta, Matt Calder, Yi-Ching Chiu, Bruno VA Machado, Antonio Pescap\u00e8, Vasileios Giotsas, Harsha V Madhyastha, and Ethan Katz-Bassett. Sibyl: a practical internet route oracle. In Proc. USENIX NSDI, 2016."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068818"},{"key":"e_1_2_1_21_1","volume-title":"ACM TOIT","author":"Dan Ovidiu","year":"2021","unstructured":"Ovidiu Dan, Vaibhav Parikh, and Brian D Davison. Ip geolocation through reverse dns. ACM TOIT, 2021."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3442442.3451888"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624801"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3402413.3402415"},{"key":"e_1_2_1_25_1","volume-title":"Proc. USENIX Security Symposium","author":"Durumeric Zakir","year":"2013","unstructured":"Zakir Durumeric, Eric Wustrow, and J Alex Halderman. {ZMap}: Fast internet-wide scanning and its security applications. In Proc. USENIX Security Symposium, 2013."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12334-4_18"},{"key":"e_1_2_1_27_1","volume-title":"Oleg Surmachev. FastRoute: A Scalable Load-Aware Anycast Routing Architecture for Modern CDNs. In Proc. USENIX NSDI","author":"Flavel Ashley","year":"2015","unstructured":"Ashley Flavel, Pradeepkumar Mani, David Maltz, Nick Holt, Jie Liu, Yingying Chen, and Oleg Surmachev. FastRoute: A Scalable Load-Aware Anycast Routing Architecture for Modern CDNs. In Proc. USENIX NSDI, 2015."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423648"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/3131365.3131380"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472928"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423654"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028828"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3656300"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/2398776.2398790"},{"key":"e_1_2_1_35_1","volume-title":"ACM SIGCOMM CCR","author":"Huffaker Bradley","year":"2014","unstructured":"Bradley Huffaker, Marina Fomenkov, and kc claffy. DRoP: DNS-based router positioning. ACM SIGCOMM CCR, 2014."},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177090"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3676869"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494869"},{"key":"e_1_2_1_39_1","volume-title":"Proc. USENIX OSDI","author":"Madhyastha Harsha V","year":"2006","unstructured":"Harsha V Madhyastha, Tomas Isdal, Michael Piatek, Colin Dixon, Thomas Anderson, Arvind Krishnamurthy, and Arun Venkataramani. iplane: An information plane for distributed services. In Proc. USENIX OSDI, 2006."},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/383059.383073"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1971162.1971171"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3688429"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3730977"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.23919\/TMA.2017.8002903"},{"key":"e_1_2_1_45_1","volume-title":"Proc. ACM SIGCOMM","author":"Schomp Kyle","year":"2020","unstructured":"Kyle Schomp, Onkar Bhardwaj, Eymen Kurdoglu, Mashooq Muhaimen, and Ramesh K Sitaraman. Akamai dns: Providing authoritative answers to the world's queries. In Proc. ACM SIGCOMM, 2020."},{"key":"e_1_2_1_46_1","volume-title":"Proc. ACM IMC","author":"Streibelt Florian","year":"2013","unstructured":"Florian Streibelt, Jan B\u00f6ttger, Nikolaos Chatzis, Georgios Smaragdakis, and Anja Feldmann. Exploring EDNS-clientsubnet adopters in your free time. In Proc. ACM IMC, 2013."},{"key":"e_1_2_1_47_1","volume-title":"IEEE\/ACM ToN","author":"Su Ao-Jan","year":"2009","unstructured":"Ao-Jan Su, David R Choffnes, Aleksandar Kuzmanovic, and Fabian E Bustamante. Drafting behind akamai: Inferring network conditions based on cdn redirections. IEEE\/ACM ToN, 2009."},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3517745.3561422"},{"key":"e_1_2_1_49_1","volume-title":"Proc. USENIX NSDI","author":"Wang Yong","year":"2011","unstructured":"Yong Wang, Daniel Burgener, Marcel Flores, Aleksandar Kuzmanovic, and Cheng Huang. Towards street-level-client-independent ip geolocation. In Proc. USENIX NSDI, 2011."},{"key":"e_1_2_1_50_1","volume-title":"Proc. USENIX NSDI","author":"Wong Bernard","year":"2007","unstructured":"Bernard Wong, Ivan Stoyanov, and Emin Gu\u00fcn Sirer. Octant: A comprehensive framework for the geolocalization of internet hosts. In Proc. USENIX NSDI, 2007."},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2009.5235373"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3603269.3604846"}],"container-title":["Proceedings of the ACM on Networking"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3749219","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,21]],"date-time":"2026-03-21T04:08:47Z","timestamp":1774066127000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3749219"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,3]]},"references-count":52,"journal-issue":{"issue":"CoNEXT3","published-print":{"date-parts":[[2025,9,3]]}},"alternative-id":["10.1145\/3749219"],"URL":"https:\/\/doi.org\/10.1145\/3749219","relation":{},"ISSN":["2834-5509"],"issn-type":[{"value":"2834-5509","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,3]]},"assertion":[{"value":"2025-09-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}