- dns-wg - mailman.ripe.net

f.root-servers.net unreachable for a few days?
by Max Grobecker 19 Mar '17

19 Mar '17

Hello, I noticed that f.root-servers.net is unreachable via IPv4 from my test locations (most of them in Germany). Relying on RIPE ATLAS [1] I'm pretty sure I'm not alon with this "problem". A traceroute from my home DSL connection (DTAG, AS3320) shows that packets are surprisingly routed to somewhere in Pakistan and never get answered. Also Port 53/UDP/TCP is unresponsive. --------------------------------- traceroute to f.root-servers.net (192.5.5.241), 30 hops max, 60 byte packets 1 87.186.224.133 (87.186.224.133) [AS3320] 18.144 ms 2 87.190.177.174 (87.190.177.174) [AS3320] 18.843 ms 3 217.239.49.30 (217.239.49.30) [AS3320] 23.291 ms 4 te0-0-0-16.agr21.fra03.atlas.cogentco.com (130.117.14.149) [AS174] 33.528 ms 5 * 6 be2959.ccr21.muc03.atlas.cogentco.com (154.54.36.54) [AS174] 38.948 ms 7 be3072.ccr21.zrh01.atlas.cogentco.com (130.117.0.17) [AS174] 41.687 ms 8 be3080.ccr21.mrs01.atlas.cogentco.com (130.117.49.1) [AS174] 46.415 ms 9 be2345.agr21.mrs01.atlas.cogentco.com (154.54.38.170) [AS174] 46.891 ms 10 ptcl.demarc.cogentco.com (149.6.155.146) [*] 156.865 ms 11 static-10GE-KHI275-P01-SwA.pie.net.pk (202.125.128.173) [AS17557] 155.095 ms 12 221.120.251.178 (221.120.251.178) [AS17557] 153.854 ms 13 * 14 * 15 * 16 * 17 * --------------------------------- Has something happened to the F-Root instances in Europe? Or has the IP address changed? [1] https://atlas.ripe.net/results/maps/root-server-performance/?t=1489877040&s… Greetings Max

2 3

Additional information about the RIPE NCC reverse DNS issue
by Anand Buddhdev 18 Mar '17

18 Mar '17

Dear colleagues, This is a follow-up to our message of Friday about issues with some reverse delegations. After doing a thorough analysis, and with the help of ARIN staff, we found more issues with our zonelet generation code, and this showed that we had indeed published some empty zonelet files. From ARIN's point of view these were valid zonelets, with no content, and that is why the delegations were removed. Similarly, three zonelets that APNIC picks up also had empty content. We fixed these issues late on Friday afternoon, and by Friday evening, both registries had re-imported the correct zonelets and were again publishing the missing delegations. We will evaluate our code review and testing to prevent this from happening again, and add some monitoring to alert us to such a situation earlier. We are also discussing this with the other RIRs to find ways to improve the zonelet exchange process. Regards, Anand Buddhdev RIPE NCC

1 0

Reverse DNS issue for some delegations in the RIPE NCC service region
by Anand Buddhdev 17 Mar '17

17 Mar '17

Dear colleagues, Between 17:00 UTC yesterday and 10:00 UTC today, we had an issue that affected some reverse DNS delegations. The delegations in the RIPE Database where the parent zone is operated by ARIN were affected. RIPE NCC publishes zonelet files containing these delegations, and these are picked up by ARIN's DNS provisioning system periodically. At the end of these zonelet files is a summary of the counts of various types of DNS records. A bug in our code accidentally published these summaries with zero counts, and as a result, the ARIN DNS provisioning system appears to have removed the delegations. We have corrected this bug, and the zonelet files now contain the correct counts. They have been published on the RIPE NCC FTP server, and ARIN's DNS provisioning system has picked them up and reintroduced the delegations. We apologise for any inconvenience caused by this. This is the first time that such an issue has occurred with delegations that are exchanged by the zonelet mechanism, and we will try to engineer monitoring to prevent such an outage in the future. RIPE NCC's delegations in the following ARIN-operated zones were affected. The majority of the other delegations in these zones come from ARIN and the other registries, and were not affected. 104.in-addr.arpa. 107.in-addr.arpa. 128.in-addr.arpa. 129.in-addr.arpa. 130.in-addr.arpa. 131.in-addr.arpa. 132.in-addr.arpa. 134.in-addr.arpa. 135.in-addr.arpa. 136.in-addr.arpa. 137.in-addr.arpa. 138.in-addr.arpa. 139.in-addr.arpa. 13.in-addr.arpa. 140.in-addr.arpa. 143.in-addr.arpa. 144.in-addr.arpa. 146.in-addr.arpa. 147.in-addr.arpa. 148.in-addr.arpa. 149.in-addr.arpa. 152.in-addr.arpa. 156.in-addr.arpa. 157.in-addr.arpa. 158.in-addr.arpa. 159.in-addr.arpa. 160.in-addr.arpa. 161.in-addr.arpa. 164.in-addr.arpa. 165.in-addr.arpa. 166.in-addr.arpa. 168.in-addr.arpa. 169.in-addr.arpa. 170.in-addr.arpa. 173.in-addr.arpa. 198.in-addr.arpa. 199.in-addr.arpa. 206.in-addr.arpa. 209.in-addr.arpa. 216.in-addr.arpa. 23.in-addr.arpa. 24.in-addr.arpa. 45.in-addr.arpa. 52.in-addr.arpa. 65.in-addr.arpa. 66.in-addr.arpa. Regards, Anand Buddhdev RIPE NCC

