March 2014 - dns-wg - mailman.ripe.net

Announcing changes to DNSMON
by Vesna Manojlovic 09 Sep '14

09 Sep '14

Dear colleagues, The DNS Monitoring Service (DNSMON) has been providing a comprehensive, objective and up-to-date overview of the quality of various global and regional DNS operators' services since 2003. As announced last year by Kaveh Ranjbar in the RIPE Labs article, "Future of RIPE NCC Technical Services", we are in the process of integrating DNSMON within RIPE Atlas, using RIPE Atlas anchors as vantage points. The beta version of the new DNSMON will be available next week, when we will invite you all to try the new service and provide your feedback. In the meantime, we wanted to let you know about some of the changes in the new DNSMON service: New interactive graphs that will allow you to zoom in on interesting details, such as servers, vantage points, and time intervals. Support of TCP queries. Data delay for non-DNSMON users will not be replicated because the measurements performed by RIPE Atlas anchors for the new DNSMON are public measurements. Therefore, the results will also be publicly available. Server-side generated RRD graphs will not be migrated, as the client-side visualisations provide a comparable replacement. However, the existing service will keep working in parallel and decommissioning plans will be discussed with the community. In the meantime, the graphs and data from the old system will still be available. We will publish a RIPE Labs article with more details when the new service becomes available next week. We’re confident the new DNSMON will continue to meet your needs and hope you'll be pleased with the new features. Please stay tuned for more information. Kind regards, Vesna Manojlovic Senior Community Builder Measurements Community Building RIPE NCC

8 14

New on RIPE Labs: NTP Reflections
by Mirjam Kuehne 01 Apr '14

01 Apr '14

Dear colleagues, After the recent amplification attacks involving NTP servers, John Kristoff, a researcher with Team Cymru, kindly agreed to publish an analysis of the history and timeline leading up to the attacks. Please find his contribution on RIPE Labs: https://labs.ripe.net/Members/mirjam/ntp-reflections Kind regards, Mirjam Kuehne RIPE NCC

1 1

sub-/24 "delegation" [2014-01 New Policy Proposal (Abandoning the Minimum Allocation Size for IPv4)]
by Peter Koch 28 Mar '14

28 Mar '14

Dear DNS WG, people on this list might be interested in one aspect of the proposed policy <http://www.ripe.net/ripe/policies/proposals/2014-01>, <http://www.ripe.net/ripe/mail/archives/address-policy-wg/2014-March/008638.…>, when it comes to (sub-)allocations smaller than /24. Note that BCP10/RFC 2317 is not necessarily the or the only solution to the problem. Also, in the interest of keeping the policy discussion focused, we might want to strictly focus on the reverse mapping on this list and make sure some "sense of the room" as well as all other aspects get discussed on address-policy. -Peter (DNS WG co-chair) ----- Forwarded message from Tore Anderson <tore(a)fud.no> ----- From: Tore Anderson <tore(a)fud.no> To: Carsten Schiefner <ripe-wgs.cs(a)schiefner.de>, Rob Evans <rhe(a)nosc.ja.net> Cc: address-policy-wg(a)ripe.net Subject: Re: [address-policy-wg] 2014-01 New Policy Proposal (Abandoning the Minimum Allocation Size for IPv4) Date: Thu, 27 Mar 2014 09:34:20 +0100 In-Reply-To: <5333CABF.1070609(a)schiefner.de> * Carsten Schiefner > No, not really. I feel this being only loosely coupled at best. My > proposal enables the transfer of allocations of *all* sizes and the > conversion of PI assignments of *all* sizes into allocations. > > Whether sub-allocations can be made from *all* these (new) > allocations or "just" from those being at least a /24 appears as a > separate question to me. Even more so, as the the sub-allocation > mechanism has been applied or used very rarely only so far. > > And having the "one thing at a time" principle in mind: if this > impossibility is of concern to the community, then this should maybe > be handled by a separate policy (modification) proposal. Hi Carsten, I'm just of the opinion that removing one without the other leaves the policy in a counter-intuitive state. To me it would appear appropriate for a proposal titled «Abandoning the Minimum Allocation Size for IPv4» to remove all flavours of the minimum allocation size, including the one specific for sub-allocations. Besides, one of the two stated reasons for having the minimum sub-allocation size («[/24] is the smallest prefix length that can be reverse delegated») is quite simply false, given RFC 2317, and if we also accept the rationale for 2014-01, then we've essentially rejected the other reason too («allows for a reasonable number of small assignments to be made»). So I'd ask you to consider removing that paragraph as well before going to review phase. Note that since we're still in the discussion phase, doing so doesn't have to slow down the progress of the proposal, you can go straight to review with updated proposal (modifications at a later stage are much more cumbersome). Just my €.02...your proposal, your call. ;) Tore ----- End forwarded message -----

4 4

DNSMON beta update
by Chris Amin 26 Mar '14

26 Mar '14

Hi all, During the alpha phase of the new DNSMON, we sent periodic updates to the alpha testers about new features and bug fixes. For the public beta, we intend to continue in the same vein by announcing on this list, although hopefully we won't spam you too much now that the product is more mature. Since officially going "public" last week, we have made many changes to the widget. In particular gestures and feedback are drastically improved. Specifics include: * a new feature to group servers/anchors has been introduced. Now all the servers are grouped by hostname and all the anchors by country; * improved the time navigation and perception; Moving in time now provides real time feedback for a faster interaction; * the auto update function has been made more robust; * included instructions on how to include DNSMON in your own page (see "Embedding DNSMON in other pages" in the "About DNSMON menu"). URL reminder, in case you need one: https://atlas.ripe.net/dnsmon/ Regards, Chris Amin RIPE NCC

