http:// 1 brett carr oarc, november 2006, redmond ripe ncc dns services overview brett carr manager,...
Post on 27-Mar-2015
218 Views
Preview:
TRANSCRIPT
1Brett Carr OARC, November 2006, Redmond http://www.ripe.net
RIPE NCC DNS Services Overview
Brett CarrManager, DNS Services
RIPE NCC
OARC, November 2006, Redmond http://www.ripe.net 2Brett Carr
Overview
• Introduction
• Reverse/ccTLD Server Infrastructure
• K-Root
• DNSSEC
• ENUM
• Future
OARC, November 2006, Redmond http://www.ripe.net 3Brett Carr
Reverse/ccTLD Server Infrastructure
• 6 Servers involved- dnsadmin (dnssigner)- ns-pri.ripe.net- ns-sec.ripe.net- ns-tld.ripe.net- ns.ripe.net
OARC, November 2006, Redmond http://www.ripe.net 4Brett Carr
Reverse/ccTLD Server Infrastructure
OARC, November 2006, Redmond http://www.ripe.net 5Brett Carr
K-Root
• Anycasted across 17 Locations
• 5 Global Nodes
• 12 Local Nodes
• Hardware and OS Upgrades
• Considering further deployments
OARC, November 2006, Redmond http://www.ripe.net 6Brett Carr
K-Root
OARC, November 2006, Redmond http://www.ripe.net 7Brett Carr
DNSSEC
• Started rollout on non critical zones Oct 2005
• DS Records into reverse via our provisioning system
• Total primary zones 113
• Signed zones 72
• NS Records 521811 (225432 sets)
• DS Records 61
- RIPE NCC 14
- Other 47
Statistics as of October 2006
OARC, November 2006, Redmond http://www.ripe.net 8Brett Carr
ENUM
• Tasked by IAB to operate the e164.arpa domain
• Receive delegation requests
• Review technical DNS quality of request
• Announce request to public and ITU
• When no objections received perform delegation
• e164.arpa operated at no charge to all
• Technically almost identical to in-addr.arpa/ip6.arpa
OARC, November 2006, Redmond http://www.ripe.net 9Brett Carr
Queries per e164.arpa Nameserver – Aug 06
ns-pri.ripe.net 391084
ns0.verio.net 387080
tinnie.arin.net 382847
cnnic.net.cn 324755
sec3.apnic.net 255726
sunic.sunet.se 152300
Total 1893792
42 queries per minute
0
50000
100000
150000
200000
250000
300000
350000
400000
ns0.v
erio
.net
sunic
.sun
et.s
etin
niear
in.n
et
e164
-arp
a.cn
nic.n
et.c
nns-
pri.rip
e.net
sec3
.apn
ic.n
et
OARC, November 2006, Redmond http://www.ripe.net 10Brett Carr
Queries per delegation – August 2006
• Top 10 received at ns-pri.ripe.net
• Average 8.76 queries per minute
• 9.4.e164.arpa averages 0.74 queries per minute
0%
1%
2%
3%
4%
5%
6%
7%
8%
9%
DE AT
NANP IT CH NL FR UK PL SE
OARC, November 2006, Redmond http://www.ripe.net 11Brett Carr
Invalid Queries
• Total invalid queries 25922 (6.6%)
• Queries prefixed with 0 8918
• Queries prefixed with 0.0 4966
• Rest:Missing separator 3100.e164.arpa Strange prefixes 4.4.+.e164.arpaIncorrect prefixes 1.8.8.e164.arpa
• Probably misconfigured equipment
OARC, November 2006, Redmond http://www.ripe.net 12Brett Carr
Future
• New team formed 01/11/2006
• DNS statistics improvements (DSC)
• Hardware and OS upgrades/renewals
• NSD/BIND 9.40 testing
• Lameness checking/reporting
13Brett Carr OARC, November 2006, Redmond http://www.ripe.net
Questions?
top related