4 6

Reverse problem Delegation
by Thierry Bagnoud 17 Mar '17

17 Mar '17

Hi, do you have problem with reverse delegations (subnet 153.109.0.0/16) or it's a problem for ARIN ? Thanks for your response. VSnet

2 1

Call for input for the DNS working group at RIPE 74
by Shane Kerr 16 Mar '17

16 Mar '17

Dear DNS fans, We are rapidly approaching the upcoming RIPE 74 meeting in Budapest, 8-12 May 2017. We plan on having a DNS working group session there, and would like your input, presentations, or suggestions for discussions. Please e-mail my co-chairs and I at <dns-wg-chairs(a)ripe.net> and let us know what you'd like to have in this session. (You can also mail any of us individually if you prefer.) I'm looking forward to seeing you there! Cheers, -- Shane

1 0

RIPE Atlas Infrastructure Maintenance (14 March)
by Paul de Weerd 13 Mar '17

13 Mar '17

Dear all, We'll carry out maintenance work on the core RIPE Atlas and RIPEstat infrastructure tomorrow (14 March 2017), approximately between 09:00 and 11:00 UTC+1. As a result, we will switch over to the reduced data set, limiting the amount of history available from the service. This affects RIPE Atlas, RIPEstat, RIS and DNSMON. We apologise for the inconvenience. Best regards, Paul de Weerd Senior Systems Engineer RIPE NCC

1 0

New on RIPE Labs: New RIPE Atlas Root Zone DNS Measurements
by Mirjam Kuehne 10 Mar '17

10 Mar '17

Dear colleagues, Two new DNS measurements, both designed to assess the impact of issues with one or more root name servers, have been added to every RIPE Atlas probe. Please find more details on RIPE Labs: https://labs.ripe.net/Members/chris_amin/new-ripe-atlas-root-zone-dns-measu… Kind regards, Mirjam Kuhne RIPE NCC

1 0

Join RIPE NCC DNS Measurements hackathon, 20-21. April 2017, Amsterdam
by Vesna Manojlovic 16 Feb '17

16 Feb '17

Dear colleagues, The fifth RIPE NCC hackathon will take place on Thursday and Friday, 20-21 April 2017, in Amsterdam. We're looking for creative thinkers: front-end developers, UI designers, DNS operators, researchers and other enthusiastic coders, to help us develop new tools and visualizations based on DNS measurements data. All source code developed during the hackathon will be publicly licensed and available on GitHub, and will be free for the entire community to use. -------------------- How to Apply -------------------- Interested? Learn more and apply online today! https://atlas.ripe.net/hackathon/dns-measurements/#!application-form *The application deadline is 26 February 2017* We look forward to seeing you there! Find out more in this RIPE Labs article: https://labs.ripe.net/Members/alun_davies/dns-measurements-hackathon-2017 Regards, Vesna Manojlovic RIPE NCC Community Builder

1 1

DNS BoF at FOSDEM, Sunday
by Peter van Dijk 04 Feb '17

04 Feb '17

Hello DNS people! For those of you attending FOSDEM, we have reserved room H.3227 for Sunday(!) 13:00-14:00, to hold a DNS BoF. There is no agenda yet; please suggest items by private reply. If you are at FOSDEM, or if you know anyone who is, please make sure they know! If you think I missed a mailing list, please forward this message. If you need to reach me, please use +31-6-10908570. Kind regards, -- Peter van Dijk PowerDNS.COM BV - https://www.powerdns.com/

1 0

Announcement of ICANN DNS Symposium
by Matt Larson 02 Feb '17

02 Feb '17

(This email is sent from my personal account because that's how I'm subscribed, and I apologize if you receive multiple copies.) Dear colleagues, I'd like to invite you to the first-ever ICANN DNS Symposium, which will be held in Madrid, Spain, on Saturday, 13 May 2017. ICANN's Office of the CTO hopes to make the ICANN DNS Symposium a regular event for the DNS technical community with changing themes covering different aspects of DNS. For this initial event, we are focusing on DNS-related activities within ICANN. There will be presentations relating to DNS research, security, root server operations, IANA and more. Multiple ICANN departments will present, including the Office of the CTO, DNS Engineering (responsible for L-root operations), PTI/IANA and the Global Domains Division (gTLDs). Our goal is to be transparent with the community about DNS activities happening at ICANN and solicit feedback and suggestions. More information about the Symposium is available at https://www.icann.org/ids. A welcome reception will be held on Friday evening, 12 May. Also, please note that the Symposium is colocated with several other events: - ICANN GDD Industry Summit (9-11 May) (https://www.icann.org/gddsummit) - The 6th Registration Operations Workshop (12 May) (http://regiops.net) - ICANN DNS Symposium (13 May) (https://www.icann.org/ids) - OARC 26 (DNS-OARC Workshop) (14-15 May) (https://indico.dns-oarc.net/event/26) All events will be held in the same venue, Hotel NH Collection Madrid Eurobuilding, Calle de Padre Damián, 23, 28036, Madrid, Spain. Register for the Symposium now at https://registration.icann.org/register.php?id=dns-symposium-2017. I hope to see you in Spain! Matt -- Matt Larson <matt.larson(a)icann.org> VP of Research, Office of the CTO, ICANN +1 240 459-9562 (mobile)

1 0