- dns-wg - mailman.ripe.net

OARC 34 Workshop, February 4th & 5th, Registration and Call for Contributions now open
by Brett Carr 11 Dec '20

11 Dec '20

OARC 34 will be an online meeting on February 4th & 5th starting at 16:00 UTC. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. Based on the feedback from the previous workshop, the DNS-OARC audience is interested to see more content related to DNS operations. Therefore we are particularly interested in submissions from DNS Operators about attack mitigation and any major (public or non-public) DNS outages that your organization might have faced over the last year or so, the steps taken to resolve/mitigate the immediate issue, and to prevent future such events and any lessons learned. As it is an online workshop, we'd like to encourage brevity; presentations should not be longer than 20 minutes (with additional time for questions). **Workshop Milestones:** * 9 Dec 2020 - Submissions open via Indico * 4 Jan 2021 - Deadline for submission (23:59 UTC) * 14 Jan 2021 - Initial Contribution list published * 21 Jan 2021 - Full agenda published * 28 Jan 2021 - Deadline for slideset submission and Rehearsal * 4 Feb 2021 - OARC 34 Workshop The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc34> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC 34: * your talk will be broadcast live and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal on January 28th. It would be very useful to have your slides (even if draft) ready for this. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Brett Carr, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Brett Carr Manager DNS and Network Engineering Nominet UK

1 0

Next Online DNS WG meeting - 9 December
by Shane Kerr 07 Dec '20

07 Dec '20

Dear DNS working group, We are finishing up our virtual RIPE DNS working group sessions on Wednesday, when Ed Lewis will be digging into RPKI usage in parts of the DNS world: - Ed Lewis, Measuring ROA deployment at the top of the DNS This will be our last RIPE DNS working group session of 2020, so we hope to see you all there! (If you are unable to attend, we will publish the recorded session and minutes on the RIPE website, as usual.) The connection details are: Topic: DNS Working Group - Meeting Time: Dec 9, 2020 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/97323124270?pwd=Z3doc0R5QWVqWFV2bm1WOFNtYzBGQT09 Meeting ID: 973 2312 4270 Passcode: 628274 One tap mobile +31207946519,,97323124270# Netherlands +31207946520,,97323124270# Netherlands Dial by your location +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Washington D.C) Meeting ID: 973 2312 4270 Find your local number: https://ripe.zoom.us/u/adNiPJBj5Z Join by SIP 97323124270(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 973 2312 4270 Passcode: 628274 Cheers, -- Shane On behalf of the DNS working group chairs

1 0

DNSSEC validation problem with ripe.net
by Anand Buddhdev 04 Dec '20

04 Dec '20

Dear colleagues, On 3 December, at around 15:40 (UTC+1), Matt Nordhoff and Peter van Dijk alerted us to a problem with the DNS resolution of certain names in ripe.net. Upon investigation, we discovered that a recent update in the zone had changed the status of some address records to glue records. This change was not handled correctly by our DNSSEC signer, and it left spurious NSEC records in the zone, which then caused validation failures. Eventually, around 20:00 (UTC+1), we forced the DNSSEC signer to fully re-sign the zone, and this fixed the problem. We have reported this issue to the developers of the DNSSEC signing software, and they are investigating. We are also adding some extra monitoring to our infrastructure, to detect such problems more quickly. Regards, Anand Buddhdev RIPE NCC

1 0

New on RIPE Labs: How Centralised is DNS Traffic Becoming?
by Alun Davies 24 Nov '20

24 Nov '20

Dear colleagues, In this new article on RIPE Labs, Giovane Moura talks about how he and his colleagues have been measuring Internet centralisation and its effects: https://labs.ripe.net/Members/giovane_moura/how-centralised-is-dns-traffic-… Kind regards, Alun Davies RIPE NCC

