- dns-wg - mailman.ripe.net

New on RIPE Labs: The BGP Tuner: Intuitive Anycast Management
by Mirjam Kuehne 19 May '20

19 May '20

Dear colleagues, DNS operators have very few intelligent real-time tools that enable them to monitor their anycast services, for instance during a DDoS attack. In this post, Joao M. Ceron, Network Security Research Engineer at SIDN Labs, describes the challenges associated with measuring anycast services and propose a tool called the BGP Tuner. By using that open-source tool, operators can see in advance how changes in their BGP policies may impact the traffic load distribution over the anycast sites. Please find more details on RIPE Labs: https://labs.ripe.net/Members/joao_m_ceron/the-bgp-tuner-intuitive-anycast-… Kind regards, Mirjam Kühne RIPE NCC

1 0

OARC Online 32a Workshop, June 9th, Call for contributions
by Dave Knight 07 May '20

07 May '20

Hi all, OARC is hosting an online meeting on June 9th, 17:00-19:00 UTC. The Programme Committee are seeking contributions from the community. All DNS-related subjects are welcome, but we're particularly interested in content which is timely and operationally relevant in light of the COVID-19 pandemic. Suggestions for discussion topics would also be good. As the session is limited to 2 hours we'd like to encourage brevity, presentations ought to be no longer than 20 minutes, not including time for questions. Subject areas we are looking for include the following, but not limited to: * data on traffic growthx * operational scaling and availability challenges * infrastructure and skills bottlenecks * supply chain challenges * personnel & infrastructure protection * security/disinformation threats, public education * ideas that are helping * lessons learned * information from official channels * universal access inequities **Workshop Milestones:** * 7 May 2020 - Submissions open via Indico * 21 May 2020 - Deadline for submission (23:59 UTC) * 28 May 2020 - Initial Contribution list published * 02 Jun 2020 - Full agenda published * 04 Jun 2020 - Deadline for slideset submission * 09 Jun 2020 - OARC (online) 32a Workshop Details for presentation submission are published at: <https://www.dns-oarc.net/oarc32a> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC (online) 32a: * your talk will be live broadcast and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Dave Knight, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.

1 0

Correction: May 6th Online dns-wg session
by Dave Knight 05 May '20

05 May '20

Apologies, please disregard my previous message, the dns-wg online session is on Wednesday May 6th, not May 7th. This is a reminder for the dns-wg online session we will have on Wednesday May 6th at 15:30 CEST. Here's the agenda and Zoom details for the upcoming session 6 May: RIPE DNS Working Group - May 6, 2020 3:30 PM CEST (Amsterdam) Agenda: Effect of a global pandemic on DNS utilization Steve DeJong, Neustar COVID-19 influence on resolver traffic Peter van Dijk, PowerDNS Pieter Lexis, PowerDNS Join Zoom Meeting: https://ripe.zoom.us/j/92457259361?pwd=cElZU2dWTjB0N3JYaWVJZlc2T1BhQT09 Meeting ID: 924 5725 9361 Password: 379388 One tap mobile: +31207947345,,92457259361# Netherlands +31202410288,,92457259361# Netherlands Dial by your location +31 20 794 7345 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +1 301 715 8592 US +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US Meeting ID: 924 5725 9361 Find your local number: https://ripe.zoom.us/u/ahMe5oL66 Join by SIP 92457259361(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong China) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 924 5725 9361 Password: 379388 This is a RIPE community meeting the all RIPE meeting participation rules apply, including the RIPE code of conduct. Future sessions: May 27, 2020 at 3:30 PM CEST (Amsterdam) Jun 17, 2020 at 3:30 PM CEST (Amsterdam) Call for contributions: We are currently seeking content for the June 17 meeting and beyond. Presentations and suggestions for discussion topics are always welcome, recent operational experiences and observations are particularly encouraged. Please send your ideas to the DNS WG Chairs at <dns-wg-chair(a)ripe.net>. Kind regards, Dave Knight, for the DNS WG chairs.

