RIPE NCC Authoritative DNS service degraded
Dear colleagues, The RIPE NCC's authoritative DNS infrastructure is experiencing a very high query rate at the moment. This query rate is more than our routers can handle, and as a result, responses from our name servers are sporadic. We are working on mitigating this denial-of-service event. Please check our service outages page for updates. http://www.ripe.net/lir-services/service-announcements Regards, Anand Buddhdev RIPE NCC
Anand, Anand Buddhdev schreef op 15-11-13 15:59:
The RIPE NCC's authoritative DNS infrastructure is experiencing a very high query rate at the moment.
Thank you for the heads-up. The information is not entirely clear to me. Is the K-root affected, or your 'ripe.net' authoritative servers? Thank you. -- Marco
On Fri, Nov 15, 2013 at 04:55:54PM +0100, Marco Davids (SIDN) <marco.davids@sidn.nl> wrote a message of 19 lines which said:
The information is not entirely clear to me. Is the K-root affected, or your 'ripe.net' authoritative servers?
K-root appears to work fine (seen from several points or from DNSMON). I confirm the problem for pri.authdns.ripe.net or other 193.0.9.0/24 machines (they seem OK, now).
On 2013-11-15 16:55, Marco Davids (SIDN) wrote: ...
The information is not entirely clear to me. Is the K-root affected, or your 'ripe.net' authoritative servers?
Hello Marco, It is not the K-Root. It is the authoritative DNS cluster that serves as primary for reverse DNS lookups for RIPE Region IP Resources as well as secondary for some ccTLDs. Latest news is that the attack is still ongoing but the rate seems to be decreased and we are working to clear out the rest. Just as a note the reverse zone has secondary on 4 different organisations, so it should not have visible effects for endusers. All the best, Kaveh. --- Kaveh Ranjbar, Chief Information Officer, RIPE NCC
Dear colleagues, On 11/15/13 5:33 PM, Kaveh Ranjbar wrote:
Latest news is that the attack is still ongoing but the rate seems to be decreased and we are working to clear out the rest.
Query rates are now back at normal levels and service has been restored. However we will continue to monitor the situation. Regards, Colin Petrie RIPE NCC
participants (5)
-
Anand Buddhdev
-
Colin Petrie
-
Kaveh Ranjbar
-
Marco Davids (SIDN)
-
Stephane Bortzmeyer