- dns-wg - mailman.ripe.net

Deploying DNSSEC in e164.arpa zone
by Andrei Robachevsky 01 Oct '07

01 Oct '07

Dear Colleagues, The RIPE NCC is pleased to announce its plan for the deployment of DNSSEC in the e164.arpa zone (ENUM). This improvement to the operation of the domain was developed and concluded following consultation with the IETF's Internet Architecture Board (IAB). In line with the IAB's instructions, the RIPE NCC has provided technical administration for the e164.arpa zone since 2002. These instructions are documented and are available at: http://www.ripe.net/enum/instructions.html We informed the IAB of our intention to implement DNSSEC in the e164.arpa zone and we received positive feedback and support for the deployment. Details of the correspondence between the RIPE NCC and the IAB can be found at: http://www.iab.org/documents/correspondence/ We will start signing the e164.arpa on 26 November 2007 and support for secure delegations will be provided on 24 March 2008. Further announcements will be posted as these milestones approach. Best regards, Andrei Robachevsky Chief Technical Officer RIPE NCC

6 9

DNS Maintenance on ns-pri.ripe.net, 26 Sept
by Sjoerd Oostdijck 26 Sep '07

26 Sep '07

[Apologies for duplicate e-mails.] Dear Colleagues, On Wednesday, 26 September 2007, we will update our DNS server ns.ripe.net between 17:00 and 18:00 (UTC). During this period, it may not be able to answer DNS queries. We apologise for any inconvenience this may cause. If you have any questions or concerns about this, please send an e-mail to <dns-help(a)ripe.net>. Regards, Sjoerd Oostdijck, DNS Services RIPE NCC

1 0

Last Call: Secondary service on ns.ripe.net for reverse delegations
by Peter Koch 19 Sep '07

19 Sep '07

Dear WG, at the Tallinn meeting, Brett Carr gave a presentation on DNS operations at the RIPE NCC. In his report a proposal regarding the DNS name service for /16 reverse was made. See <http://www.ripe.net/ripe/wg/dns/r54-minutes.html>, item [D] for the minutes and slide 12 of the presentation <http://www.ripe.net/ripe/meetings/ripe-54/presentations/DNS_update.pdf> for details. This resulted in action item 54.1 on the NCC to solicit feedback on the proposal. Brett started a thread on the DNS WG mailing list on May, 14th <http://www.ripe.net/ripe/maillists/archives/dns-wg/2007/msg00107.html> (Message-ID: <4A6256C3-97B5-4415-BC93-9A2978A01A20(a)ripe.net>). Summary: To eliminate an inconsistency between IPv4 and IPv6 policies, where /16 reverse on ns.ripe.net is mandatory for v4 and there's no such policy for v6, three options were given: 1) Make ns.ripe.net mandatory on ipv4 and ipv6 delegations 2) Make ns.ripe.net optional on ipv4 and ipv6 delegations 3) Discontinue the secondary service on ns.ripe.net for new delegations. The NCC's preference was (2). The thread started as mentioned above saw 8 replies until June. Those who expressed an opinion were in favour of going forward with (2). Since the thread hasn't been active for a while, the WG chairs would like to issue a Last Call on this topic. Please take these remarks into consideration: o While cost of service has been mentioned, detailed discussion would be a topic for the NCC Services WG. For now we assume that the cost structure (essentially: no additional cost) will remain unmodified. o When the secondary service is "optional" this should be read in a symmetric way, i.e. not only the /16 maintainer can choose to opt-out, but also the NCC could, on reasonable operational grounds, terminate or not activate support for a particular zone. Now, finally, even though this issue is not subject to the PDP, this is a Last Call until Friday, 31 August 2007, 12:00 UTC Please voice your opinion, the default will be to continue with (2) above. We'd like to ask the NCC to prepare an implementation plan after this date. -Peter Koch [DNS WG co-chair]

3 4

DNS Maintenance on ns.ripe.net, 19 Sept
by Sjoerd Oostdijck 17 Sep '07

17 Sep '07

[Apologies for duplicate e-mails.] Dear Colleagues, On Wednesday, 19 September 2007, we will update our DNS server ns.ripe.net between 17:00 and 18:00 (UTC). During this period, it will not be able to answer DNS queries. We apologise for any inconvenience this may cause. If you have any questions or concerns about this, please send an e-mail to <dns-help(a)ripe.net>. Regards, Sjoerd Oostdijck, DNS Services RIPE NCC