1 0

Relative response time graph
by Ben Choy 21 Mar '14

21 Mar '14

Hi all, Since this is beta testing I assume this list is where to report possible bug. Looking at Relative response time graph, the limit time check doesn't seems to work, the lower limit is ok, but the high limit doesn't show the correct colour. [hkirc] Benjamin Choy Project Manager (System & Network) Hong Kong Internet Registration Corporation Limited (HKIRC) http://www.hkirc.hk<http://www.hkirc.hk/> http://互聯網註冊.香港<http://互聯網註冊.香港/> Hong Kong Domain Name Registration Company Limited (HKDNR) http://www.hkdnr.hk<http://www.hkdnr.hk/> http://域名註冊.香港<http://域名註.香港/> Tel: +852 2319 1313 / Fax: +852 2319 2626 / Direct: +852 2319 3819 / Email: ben.choy(a)hkirc.hk [cid:image002.png@01CEAE2D.C3DA7B80]<http://www.hkirc.hk/> The information in this email is confidential and may be legally privileged. If you are not the intended recipient, please notify the sender immediately and then delete this e-mail entirely. You must not retain, copy, distribute or use this e-mail for any other purpose not intended by this email or disclose any of its content to others. The recipient should check the email and attachment for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. PROTECT OUR ENVIRONMENT - think before printing!

1 0

Global Vs local node data in www.root-servers.org
by Anurag Bhatia 17 Mar '14

17 Mar '14

Hello everyone! It seems like http://www.root-servers.org/index.html has been updated after quite sometime. Seems like data about local Vs global for many of root servers nodes is incorrect. E.g for Netnod i root all nodes are marked as Global nodes. As far as I understand it means that routes announced by these nodes are announced to transit links as well to make routes visible globally. Likely that is not case here right? Same seems with L root and few others. Do we have webmaster of the project on mailing list? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

8 9

Call for contributions: DNS-WG at RIPE68
by Peter Koch 08 Mar '14

08 Mar '14

Dear DNS WG, the RIPE meeting in Warsaw is 10 weeks away and we would like to compile a preliminary agenda soon. The DNS WG has been assigned the usual two slots, this time on Wed, 14 May, around lunch. That's 1100-1230 and 1400-1530 in proper figures. Please submit suggestions for presentations to <dns-wg-chairs(a)ripe.net>. There's a lot going on in the DNS world and whatever you or your colleagues have done, please consider sharing. We are definitely interested in operational matters, as well, so do not hesitate to submit the "tiny idea" that's explained in five to ten minutes. We will echange information with the OARC program committee for their (our) workshop taking place the weekend before RIPE68 to mitigate collisions (no pun). -Peter (for the wg co-chairs)

1 0

the seven people who hold the keys to worldwide internet security
by Jim Reid 04 Mar '14

04 Mar '14

Sigh. Just sigh. http://www.theguardian.com/technology/2014/feb/28/seven-people-keys-worldwi… Well at least the article has a photo of Rick Lamb in a suit and tie, so it's not all bad... :-)

10 20

Re: [dns-wg] the seven people who hold the keys to worldwide internet security
by Michele Neylon - Blacknight 03 Mar '14

03 Mar '14

Jim Yeah - I'm shocked that the expenses aren't covered already. I assumed that they were Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Domains http://www.blacknight.co/ http://blog.blacknight.com/ http://www.technology.ie Intl. +353 (0) 59 9183072 Locall: 1850 929 929 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 1 4811 763 Twitter: http://twitter.com/mneylon ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 -----Original Message----- From: Jim Reid [mailto:jim@rfc1035.com] Sent: Monday, March 3, 2014 2:59 PM To: Michele Neylon - Blacknight Cc: RIPE DNS WG Subject: Re: [dns-wg] the seven people who hold the keys to worldwide internet security On 3 Mar 2014, at 14:52, Michele Neylon - Blacknight <michele(a)blacknight.com> wrote: > Doesn't ICANN / IANA cover their expenses?? No. The TCRs must pay their own way or get their employer to pick up the travel costs. IMO this should change.

2 1

Re: [dns-wg] the seven people who hold the keys to worldwide internet security
by Michele Neylon - Blacknight 03 Mar '14

03 Mar '14

What? Doesn't ICANN / IANA cover their expenses?? -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Domains http://www.blacknight.co/ http://blog.blacknight.com/ http://www.technology.ie Intl. +353 (0) 59 9183072 Locall: 1850 929 929 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 1 4811 763 Twitter: http://twitter.com/mneylon ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845 -----Original Message----- From: dns-wg-bounces(a)ripe.net [mailto:dns-wg-bounces@ripe.net] On Behalf Of Lutz Donnerhacke Sent: Monday, March 3, 2014 2:40 PM To: dns-wg(a)ripe.net Subject: Re: [dns-wg] the seven people who hold the keys to worldwide internet security * Kim Davies wrote: > I actually think the story does a great job of making a deathly boring procedure interesting and accessible. It's not only boring. It's expensive, too. The participants have to pay for the fame.

3 2