ietf
[Top] [All Lists]

Re: Impact from rfc1918 leaks

2003-10-11 05:36:09
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

| I don't think another 10% load on the root nameservers is a huge  
deal,
| so I wouldn't use the word "harmful" but I guess this is a special  
case

Again. You'll have to ask the operators of the root-zone if they
consider 11-14% a big deal. Maybe some of them are listening....

Well we as root-server operator will have to take the costs of  
upgrading to handle the total query volume....10-15% is then quite a  
lot.



| I read a report that only 2% of the hits on the root servers is both
| legitimate and useful anyway.

~From the presentation I refer to which unfortunately is in Swedish but
you can probably read the numbers anyway... :

http://www.iis.se/Internetdagarna/2003/23-robust-dns/id03-23-lars- 
johanliman.pdf

this is clearly not the case. The rfc1918-queries consistute the bulk
of bad queries ("DUMMA frågor" on page 4 of the presentation). I must
however confess ignorance as to what queries are 'useful'. Presumably
even the rfc1918-queries were deemed useful for someone since they
were sent in the first place.

The 2% figure I think was from an analysis of f.root-servers.net.  
i.root-servers.net seems to be seeing more "valid" queries than f. I  
guess these figures are different from each server. I think Liman said  
that we where seeing 25% garbage in total. I think queries from and  
about RFC1918 addresses was around 20% of those. It would be fun to see  
what percentage of the Ipv6 related queries that are for site-local  
addresses...

- - kurtis -

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBP4f0L6arNKXTPFCVEQLr0wCfQ98s0IuFlle09q5Ceu41dzxY0ncAoMde
WOPfR47J5gKXQbD85232h5YK
=uMUn
-----END PGP SIGNATURE-----




<Prev in Thread] Current Thread [Next in Thread>