1 0

Leaving the RIPE NCC
by Brett Carr 14 Sep '07

14 Sep '07

I will be moving back to the UK and hence leaving the RIPE NCC on September the 20th. I would like to thank all WG members for the help and support over the last 3 years. Rest assured DNS services at the NCC are in the safe hands of Anand and Sjoerd, and Andrei will take over the running of the team until a replacement has been hired. As always queries and problems can be sent to dns-help(a)ripe.net and will be dealt with swiftly. Thanks Brett -- Brett Carr RIPE Network Coordination Centre Manager -- DNS Services Group Singel 258 Amsterdam NL GPG Key fingerprint = F20D B2A7 C91D E370 44CF F244 B6A1 EF48 E743 F7D8

1 0

DNS Maintenance on ns-tld.ripe.net, 12 Sept
by Sjoerd Oostdijck 06 Sep '07

06 Sep '07

[Apologies for duplicate e-mails.] Dear Colleagues, On Wednesday, 12 September 2007, we will update our DNS server ns-tld.ripe.net between 17:00 and 17:15 (UTC). During this period, it will not be able to answer DNS queries. We apologise for any inconvenience this may cause. If you have any questions or concerns about this, please send an e-mail to <dns-help(a)ripe.net>. Regards, Sjoerd Oostdijck, DNS Services RIPE NCC

4 3

DRAFT RIPE 54 DNS WG Minutes posted
by Peter Koch 29 Aug '07

29 Aug '07

Dear WG, with apologies for the delay and many thanks to Adrian Bedford, who delivered them on time, the draft minutes for the Tallinn meeting are now available at <http://www.ripe.net/ripe/wg/dns/r54-minutes.html> Please send in comments and/or corrections by Friday, 2007-08-03, after which this or an amended version will be considered final. -Peter

3 5

DNS Maintenance on ns-sec.ripe.net, 5 Sept
by Sjoerd Oostdijck 29 Aug '07

29 Aug '07

[Apologies for duplicate e-mails.] Dear Colleagues, On Wednesday, 5 September 2007, we will update our DNS server ns-sec.ripe.net between 17:00 and 17:15 (UTC). During this period, it will not be able to answer DNS queries. We apologise for any inconvenience this may cause. If you have any questions or concerns about this, please send an e-mail to <dns-help(a)ripe.net>. Regards, Sjoerd Oostdijck, DNS Services RIPE NCC

1 0

Heads Up: IESG Last Call on IANA DLV draft
by Daniel Karrenberg 24 Aug '07

24 Aug '07

http://www1.ietf.org/mail-archive/web/ietf-announce/current/msg04017.html

1 0

Announcement DNS for LIRs Training Courses
by RIPE NCC Training 16 Aug '07

16 Aug '07

------- [Apologies for duplicate e-mails] Dear Colleagues, The RIPE NCC Training Services Department invites you to register for one of our upcoming DNS for LIRs Training Courses: Date: Friday 14 September 2007 Time: 09:00-17:00 Location: Amsterdam, Netherlands And Date: Friday 9 November 2007 Time: 09:00-17:00 Location: Southampton, United Kingdom And Date: Wednesday 20 February 2008 Time: 09:00-17:00 Location: Vienna, Austria Hosted by: Nic.at: http://www.nic.at/ The main objective of the DNS for LIRs Training Course is to provide LIRs with information about the different DNS related services the RIPE NCC has available for them. It covers reverse DNS procedures and checks, as well as giving information about DNS Monitoring (DNSMON), K-Root and anycasting. The course also covers DNSSEC and the specific procedures set up by the RIPE NCC to secure the in-addr.arpa zones. Please note that the DNS for LIRs course focuses on DNS services and procedures related to being an LIR. The course does: - NOT teach the basics of DNS - NOT describe how to receive Internet resources from the RIPE NCC - NOT describe fully how to operate a Local Internet Registry (LIR) The course is intended for technical staff of LIRs. It is assumed that all attendees are familiar with common DNS terminology and have a practical knowledge of operating DNS servers. The course is free of charge. We provide lunch and printed training materials. We do not cover any of your travel expenses or accommodation. We give all of our training courses in English. You can find more information about the course at: http://www.ripe.net/training/dns REGISTRATION: ============ To register for this course, please use the LIR Portal or complete the registration via our website on: http://www.ripe.net/cgi-bin/trainingform.pl.cgi If you have any questions please do not hesitate to contact us at <training(a)ripe.net>. Kind regards, Rumy Kanis Training Services Manager RIPE NCC

1 0