- dns-wg - mailman.ripe.net

New on RIPE Labs: Re-Counting DNSSEC
by Mirjam Kuehne 23 Oct '12

23 Oct '12

Dear colleagues, Following-up from his earlier article "Counting DNSSEC", Geoff Huston published a new article on RIPE Labs, further examining the collected data and revising some of the results: "Re-Counting DNSSEC" https://labs.ripe.net/Members/gih/re-counting-dnssec Kind regards, Mirjam Kuehne RIPE NCC

1 0

Comparing TCP and UDP response times of root name servers
by Anand Buddhdev 22 Oct '12

22 Oct '12

[Apologies for duplicates] Dear colleagues, The RIPE NCC has just published an article on RIPE Labs, comparing the TCP and UDP response times of DNS queries to the root name servers: https://labs.ripe.net/Members/bwijnen/tcp-udp-dns-soa-rt-ratio Your comments, questions and suggestions are welcome. Regards, Anand Buddhdev RIPE NCC

4 3

final version of RIPE64 minutes
by Jim Reid 11 Oct '12

11 Oct '12

Here are the final version of the WG minutes from Ljubljana.

2 1

Pointer to DNS Benchmarking list
by Ondřej Surý 26 Sep '12

26 Sep '12

The mentioned mailing list is: dns-benchmarking(a)lists.dns-oarc.net and the archives are located: https://lists.dns-oarc.net/pipermail/dns-benchmarking/ with pointer to git: https://lists.dns-oarc.net/pipermail/dns-benchmarking/2012-June/000008.html you can subscribe here: https://lists.dns-oarc.net/mailman/listinfo/dns-benchmarking O. -- Ondřej Surý -- Chief Science Officer ------------------------------------------- CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC Americka 23, 120 00 Praha 2, Czech Republic mailto:ondrej.sury@nic.cz http://nic.cz/ tel:+420.222745110 fax:+420.222745112 -------------------------------------------

1 0

New on RIPE Labs: Using RIPE Atlas: A DENIC Case Study
by RIPE Labs Administrator 25 Sep '12

25 Sep '12

[apologies for duplicates] Dear colleagues, Please find a new article on RIPE Labs: Using RIPE Atlas: A DENIC Case Study, by Peter Koch: https://labs.ripe.net/Members/pk/denic-case-study-using-ripe-atlas Kind regards, Mirjam Kuehne RIPE NCC

1 0

Draft recommendation for limiting the EDNS0 response size on authoritative name servers
by Roland van Rijswijk - Deij 24 Sep '12

24 Sep '12

Hi all, During the last RIPE meeting, I presented on research that SURFnet has been doing over the past year into DNS response delivery issues caused by firewalls or other network equipment blocking fragments (see https://ripe64.ripe.net/presentations/91-20120418_-_RIPE64_-_Ljubljana_-_DN… and the meeting minutes for the last WG meeting). After the meeting, Jim Reid suggested that we write a draft WG recommendation containing some of the suggestions we made for dealing with this issue (specifically, dealing with it by reducing the maximum EDNS0 response size on the authoritative side). Gijs van den Broek, who has performed most of the research, has spent the past couple of weeks writing such a recommendation. I'm circulating the draft document here hoping that we can discuss whether or not it makes sense to issue a recommendation on this. I realise this may be a controversial issue. Many have argued in the past that the only real solution to this problem is that people stop doing second rate Internet by blocking fragments, or that operators of caching recursive name servers should correctly configure their systems according to the maximum response size they can receive. Our approach to this has been a rather pragmatic one. Rather than looking at what should be the ideal situation we are trying to strive for maximum interoperability and ensuring that we maximise the chance that a response is delivered to a query while still not completely giving up on the ideal that fragmentation should just work and be accepted. The reason for approaching this from the authoritative side, by the way, is that there are already a number of recommendations out there that deal with the caching recursive side of things. If there is one thing our research shows its that these recommendations are not followed by most operators, unfortunately. As an operator of a substantial number of zones, we would like to be able to influence the deliverability of responses for the zones we are authoritative for. Since we cannot chase down every operator of a caching recursive name server that experiences delivery issues, even if we wanted to, the only way to do this is to avoid fragmentation on the authoritative side. I will present some more of our reasoning behind the recommendations in the document at the DNS WG meeting. I'm hoping for a good discussion next week :-) The document can be found here: https://dnssec.surfnet.nl/wp-content/uploads/2012/09/Recommendations-for-de… Remarks, comments, rants, etc. are all welcome via e-mail as well, of course :-) Cheers and see you next week, Roland -- Roland M. van Rijswijk - Deij -- SURFnet bv -- w: http://www.surfnet.nl/en/ -- t: +31-30-2305388 -- e: roland.vanrijswijk(a)surfnet.nl

5 5

New on RIPE Labs: Counting DNSSEC
by Mirjam Kuehne 24 Sep '12

24 Sep '12

Dear colleagues, Please find a new article on RIPE Labs: Counting DNSSEC (by Geoff Huston): https://labs.ripe.net/Members/gih/counting-dnssec Kind regards, Mirjam Kuehne RIPE NCC

1 0

draft minutes from RIPE64
by Jim Reid 15 Sep '12

15 Sep '12

Colleagues, here they are. Please speak up if there are any errors or omissions so that these can be approved by the WG at RIPE65. Thanks.

1 0

New on RIPE Labs: Root Server Instances in Member Networks
by Mirjam Kuehne 06 Sep '12

06 Sep '12

[apologies for duplicates] Dear colleagues, Please find a proposal on RIPE Labs how to create member instances of K-root and how to implement this during a pilot phase: https://labs.ripe.net/Members/dfk/root-servers-in-member-networks Kind regards, Mirjam Kuehne RIPE NCC

1 0

FWD from address-policy-wg: Cosmetic Surgery Project: Review Period on Version 2 of Draft Document, for Reverse Address Delegation of IPv4 and IPv6 Address Space]
by Peter Koch 06 Sep '12

06 Sep '12

Dear DNS WG, the following announcement and proposal may be relevant for this audience. Please follow the instructions for comments. Thanks, Peter (as WG co-chair) ----- Forwarded message from Emilio Madaio <emadaio(a)ripe.net> ----- From: Emilio Madaio <emadaio(a)ripe.net> To: address-policy-wg(a)ripe.net Subject: [address-policy-wg] Cosmetic Surgery Project: Review Period on Version 2 of Draft Document, for Reverse Address Delegation of IPv4 and IPv6 Address Space Date: Wed, 5 Sep 2012 14:52:18 +0200 Reply-To: address-policy-wg(a)ripe.net Dear colleagues, As part of the Cosmetic Surgery Project, the RIPE NCC is moving forward with a review of the policy document ripe-302, "Policy for Reverse Address Delegation of IPv4 and IPv6 address space in the RIPE NCC Service Region". After the feedback in the previous review phase, a new draft (2.0) of the policy document is online and ready for community review at: https://www.ripe.net/ripe/readability/improving-the-readability-of-ripe-doc… The highlights of the changes from the previous version include: -the removal of all unnecessary references to "reverse resolution" -the rewording and simplification of section 4.0 In response to the community's request: -section 3.0 focuses on who is able to ask for the delegation -the reference to the obsolete RFC 2874 has been replaced with the relevant active RFCs The Address Policy Working Group Co-Chairs decided to extend the review period until 3 October 2012 to allow the community more time to give their feedback. Please send your feedback on this draft document to the Address Policy Working Group at: <address-policy-wg at ripe.net>. Kind regards, Emilio Madaio Policy Development Officer RIPE NCC ----- End forwarded message -----

1 0