- dns-wg - mailman.ripe.net

OARC 40 - Call for Contribution
by Hazel Smith 23 Dec '22

23 Dec '22

OARC 40 will be a two-day hybrid meeting held on 16 & 17 February in Atlanta (GA), USA at 10:00 AM (Local time - EST (UTC-05:00)). The onsite part of the meeting will be colocated with NANOG 87. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). - Deployment: DNS config management and release process. - Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. - Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency - Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either a full-length presentation - 20 mins (+5 mins Q/A) or a lightning presentation - 10 mins (+5 mins for Q/A) *Workshop Milestones:* 2022-10-22 Submissions open via Indico 2022-12-20 Deadline for submission (23:59 UTC) 2023-01-10 Preliminary list of contributions published 2023-01-17 Full agenda published 2023-01-30 Deadline for slideset submission and Rehearsal 2023-02-16 OARC 40 Workshop - Day1 2023-02-17 OARC 40 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc40> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 40 - Your talk will be broadcast live and recorded for future reference - Your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting - *Remote speakers have mandatory rehearsal on 2023-01-31 at 14:00 UTC.* It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net Hazel Smith, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) Hazel Smith Site Reliability Engineer // Google Cloud, London hazelesque(a)google.com sre.google

1 1

Extending the consultation period for service criticality
by Razvan Oprea 23 Dec '22

23 Dec '22

Dear colleagues, Your input about the criticality ratings of K-Root and AuthDNS is important. Keeping in mind the busy end of year, and the holidays, we have extended our consultation period until 22 January 2023. Wishing you all a happy new year. Regards, Razvan C. Oprea RIPE NCC

1 0

DNS and K-root Quarterly Planning Q1 2023
by Paul de Weerd 16 Dec '22

16 Dec '22

Dear colleagues, The quarterly plans for our DNS Services, including K-root, can now be found at: https://www.ripe.net/support/documentation/quarterly-planning/dns-and-k-root For this quarter, we'll continue with our day-to-day operations and update the operating system of some of our DNS servers. We hope that by providing these plans, we can better inform the community of the ongoing developments on the DNS services we operate and get feedback on our work. If you have any input on these plans or suggestions for future work, please reach out to us. Kind regards, Paul de Weerd RIPE NCC

1 0

RIPE 85 DNS WG minutes
by Moritz Muller 18 Nov '22

18 Nov '22

Hi fellow DNS WG members, For your information, here are the minutes from our last meeting Belgrade: https://www.ripe.net/participate/ripe/wg/active-wg/dns/minutes/dns-working-… Thanks to the folks from the RIPE NCC for taking care of them. Have a nice weekend. Moritz on behalf of the DNS WG chairs

1 0

DNS wg co-chair selection: candidates
by Shane Kerr 31 Oct '22

31 Oct '22

Colleagues, The deadline for the DNS co-chair candidate volunteering is now over. We have a single excellent candidate. The period to express support (or concern) for the candidate starts now and runs until Wednesday, 26 October 2022. Below find a few words from the candidate. ======================================================================== Willem Toorop I propose myself as a candidate to follow-up Shane as DNS working group co-chair. DNS has been the focus of my working life for the past 12 years and I've been loving it. The DNS has a lively, creative and very pleasant technical community and I truly enjoy working in and with that community. DNS plays (more and more) a central role in the tussle around the responsibilities and the capabilities of the different stakeholders on the Internet (i.e. the content vs network operators vs end-users). A good venue for this debate is the RIPE DNS working group. A well balanced program on the RIPE DNS working group is crucial for forming a well-founded point of view for all the participants in this debate. I think that I, as an open source DNS software developer, have a good perspective on the DNS world, the current state of the art and the possible future directions of development, and that I am in a good position to help out in assembling such a program. Sorry if the previous paragraph sounds (a bit) pompous. I just want to say that I would love to help out to put in the spotlight a well balanced selection of all the interesting new stuff that's going on in the DNS and that I think it is very important to do so too! Also, I am a huge fan of the current co-chairs João and Moritz (and of course Shane too!!!) and I would be honored and delighted to work with you guys! ======================================================================== Cheers, -- Shane on behalf of the DNS WG co-chairs

