- dns-wg - mailman.ripe.net

the day of reckoning is near
by Jim Reid 10 Oct '18

10 Oct '18

So, who’s stocked up on canned food and ammunition in case it all goes horribly wrong at 16:00 UTC tomorrow? :-)

4 3

New on RIPE Labs: Measuring the KSK Roll
by Mirjam Kuehne 01 Oct '18

01 Oct '18

Dear colleagues, Please read on RIPE Labs how Geoff Huston and the APNIC Labs measured the readiness of the Internet for the KSK roll: https://labs.ripe.net/Members/gih/measuring-the-ksk-roll Kind regards, Mirjam Kühne RIPE NCC

1 0

Now on RIPE Labs: How to Survive Scheduled DNS Maintenance
by Mirjam Kuehne 28 Sep '18

28 Sep '18

Dear colleagues, Please find this new article on RIPE Labs by Petr Spacek: How to Survive Scheduled DNS Maintenance https://labs.ripe.net/Members/petr_spacek/how-to-survive-scheduled-dns-main… Kind regards, Mirjam Kühne RIPE NCC

1 0

Volunteer list for RIPE DNS working group chair
by Shane Kerr 25 Sep '18

25 Sep '18

Hello DNS working group, The nomination period for the RIPE DNS working group chair selection finished yesterday. We had a single volunteer, Dave Knight. He sent us the following text by way of motivation: ------------------------------------------------------------------------- Dear colleagues, I would like you to consider me for a second 3 year term as a co-chair of the DNS working group. In my first term I made it to all but one meeting, have organized the agenda for a few and chaired sessions at several, I’d like to think that those have gone well. I continue to have my employers support for the required time and travel and am enthusiastic about continuing in this role. Thanks for your consideration, dave ------------------------------------------------------------------------- Please offer whatever support (or opposition) you have for Dave on the list. Thank you Dave for volunteering! Cheers, -- Shane On behalf of the DNS working group chairs

4 3

Re: [dns-wg] Volunteer list for RIPE DNS working group chair
by Joe Abley 25 Sep '18

25 Sep '18

On Sep 24, 2018, at 13:55, Shane Kerr <shane(a)time-travellers.org> wrote: > Hello DNS working group, > > The nomination period for the RIPE DNS working group chair selection > finished yesterday. We had a single volunteer, Dave Knight. Dave is clearly the right person for the job, quite aside from also being the only available option :-) > Please offer whatever support (or opposition) you have for Dave on the list. This is a bit of a strange process. When your choice is reduced to a single well-qualified option, is it not possible just to skip to the end? > Thank you Dave for volunteering! I would suggest everybody buy him a beer in Amsterdam, but that seems like it would be an awful lot of beer for one person. Joe

4 3

New on RIPE Labs: Persistent DNS Connections for Reliability and Performance
by Mirjam Kuehne 20 Sep '18

20 Sep '18

Dear colleagues, Please read this new RIPE Labs article by Baptiste Jonglez: Persistent DNS Connections for Reliability and Performance https://labs.ripe.net/Members/baptiste_jonglez_1/persistent-dns-connections… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: Passive Observations of Large DNS Service
by Mirjam Kuehne 18 Sep '18

18 Sep '18

Dear colleagues, Please read this new article by Wouter de Vries on RIPE Labs: Passive Observations of Large DNS Service https://labs.ripe.net/Members/wouter_de_vries/passive-observations-of-large… Kind regards, Mirjam Kuhne RIPE NCC

2 1

Call for volunteers for the RIPE DNS working group chair
by Shane Kerr 18 Sep '18