1 0

Next Online DNS WG meeting - Nov 18th
by Joao Luis Silva Damas 17 Nov '20

17 Nov '20

Dear WG, We continue with the online meetings of the DNS WG with our next session on November 18th, at 15:00 CET (that’s 14:00 UTC). The Agenda has the two following contributions: - Brett Carr, How we made DNSSEC simpler - Paul Muchene, Experience with hyperlocal and a custom VPN The connection details are: Topic: DNS Working Group - Meeting Time: Nov 18, 2020 03:00 PM Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/92042189082?pwd=QUhwMThpcFFHcEZOKzNyMkxuNTQ0UT09 <https://ripe.zoom.us/j/92042189082?pwd=QUhwMThpcFFHcEZOKzNyMkxuNTQ0UT09> Meeting ID: 920 4218 9082 Passcode: 766885 One tap mobile +31202410288,,92042189082# Netherlands +31207940854,,92042189082# Netherlands Dial by your location +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +31 707 006 526 Netherlands +1 253 215 8782 US (Tacoma) +1 301 715 8592 US (Germantown) +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) Meeting ID: 920 4218 9082 Find your local number: https://ripe.zoom.us/u/abVP22JEAW <https://ripe.zoom.us/u/abVP22JEAW> Join by SIP 92042189082(a)zoomcrc.com <mailto:92042189082@zoomcrc.com> Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia) 149.137.40.110 (Singapore) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 920 4218 9082 Passcode: 766885 See you soon, Joao for the DNS WG Chairs

1 1

New on RIPE Labs: Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers
by Alun Davies 29 Oct '20

29 Oct '20

Dear colleagues Source Address Validation (SAV) is aimed at filtering packets based on source IP addresses at the network edge. On RIPE Labs now, Maciej Korczynski and colleagues share their method for identifying networks that do not deploy SAV for incoming traffic. https://labs.ripe.net/Members/yevheniya_nosyk/inferring-the-deployment-of-i… Kind regards, Alun Davies

1 0

New on RIPE Labs: Journeying into XDP Part 1 - Augmenting DNS
by Alun Davies 23 Oct '20

23 Oct '20

Dear colleagues, In the second of a series of articles aimed at exploring use cases for XDP (eXpress Data Path) technology, Tom Carpay talks about implementing Response Rate Limiting. Read more now on RIPE Labs: https://labs.ripe.net/Members/tom_carpay/journeying-into-xdp-part-1-augment… Kind regards, Alun Davies RIPE NCC

1 0

How to participate in the DNS wg session at RIPE 81
by Dave Knight 21 Oct '20

21 Oct '20

Hi all, Our next DNS working group session is a normal meeting of the DNS working group held during RIPE 81. Unlike the previous RIPE meeting and our DNS wg remote sessions, we won't use Zoom for this, but Meetecho. This page has specific guidance on how Meetecho is used for participation at RIPE 81: <https://ripe81.ripe.net/attend/how-to-participate/> the gist of which is: - Register for RIPE 81 - Prior to the meeting you will be emailed your unique Meetecho URL - You can run that in a browser, but try not to use Safari as that doesn't work properly Here's a RIPE labs article which talks about Meetecho and why it has been chose for RIPE81: <https://labs.ripe.net/Members/martina_de_mas/ripe-81-new-conference-platfor…> A consequence of this is that you must be registered for RIPE 81 to attend the DNS wg session. You can register for RIPE 81 at: <https://ripe81.ripe.net/attend/register/> Kind regards, dave

1 0

RIPE 81 DNS working group agenda
by Dave Knight 19 Oct '20

19 Oct '20

Hi all, Here's the agenda for the RIPE 81 meeting of the DNS working group. Kind regards, dave Wednesday 28 October at 11:00 CET A. Administrivia - Agenda bashing - Approval of previous minutes - Selection of a co-chair B. RIPE NCC Update, Anand Buddhdev C. Measuring Query Name Minimization, Geoff Huston D. Developments in encrypted DNS, Andrew Campling E. Any other business

1 0

Volunteer list for RIPE DNS working group chair
by Dave Knight 16 Oct '20

16 Oct '20

Colleagues, The nomination period for the RIPE DNS working group chair selection has completed with a single volunteer, Joao Damas. He sent us the following text: ------------------------------------------------------------------------- Dear DNS WG co-chairs, I send this email as an individual to put my name into the pool of candidates for DNS WG chair role up for election during RIPE 81. I would like to continue this role for one more term as I believe I can still contribute positively to the Working Group and the RIPE Community in general as I have done for the this term, bringing topical content and discussions to the Working Group, reacting to the current situation by working with the Group’s co-chairs to have periodic online sessions that keep us all as a group and working with the other working group chairs at RIPE to continue developing the community. Regards, Joao Luis Silva Damas ------------------------------------------------------------------------- Please offer whatever support (or opposition) you have for Joao on the list. Thanks, dave, for the DNS wg chairs

22 34