ietf
[Top] [All Lists]

Re: Root Server DDoS Attack: What The Media Did Not Tell You

2002-11-24 11:30:39
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --On Saturday, November 23, 2002 23:02:15 -0500 "Michael Froomkin - U.Miami
School of Law" <froomkin(_at_)law(_dot_)miami(_dot_)edu> wrote:

The issue is less the size of the file than the problem of updating many 
copies of it reliably. The root server operators find it a challenge to
assure that even the modestly sized root zone file is correctly
distributed to all root servers accurately and in a timely fashion. 

Are there statistics on this?  Certainly the published info I've seen is
more of the patting-self-on-back variety.  

There is a certain amount of work required to keep a large number of
servers in sync. Developements such as IXFR, Notify and TSIG all help in
speeding up convergence and assuring correctness of data. Still, if the
ship is to be run as tight as can be, one needs to perform a significant
admin and monitoring work to ensure that these functions actually function. 

I agree with Valdis that this is not IETF list material; it should be taken
to the operations community ASAP. 

Måns, running DNS servers for fun and public benefit. 
- -- 
Måns Nilsson    http://vvv.besserwisser.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE94IaL02/pMZDM1cURAvfzAJ4iFmDxp60u+TCk/coD/MmtyC9CUwCbBsZt
svIxKF/bR1R7q7zG/A3f7WU=
=JV8U
-----END PGP SIGNATURE-----



<Prev in Thread] Current Thread [Next in Thread>