18 Sep '18

Hello DNS working group, This is a call for volunteers to co-chair the RIPE DNS working group. *********************************************************************** Please do NOT reply to this message if you wish to propose a volunteer. *********************************************************************** Call for RIPE DNS Working Group Chair ------------------------------------- In accordance with the chair selection process we announce that one of the current co-chairs (Dave Knight) is standing down and we invite volunteers, or nominations for someone else to become a co-chair of the DNS working group. The main responsibility of a co-chair is to prepare the agenda for the working group sessions; there are also some obligations in the policy development process, but the DNS working group rarely makes policy. Anyone may volunteer, and anyone may be nominated by someone else (this include the current co-chair, Dave Knight). To do this, please send a mail to <dns-wg-chairs(a)ripe.net> before 2018-09-23 (Sunday, 23 September 2018). It would be helpful for candidates to give the some words as to why they think they ought to be a co-chair, what new ideas, or improvements they might bring, and so on. We will publish the list of volunteers, along with anything the volunteers to include with their nomination, to this mailing list on 2018-09-24 (Monday, 24 September 2018). Discussion and support (or opposition) for each candidate can then be offered on the list. At the DNS working group session at RIPE 77 in Amsterdam, João and Shane will announce consensus based on the mailing list discussion. References ---------- The RIPE working group chair job description is included in ripe-692: https://www.ripe.net/publications/docs/ripe-692 The DNS working group chair selection process is documented here: https://www.ripe.net/participate/ripe/wg/dns/dns-wg-chair-selection-process We have 3 co-chairs to the term is 3 years. The current approach was announced on this mailing list on 2018-07-17: https://www.ripe.net/ripe/mail/archives/dns-wg/2018-July/003566.html As always, please feel free to reach out to any of the chairs directly, to us as a group at dns-wg-chairs(a)ripe.net, or discuss this or any other any relevant topic on this mailing list. Cheers, -- Shane

2 1

New on RIPE Labs: DNSSEC Signer Migration
by Mirjam Kuehne 18 Sep '18

18 Sep '18

Dear colleagues, In this new RIPE Labs article we describe the evaluation and selection of a new DNSSEC signer solution, along with a plan of how we intend to perform the migration: https://labs.ripe.net/Members/anandb/dnssec-signer-migration Kind regards, Mirjam Kühne RIPE NCC

1 0

RIPE 77 DNS WG Agenda
by Dave Knight 14 Sep '18

14 Sep '18

Colleagues, Here’s the agenda for the DNS Working Group sessions at the RIPE 77 meeting in Amsterdam. Kind regards, Dave === Session 1, Wednesday 17 October, 09:00-10:30 === A. Administrivia - Agenda bashing - Review of action items - Approval of previous minutes - Selection of new co-chair B. DNS OARC Update, Keith Mitchell DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with RIPE, and is doing so again jointly with CENTR-Tech in Amsterdam immediately before RIPE77. OARC seeks to bridge the DNS clue gap through knowledge sharing, data gathering/analysis, community building, and outreach. This talk will give an introduction and summary for the wider RIPE audience of the latest DNS material freshly presented at OARC29 (see https://indico.dns-oarc.net/event/29/contributions/ for topics), and will include a pick of the best new DNS technology deployment experiences, best practices, data, and analysis, with pointers to sources of further information. C. Update on the Root KSK Roll, Roy Arends D. Will your DNS break in 2019?, Petr Špaček Is your authoritative server ready for changes in 2019? Group of DNS software vendors is removing support for certain types of non-compliance with DNS standards. This talk will explain what https://dnsflagday.net/ means for you and how to prepare your DNS infrastructure to minimize impact. E. Managing DNS zones using Git, Ondřej Caletka Why ISPs like us edit zone files manually. The most common errors and how to fight them. Introducing dzonegit, custom open-source solution to keep zone files in Git. === Session 2, Thursday 18 October, 14:00-15:30 === F. RIPE NCC Report, Anand Buddhdev Switching to a new DNSSEC signer. Upcoming 100Gig site for K-root. G. GeoIP + DNSSEC in Knot DNS, Petr Špaček In this talk we will briefly introduce a new response tailoring feature of Knot DNS 2.7, an open-source authoritative-only DNS server developed by CZ.NIC. We will show how to configure Knot DNS server to tailor responses to queries according to client's geographic location or subnet the client belongs to. The module can be used securely with DNSSEC, either effectively by precomputing signatures at load, or online in cooperation with Knot DNS's Online Sign module. H. IETF DNSOP WG Update, Benno Overeinder A short summary of current activities/drafts/discussions/views in the DNSOP WG. We would like to have RIPE participant (operator) input on the current discussions and drafts. I. Updated Measurements on DNS Privacy, Sara Dickinson An update on the benchmarking of TCP/TLS for recursive resolvers presented at RIPE 76. J. Any Other Business

1 0