ietf
[Top] [All Lists]

Re: [IGOVAP]Re:another discussion about management of root server

2005-01-19 20:02:06
Why so many people are interested in DNS governance?

Because they hardly know how it works and assume a lot of things which are wrong!

I would be curious to know if any of these people on the list you gave ever attended an ICANN or IETF meeting. Have you ever been to such meeting.

Do you know there is a program to put root servers in africa (and the rest of the world). If your country needs a root server it can be easily installed for about USD30,000 all inclusive. You need some bandwidth too. Nobody will oppose it. For instance there are root-servers in Australia (20million of people) and New Zealand(4Million).

About security, DNS and DNS peering. It is all discussed on the IETF (from a technical point of view) and on ICANN from a management point of view. If you want to have a peering DNS, then we are in the wrong forum to discuss it, because you need technical people that understand the Internet protocol to design them. You can give some broad guidelines but someobdy has to implement it. Please ask again this question on the IETF mailing list and you will get your answers.

If you want to design such thing, as I said the IETF accept any submission. What makes any submission a standard, it is because it is adopted by all. You will have therefore to do an implementation. You can play with your root-server, I don't think somebody will stop you, and if it looks great than somebody will use your software or take your specifications to do the same.

At nealy every IETF meeting there is a DNS security talk where new security concepts are discussed. Security is complex, difficult and need specialists. The DNS is fairly reliable, I have no numbers, but I would be curious if someone could give some reliability figures of their root-servers (uptime) and how many incidents happened with the root servers.

Saying all that, it would be a mistake by IETF and ICANN not to be represented at these meeting, so that they can advocate and teach people how things work. The main problem of technical people is that as you say they are not patient, especially if you have not done your home work. I will try to be patient ;)

I do hope, I'm directing you to some areas where you will find some answers. I copy this e-mail to the IETF so they can join us in this interesting discussion.

I take also the opportunity to add something else on another subject:
ICANN, IETF, APNIC and other meetings are really easy to attend, they are video casted, audio casted and even text casted in chat/forum like channels. You can easily participate from the confort of your home. I did it a couple of times. This is not true with any of the WSIS related meeting, where you need to sit in the room, with the proper accreditation. I think in some sessions, non-representatives of governments were asked to leave the room.

Cheers.

xie wei wrote:

Why the people in this forum are so impatient? As you
said if the DNS system of Internet is perfect and
unassailable, why WGIG listed it on the table
“Inventory of Public Policy Issues”, and lot of
members of WGIG have interested in it? Please look at
the following table, it’s from the WGIG.
-------------------------------------------------------

Equitable Distribution of Resources | Total number of members willing to consider contributing text |
Names   |Lead/List|
------------------------------------------------------
                
Administration of Internet names and IP addresses |     18
|          Kleinwächter, Sakamaki,    Bicalho, Jensen,
Al-darrab,    Hassan, Sarr, Hu, Bertola,    Esmat,
Cheon, Esseboom, Zangl, Echeberria, Zens, Pisanty, Drake, Sha’ban | Jensen[wgig-ip] |
------------------------------------------------------
Administration of root server system    | 15       |
Kleinwächter, Sakamaki,       Bicalho, Jensen,
Al-darrab, Miller, Hu, Bertola, Cheon, Esseboom, Zangl, Echeberria, Zens, Drake, Sha’ban | Miller[wgig-root]|
-------------------------------------------------------

Well, in fact the reason I sent the mail to this forum
yesterday, is not to censure the ICANN or APNIC or any
others. On the contrary, I greatly appreciate their
efforts for the efficiency, reliability and
speed of the DNS.
Why they do so much work on it? Maybe, they also
consider that the number of the root server was not
enough and the spreading the root server over the
Internet is a necessary.
I know that all the efforts they made are available
now. But I think adding the mirror should not the only
solution for the problems of DNS. There are still
further approaches to address the security issue and
performance issue of the DNS.

For example, to establish a logical peer network
between each ccTLD server and gTLD server while the
tree structure is retained within ccTLD and gTLD
themselves. The domain name resolution can be done
through the peer network between ccTLD and gTLD
servers instead of the root server.
I am not very sure about the feasibility of this
method. and I am here waiting the “ban
zhuan”(Chinese, means comment).



--
Franck Martin
ICT Specialist
franck(_at_)sopac(_dot_)org
SOPAC, Fiji
GPG Key fingerprint = 44A4 8AE4 392A 3B92 FDF9  D9C6 BE79 9E60 81D9 1320
"Toute connaissance est une reponse a une question" G.Bachelard

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf
<Prev in Thread] Current Thread [Next in Thread>