Re: Root Server DDoS Attack: What The Media Did Not Tell You

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --On Saturday, November 23, 2002 23:02:15 -0500 "Michael Froomkin - U.Miami
School of Law" <froomkin@law.miami.edu> wrote:

>> The issue is less the size of the file than the problem of updating many 
>> copies of it reliably. The root server operators find it a challenge to
>> assure that even the modestly sized root zone file is correctly
>> distributed to all root servers accurately and in a timely fashion. 
> 
> Are there statistics on this?  Certainly the published info I've seen is
> more of the patting-self-on-back variety.  

There is a certain amount of work required to keep a large number of
servers in sync. Developements such as IXFR, Notify and TSIG all help in
speeding up convergence and assuring correctness of data. Still, if the
ship is to be run as tight as can be, one needs to perform a significant
admin and monitoring work to ensure that these functions actually function. 

I agree with Valdis that this is not IETF list material; it should be taken
to the operations community ASAP. 

Måns, running DNS servers for fun and public benefit. 
- -- 
Måns Nilsson    http://vvv.besserwisser.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (OpenBSD)

iD8DBQE94IaL02/pMZDM1cURAvfzAJ4iFmDxp60u+TCk/coD/MmtyC9CUwCbBsZt
svIxKF/bR1R7q7zG/A3f7WU=
=JV8U
-----END PGP SIGNATURE-----


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]