13 12

RIPE DNS working group agenda for RIPE 88
by Moritz Muller 25 Oct '22

25 Oct '22

Dear RIPE DNS working group, We’re happy to announce the agenda for the DNS working group at RIPE 85: * Welcome & Agenda Bashing * New RIPE Co-Chair: Selection results * DNS Privacy with Speed? Evaluating DNS over QUIC and its Impact on Web Performance Luca Schumann from Technical University of Munich * Fewer name servers, more addresses Dave Knight from Neustar Security Services * Measuring Encrypted-DNS Censorship Using OONI Probe Simone Basso from Hermes - Center For Transparency and Digital Human Rights * Meta's DNS server Balint Csergo from Meta * RIPE NCC Update Anand Buddhdev from RIPE NCC We’re looking forward seeing you at the session! Moritz (On behalf of the RIPE DNS working group co-chairs)

1 2

OECD: Security of the Domain Name System (DNS)
by Hank Nussbacher 19 Oct '22

19 Oct '22

https://www.oecd.org/sti/security-of-the-domain-name-system-dns-285d7875-en… 53 page booklet. -Hank

1 0

Call for RIPE DNS Working Group Chair (DO NOT REPLY)
by Shane Kerr 30 Sep '22

30 Sep '22

Dear Colleagues, This is a call for nominations or volunteers to co-chair the RIPE DNS working group. ************************************************************************************* Please DO NOT reply to this message if you wish to propose a volunteer. ************************************************************************************* Call for RIPE DNS Working Group Chair ------------------------------------------------------ In accordance with the chair selection process we announce that the term of one of our co-chairs (Shane Kerr) will soon expire and we would like to invite volunteers, or nominations for someone to become a co-chair of the DNS working group. Anyone may volunteer, and anyone may be nominated by someone else. Note that having served two terms, in accordance with the selection process Shane is not eligible. To do this, please send a mail to <dns-wg-chairs(a)ripe.net> before Friday 7 October 2022. It would be helpful for candidates to give some words as to why they think they ought to be a co-chair, what new ideas, or improvements they might bring, and so on. We will publish the list of volunteers, along with anything the volunteers wish to include with their nomination, to this mailing list on Saturday 8 October 2022. Discussion and support (or opposition) for each candidate can then be offered on the list. At the DNS working group session at RIPE 85, Joao and Moritz hope to announce consensus based on the mailing list discussion. Timeline -------- Friday, 30 September This call for volunteers posted to the dns-wg mail list Friday, 7 October Deadline for volunteers Saturday, 8 October List of volunteers and call for support posted to the mail list Wednesday, 26 October Deadline for showing support for volunteers on the mail list Thursday, 27 October DNS WG session at RIPE 85 References ---------- The RIPE working group chair job description is included in ripe-692: https://www.ripe.net/publications/docs/ripe-692 The DNS working group chair selection process is documented here: https://www.ripe.net/participate/ripe/wg/dns/dns-wg-chair-selection-process We have 3 co-chairs so the term is 3 years. The current approach was announced on this mailing list on 2018-07-17: https://www.ripe.net/ripe/mail/archives/dns-wg/2018-July/003566.html As always, please feel free to reach out to any of the chairs directly, to us as a group at dns-wg-chairs(a)ripe.net, or discuss this or any other any relevant topic on this mailing list. Cheers, -- Shane On behalf of the dns-wg chairs

1 0

DNS and K-root Quarterly Planning Q4 2022
by Paul de Weerd 27 Sep '22

27 Sep '22

Dear colleagues, The quarterly plans for our DNS Services, including K-root, can now be found at: https://www.ripe.net/support/documentation/quarterly-planning/dns-and-k-root For this quarter, we'll continue with our day-to-day operations and update the operating system of some of our DNS servers. We hope that by providing these plans, we can better inform the community of the ongoing developments on the DNS services we operate and get feedback on our work. If you have any input on these plans or suggestions for future work, please reach out to us. Kind regards, Paul de Weerd RIPE NCC

1 0

Panel discussion on learnings from deploying encrypted DNS at scale
by Andrew Campling 19 Sep '22

19 Sep '22

Participants on this list may be interested in catching up with a panel discussion that took place on my weekly call last Monday - the recording is accessible here<https://419.consulting/encrypted-dns/f/what-have-we-learned-so-far-part-2>. The discussion focused on learnings from the deployment and scaling of encrypted DNS resolvers with leading experts from across the industry. This is the second panel on this topic, building on the discussion that took place in May (here<https://419.consulting/encrypted-dns/f/what-have-we-learned-so-far-part-2>). The panel again featured senior people in the industry with significant DNS experience, namely: Joe Crowe from Comcast; Puneet Sood of Google; Otto Moerbeek of Open-Xchange; Paul Adair from Infoblox; Ralf Weber from Akamai. The discussion covered a range of issues, sharing both experiences from current deployments as well as giving an indication of forthcoming features in some of the leading DNS software. Andrew

1 0