1 0

Reminder: May 7th Online dns-wg session
by Dave Knight 05 May '20

05 May '20

This is a reminder for the dns-wg online session we will have on Wednesday May 7th at 15:30 CEST. Here's the agenda and Zoom details for the upcoming session 6 May: RIPE DNS Working Group - May 6, 2020 3:30 PM CEST (Amsterdam) Agenda: Effect of a global pandemic on DNS utilization Steve DeJong, Neustar COVID-19 influence on resolver traffic Peter van Dijk, PowerDNS Pieter Lexis, PowerDNS Join Zoom Meeting: https://ripe.zoom.us/j/92457259361?pwd=cElZU2dWTjB0N3JYaWVJZlc2T1BhQT09 Meeting ID: 924 5725 9361 Password: 379388 One tap mobile: +31207947345,,92457259361# Netherlands +31202410288,,92457259361# Netherlands Dial by your location +31 20 794 7345 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +1 301 715 8592 US +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US Meeting ID: 924 5725 9361 Find your local number: https://ripe.zoom.us/u/ahMe5oL66 Join by SIP 92457259361(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong China) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 924 5725 9361 Password: 379388 This is a RIPE community meeting the all RIPE meeting participation rules apply, including the RIPE code of conduct. Future sessions: May 27, 2020 at 3:30 PM CEST (Amsterdam) Jun 17, 2020 at 3:30 PM CEST (Amsterdam) Call for contributions: We are currently seeking content for the June 17 meeting and beyond. Presentations and suggestions for discussion topics are always welcome, recent operational experiences and observations are particularly encouraged. Please send your ideas to the DNS WG Chairs at <dns-wg-chair(a)ripe.net>. Kind regards, Dave Knight, for the DNS WG chairs.

1 0

RIPE Labs article about the first RIPE DNS Working Group virtual meeting
by Shane Kerr 29 Apr '20

29 Apr '20

Fellow DNS folks, I wrote a short article for RIPE Labs covering both the first RIPE DNS Working Group virtual meeting and also our plans for more going forward. https://labs.ripe.net/Members/shane/dns-is-virtually-awsome Cheers, -- Shane

1 0

Upcoming dns-wg online sessions
by Dave Knight 27 Apr '20

27 Apr '20

Colleagues, Following a successful experiment on April 15th we're going to continue running regular online dns-wg sessions. The plan is to have a one hour session every three weeks for as long as people are interested in contributing. Here's the agenda and Zoom details for the upcoming session 6 May: RIPE DNS Working Group - May 6, 2020 3:30 PM CEST (Amsterdam) Agenda: Effect of a global pandemic on DNS utilization Steve DeJong, Neustar COVID-19 influence on resolver traffic Peter van Dijk, PowerDNS Pieter Lexis, PowerDNS Join Zoom Meeting: https://ripe.zoom.us/j/92457259361?pwd=cElZU2dWTjB0N3JYaWVJZlc2T1BhQT09 Meeting ID: 924 5725 9361 Password: 379388 One tap mobile: +31207947345,,92457259361# Netherlands +31202410288,,92457259361# Netherlands Dial by your location +31 20 794 7345 Netherlands +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +1 301 715 8592 US +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US Meeting ID: 924 5725 9361 Find your local number: https://ripe.zoom.us/u/ahMe5oL66 Join by SIP 92457259361(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong China) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 924 5725 9361 Password: 379388 This is a RIPE community meeting the all RIPE meeting participation rules apply, including the RIPE code of conduct. Future sessions: May 27, 2020 at 3:30 PM CEST (Amsterdam) Jun 17, 2020 at 3:30 PM CEST (Amsterdam) Call for contributions: We are currently seeking content for the June 17 meeting and beyond. Presentations and suggestions for discussion topics are always welcome, recent operational experiences and observations are particularly encouraged. Please send your ideas to the DNS WG Chairs at <dns-wg-chair(a)ripe.net>. Kind regards, Dave Knight, for the DNS WG chairs.

1 0

Reminder - DNS WG virtual meeting tomorrow (Apr 15th)
by Joao Luis Silva Damas 14 Apr '20

14 Apr '20

Just a quick reminder for our virtual meeting tomorrow April 15th. The session topic is “Keeping the root zone signed when standard plans won’t work”. We will count with a presentation from Kim Davies of PTI/ICANN and will discuss the situation after (and possibly during) this presentation. ============================ DNS Working Group - Meeting Wednesday, 15 April⋅15:00 – 16:30 CEST Join Zoom Meeting https://ripe.zoom.us/j/912876520?pwd=MXlGYlVoZU5WcERSanEvNlZMWGEzZz09 <https://ripe.zoom.us/j/912876520?pwd=MXlGYlVoZU5WcERSanEvNlZMWGEzZz09> Meeting ID: 912 876 520 Password: 033462 One tap mobile +31202410288,,912876520# Netherlands +31207940854,,912876520# Netherlands Dial by your location +31 20 241 0288 Netherlands +31 20 794 0854 Netherlands +31 20 794 6519 Netherlands +31 20 794 6520 Netherlands +31 20 794 7345 Netherlands +1 312 626 6799 US (Chicago) +1 346 248 7799 US (Houston) +1 646 558 8656 US (New York) +1 669 900 9128 US (San Jose) +1 253 215 8782 US +1 301 715 8592 US Meeting ID: 912 876 520 Find your local number: https://ripe.zoom.us/u/ahMe5oL66 <https://ripe.zoom.us/u/ahMe5oL66> Join by SIP 912876520(a)zoomcrc.com <mailto:912876520@zoomcrc.com> Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (EMEA) 103.122.166.55 (Australia) 209.9.211.110 (Hong Kong) 64.211.144.160 (Brazil) 69.174.57.160 (Canada) 207.226.132.110 (Japan) Meeting ID: 912 876 520 Password: 033462 Regards, Joao Damas on behalf of the DNS WG chairs

