Re: Impact from rfc1918 leaks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> | I don't think another 10% load on the root nameservers is a huge  
> deal,
> | so I wouldn't use the word "harmful" but I guess this is a special  
> case
>
> Again. You'll have to ask the operators of the root-zone if they
> consider 11-14% a big deal. Maybe some of them are listening....

Well we as root-server operator will have to take the costs of  
upgrading to handle the total query volume....10-15% is then quite a  
lot.

>
>
> | I read a report that only 2% of the hits on the root servers is both
> | legitimate and useful anyway.
>
> ~From the presentation I refer to which unfortunately is in Swedish but
> you can probably read the numbers anyway... :
>
> http://www.iis.se/Internetdagarna/2003/23-robust-dns/id03-23-lars- 
> johanliman.pdf
>
> this is clearly not the case. The rfc1918-queries consistute the bulk
> of bad queries ("DUMMA frågor" on page 4 of the presentation). I must
> however confess ignorance as to what queries are 'useful'. Presumably
> even the rfc1918-queries were deemed useful for someone since they
> were sent in the first place.

The 2% figure I think was from an analysis of f.root-servers.net.  
i.root-servers.net seems to be seeing more "valid" queries than f. I  
guess these figures are different from each server. I think Liman said  
that we where seeing 25% garbage in total. I think queries from and  
about RFC1918 addresses was around 20% of those. It would be fun to see  
what percentage of the Ipv6 related queries that are for site-local  
addresses...

- - kurtis -

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQA/AwUBP4f0L6arNKXTPFCVEQLr0wCfQ98s0IuFlle09q5Ceu41dzxY0ncAoMde
WOPfR47J5gKXQbD85232h5YK
=uMUn
-----END PGP SIGNATURE-----




[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]