[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: Pekka Savola <pekkas@netcore.fi>
Cc: Randy Bush <randy@psg.com>, DNS Operations <dnsop@cafax.se>
From: David Conrad <david.conrad@nominum.com>
Date: Wed, 23 Oct 2002 01:19:37 -0700
In-Reply-To: <Pine.LNX.4.44.0210231101460.27150-100000@netcore.fi>
Sender: owner-dnsop@cafax.se
User-Agent: Microsoft-Entourage/10.1.0.2006
Subject: Re: anycast

On 10/23/02 1:03 AM, "Pekka Savola" <pekkas@netcore.fi> wrote:
> Having almost all of your customers' DNS lookups take 10 ms instead of 100
> or 200 ms may also be of some value.

This isn't how the DNS works.  See Sean Donelan's comments on the data CAIDA
has collected.  It would improve performance for the first querier at a site
(or some level of aggregation, depends on the caching infrastructure, of
course) every 8 days or so.

> Definitely seems interesting to me, even though issues with keeping data
> up-to-date are of critical importance here.

There is nothing stopping any ISP from doing what Randy suggested today,
particularly given several of the root servers allow zone transfer.
Similarly, there is nothing stopping any ISP from advertising addresses for
(say) Google and making sure only government approved pages are returned.

To borrow a term from Mr. Bush, it would be "prudent" to wait for DNSSEC
signing of the root before going down the "pretend to be a root server"
road.

Rgds,
-drc

#----------------------------------------------------------------------
# To unsubscripbe, send a message to <dnsop-request@cafax.se>.

Home | Date list | Subject list