1 0

DANE goes mainstream?
by Jim Reid 09 Apr '20

09 Apr '20

Microsoft has announced Office 365 Exchange Online is going to support DNSSEC and DANE: https://techcommunity.microsoft.com/t5/exchange-team-blog/support-of-dane-a…

4 4

RIPE DNS WG meeting - April 15th
by Joao Luis Silva Damas 08 Apr '20

08 Apr '20

Dear all, As you may know RIPE 80 is going “virtual”, or online. The DNS WG chairs will testing a slightly different format, with online sessions focusing on DNS topics throughout the next months. The first session will take place on April 15th (Wednesday) at 15:00 CEST, using Zoom, provided by the RIPE NCC. The session topic is “Keeping the root zone signed when standard plans won’t work”. We will count with a presentation from Kim Davies of PTI/ICANN. We will provide the URL for the meeting as soon as possible, so stay tuned. Needless to say, as this is a RIPE community meeting the all RIPE meeting participation rules apply, including the RIPE code of conduct. Hoping to meet you online soon, Joao Damas for the DNS WG chairs.

1 1

Contingency plans for the next Root KSK Ceremony
by Jim Reid 26 Mar '20

26 Mar '20

FYI. If you have comments or questions, please contact Kim or one of the TCRs. > Begin forwarded message: > > From: Kim Davies <kim.davies(a)iana.org> > Subject: [RZERC] Contingency plans for the next Root KSK Ceremony > Date: 26 March 2020 at 01:52:29 GMT > To: "rzerc(a)icann.org" <rzerc(a)icann.org> > > Colleagues, > > (Feel free to circulate within your respective groups as you see fit.) > > The IANA team, and the broader ICANN organization, have been giving significant thought to the Coronavirus pandemic and its impact on root zone KSK operations. Managing the KSK is centred on conducting "key signing ceremonies", where trusted community representatives (TCRs) attend from around the world to witness utilization of the root zone KSK private key. This approach seeks to engender trust in the broader community that the key has not been compromised, in addition to more typical controls such as third-party auditing. > > In light of world events we have developed contingency plans around how to hold key ceremonies in the short term. To that end, we identified a graduated set of options, in summary: > Hold the next ceremony as planned on April 23, with a quorum of participants globally. > Hold the next ceremony on a different date using only US-based TCRs. > Hold the next ceremony using our disaster recovery procedure, which provides for a staff-only ceremony (i.e. no TCRs would be physically present). > In general, our goal has been to navigate from Option 1, and if that is not possible, Option 2, and so on. However, at this time, our focus is on developing a plan around Option 3. > > The ceremony is currently scheduled unusually early in the quarter (it is typically held in May), and needs to be held to generate signatures that will be needed in production for July. Our contingency plan is comprised of: > > Holding the ceremony with a bare minimum of staff (approximately 6); > Using 3 TCRs’ credentials, either by having their access key transferred to us in a secure manner in advance of the ceremony, or by drilling the safety deposit box that holds their secure elements. > Holding the ceremony under typical audit coverage, allowing for remote witnessing of events by all, plus providing additional opportunities for TCRs to stay involved in the process remotely. > Signing key materials to cover one or more subsequent quarters, to provide relief from the need to necessarily hold ceremonies later in 2020 if circumstances disallow it. (The additional signatures would be withheld securely until they are needed.) > Our key management facilities were designed with the disaster recovery capability of performing staff-only ceremonies in mind, but this is a significant shift from normal operations and we want to promote broader community awareness of this work. Those directly involved in key ceremonies - the trusted community representatives, our vendors and auditors - have been consulted and are broadly supportive of this effort. > > Should there be any specific feedback you would like to share with our team, please let me know or respond to this thread. We will take it into consideration as we finalize our plans. > Thank you for your support.

1 0