- dns-wg - mailman.ripe.net

New on RIPE Labs: Investigating the Status of Reverse DNS
by Mirjam Kuehne 29 May '17

29 May '17

Dear colleagues, Please find this new article by Sofía Silva Berenguer on RIPE Labs: Investigating the Status of Reverse DNS This is based on a project Sofía did together with two colleagues from the RIPE NCC during the recent DNS Measurements Hackathon in Amsterdam. https://labs.ripe.net/Members/sofia_silva_berenguer/investigating-the-statu… Kind regards, Mirjam Kuhne RIPE NCC

1 0

New on RIPE Labs: Do You Have DNSSEC Validation Enabled? (by Matt Larson)
by Mirjam Kuehne 18 May '17

18 May '17

Dear colleagues, In case you missed this on the APNIC blog, please find this guest post by Matt Larson on RIPE Labs: Do You Have DNSSEC Validation Enabled? https://labs.ripe.net/Members/mirjam/do-you-have-dnssec-validation-enabled Kind regards, Mirjam Kuhne RIPE NCC

1 0

New on RIPE Labs: Results from RIPE NCC DNS Measurements Hackathon
by Vesna Manojlovic 11 May '17

11 May '17

Dear all, in advance to my presentation (today, DNS-WG, RIPE74, 14:00 time-slot), we published an article on RIPE Labs, with the results of the DNS Measurements Hackathon. Follow the links to the code, enjoy the photos that attempt to transfer some of the atmosphere, and join us next time: https://labs.ripe.net/Members/becha/results-dns-measurements-hackathon See you soon, either in Budapest or online, Vesna

1 0

New on RIPE Labs: Turning on Anycast on B-Root
by Mirjam Kuehne 09 May '17

09 May '17

Dear colleagues, The B-root operators have announced that they would enable IP anycast on 1 May 2017. In this new article Giovane Moura shows how that change has been perceived by the RIPE Atlas probes, and if there were any transient effects of this change: https://labs.ripe.net/Members/giovane_moura/anycast-on-b-root-and-ripe-atla… Kind regards, Mirjam Kuhne RIPE NCC

1 0

RIPE 74 DNS WG Agenda
by Shane Kerr 03 May '17

03 May '17

Colleagues, Here's the agenda for the DNS working group session at the RIPE 74 meeting in Budapest. I am looking forward to seeing you all there! Cheers, -- Shane On behalf of the DNS working group chairs Thursday, 11 May 14:00 - 15:30 ------------------------------ A. Administriva [5 minutes] * Welcome * Thanking the scribe & IRC monitor * Agenda bashing * Approval of minutes from RIPE 73 B. Review of Outstanding DNS WG Actions [5 minutes] https://www.ripe.net/participate/ripe/wg/dns/actions C. RIPE NCC Presentation [30 minutes] by Romeo Zwart D. A Software-Based Approach to Generate and Detect Flooding Attacks Against DNS Infrastructure [30 minutes] by Santiago Ruano Rincón E. RIPE NCC DNS Hackathon Report [20 minutes] Thursday, 11 May 16:00 - 17:30 ------------------------------ F. DNS Privacy Enhanced Services [30 minutes] by Benno Overeinder G. DNS Violations [30 minutes] by Ondřej Surý Z. Any Other Business (AOB)

1 0

RIPE 74 call for late submissions, LTs, and one tutorial and BoF
by Benno Overeinder 14 Apr '17

14 Apr '17

Dear colleagues, Brief version: The RIPE PC invites submissions for plenary, tutorial, BoF and Lightning Talks. Longer version: As distinct from previous RIPE meetings, the RIPE Programme Committee decided to keep two plenary slots open for so-called “late submission”. These plenary slots gives the community the opportunity to submit presentations that report on recent developments, issues, security incidents, etc., that are relevant to the RIPE audience. Independent from the realisation of late submissions, the PC has received a fair amount of high-quality submissions for the first deadline on March 12th. From these submissions, we have selected 14 presentations to complete the RIPE 74 plenary programme and no second CFP with a deadline in April was required. For the tutorials and BoFs we have one slot for each available: - Monday morning, 2 hour tutorial slot - evening, 1 hour BoF slot Also please consider to submit Lightning Talks for the Monday plenary. During the week of the RIPE meeting we will accept LTs for Tuesday and Friday. Please submit your plenary “late submission”, tutorial or BoF submission via the PC submission system, https://ripe74.ripe.net/submit-topic/submission-form/. The deadline for the submissions is *April 26th*. Kind regards, Benno Overeinder RIPE PC Chair https://ripe74.ripe.net/programme/ripe-pc/ -------------------->>><<<-------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 74 will take place from 8-12 May 2017 in Budapest, Hungary. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 74. See the full descriptions of the different presentation formats, https://ripe74.ripe.net/submit-topic/presentation-formats/. Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 26 April 2017. Proposals submitted after this date will be considered depending on the remaining available space in the programme. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange - Connected Things (aka. Internet of Things - IoT) Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour - Lightning talks: 10 minutes total for both presentation and any discussion The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe74.ripe.net/submit-topic/submission-form/. - Lightning talks should also be submitted using the meeting submission system (https://ripe74.ripe.net/submit-topic/submission-form/) and can be submitted any time up to and including the meeting week. Allocation of lightning talks will start a few days before the meeting, and will continue throughout the meeting. During the meeting, they may be announced on the day before the talk or even on the same day as the talk. - Lightning talks should also be submitted using the meeting submission system (https://ripe74.ripe.net/submit-topic/submission-form/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice, in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. - Due to potential technical issues, presenters/panellists should be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- Benno J. Overeinder NLnet Labs http://www.nlnetlabs.nl/

