arXiv: Poster: Mind the Gap -- Characterizing the Temporal Blind Spot Between GSB and DNS Resolution

This paper, published on arXiv, identifies a critical timing vulnerability in how internet infrastructure handles domain name resolution, specifically between the Global Server Load Balancer (GSLB) and the Domain Name System (DNS). The research reveals a "temporal blind spot" where DNS responses can become stale or mismatched during the brief interval between a GSLB update and the propagation of that update through DNS caches. This gap can be exploited to route traffic to incorrect or malicious servers, undermining the integrity of network connections.

The primary affected organizations are those operating large-scale, geographically distributed online services, including cloud providers, content delivery networks (CDNs), financial services, and e-commerce platforms. Any sector relying on GSLB for traffic management, load balancing, or failover—especially under the EU's Digital Operational Resilience Act (DORA) or NIS2 frameworks—faces increased operational risk. Compliance teams in these sectors must assess whether their DNS and GSLB configurations are vulnerable to this blind spot.

Compliance teams should immediately review their organization's DNS resolution and GSLB synchronization logs for evidence of this timing gap. They should work with network and security engineers to implement tighter synchronization between GSLB updates and DNS cache invalidation, potentially using shorter TTL values or real-time DNS update mechanisms. A documented risk assessment and mitigation plan should be added to the next regulatory reporting cycle, particularly for DORA and NIS2 compliance, to demonstrate proactive management of this newly identified infrastructure vulnerability.