1 0

New on RIPE Labs: Reverse DNS Outage for Out-of-Region Address Space
by Mirjam Kuehne 07 Apr '17

07 Apr '17

Dear colleagues, On Thursday 16 March 2017, a bug in a script caused an outage for some reverse DNS delegations registered in the RIPE Database. The effects of the bug were not immediate, but began a cascading failure, that persisted until Friday 17 March. In this RIPE Labs article, you will find more information about what happened: https://labs.ripe.net/Members/anandb/reverse-dns-outage-for-out-of-region-a… Kind regards, Mirjam Kuhne RIPE NCC

1 0

2nd call for input for the DNS working group at RIPE 74
by Shane Kerr 05 Apr '17

05 Apr '17

DNS fans, We have a few topics on the DNS working group agenda for RIPE 74 now that I think will be interesting, but we still have room for a couple more presentations or discussions or demos or perhaps a DNS spoken word jam session. If you've been toying around with something DNS related and want to talk to other people about it, now is the time. :) Please send an to e-mail my co-chairs and me at <dns-wg-chars(a)ripe.net>. Cheers, -- Shane

1 0

Draft minutes from the DNS working group at RIPE 73
by Shane Kerr 24 Mar '17

24 Mar '17

DNS Colleagues, Draft minutes from the DNS working group at RIPE 73 are available here: https://www.ripe.net/participate/ripe/wg/dns/minutes/ripe-73 Please send any corrections to the DNS working group chairs at <dns-wg-chairs(a)ripe.net>. Cheers, -- Shane

1 0

Re: [dns-wg] [dns-operations] Additional information about the RIPE NCC reverse DNS issue
by Shane Kerr 20 Mar '17

20 Mar '17

Doug, At 2017-03-18 18:34:25 -0700 Doug Barton <dougb(a)dougbarton.email> wrote: > On 03/18/2017 08:46 AM, Anand Buddhdev wrote: > > Dear colleagues, > > > > This is a follow-up to our message of Friday about issues with some > > reverse delegations. > > > > After doing a thorough analysis, and with the help of ARIN staff, we > > found more issues with our zonelet generation code > > Can you say more about the benefit of this "zonelet" system vs. ARIN > simply delegating the appropriate zones to you, and you managing them > like any other DNS zone? > > I do appreciate you keeping the community informed about the causes of > the outage, but it seems that at least part of the root cause is that > you're operating what sounds like a fairly fragile system in the first > place, with (de fact) insufficient validity checking. I was at the RIPE NCC when we adopted the zonelet approach, although I haven't worked for them for over a decade. The zonelet system was designed to allow reverse DNS for IPv4 space that was originally assigned to one RIR but was later partially migrated to other RIRs. This happened when LACNIC and AfriNIC were formed, although I think that an audit was done at the time and so space was moved around between all 5 RIRs. The problem is that we could have a delegation like 999.in-addr.arpa going to the RIPE NCC and then 888.999.in-addr.arpa being managed by ARIN... but want 888.999.in-addr.arpa to point to the **address holder's** name servers, not **ARIN's** name servers. So ARIN needs a way to get the information about the name servers to the RIPE NCC somehow (and RIPE NCC to LACNIC, and so on). Zonelets are used for this, which is basically just the NS records needed, probably picked up using SSH. I think that we discussed using dynamic DNS (DDNS) for this at the time, but decided that the simplest & best solution was zonelets. DNAME could be used, but it would involve an extra lookup for resolvers, right? (DNAME was pretty new when zonelets were adopted, and I don't know that BIND 8 supported them, which was still the most popular DNS server at that time.) My guess is that the bugs are probably more due to ancient Perl code than an overly-complicated system for exchanging this information. Heck, it's possible that the bugs are due to MY ancient Perl code, although I really don't remember who wrote or tested the code.... Cheers, -- Shane

5 5