Hi, There are some problems/errors/omissions in RIPE-210 which are causing me, and some of the ISPs trying to implement the recommendations, some problems. It seems that the choice has been made to include X.root-servers.net *and* X.gtld-servers.net, but I can find no reference to these in the description of the example configuration in S2.3. It would be good to do this so that people know what they are dampening. Also, an expansion of S1.6 would achieve this quite well. It is also worth noting that the "root networks" change from time to time, and that all ISPs should check that these network announcements are still current before implementing the recommendations. You'll be surprised how many people simply cut and paste the configuration without checking the detail. Some problems: - S1.6 refers to "probably" removing the A, D and H servers as they are on /16 prefix announcements. But A is on a /24 announcement. (Is there evidence to suggest that a /16 flaps less than a /24 - the analysis I've done in AsiaPac doesn't prove anything conclusively.) - In S2.3, B, C, D, H, K, L and M are omitted. With no explanation as to why. They are not all on /16 prefix announcements. - In S2.3, A&J network is listed twice - why? - In S2.3, if including the gtld servers is the goal, G.gtld and I.gtld are omitted. I.gtld is announced on a /24 network. The list I have been recommending to ISPs in AsiaPac for about the last year is below: ip prefix-list rootns permit 198.41.0.0/24 ! A & J ip prefix-list rootns permit 128.9.0.0/16 ! B ip prefix-list rootns permit 192.33.4.0/24 ! C ip prefix-list rootns permit 128.8.0.0/16 ! D ip prefix-list rootns permit 192.203.230.0/24 ! E ip prefix-list rootns permit 192.5.4.0/23 ! F ip prefix-list rootns permit 192.112.36.0/24 ! G ip prefix-list rootns permit 128.63.0.0/16 ! H ip prefix-list rootns permit 192.36.148.0/24 ! I ip prefix-list rootns permit 193.0.14.0/24 ! K ip prefix-list rootns permit 198.32.64.0/24 ! L ip prefix-list rootns permit 202.12.27.0/24 ! M which is basically the current list of roots and their corresponding prefixes as announced to the Internet. If the decision is to include X.gtld-servers.net, the list could be augmented as: ip prefix-list gltdns permit 198.41.3.0/24 ! A ip prefix-list gtldns permit 205.188.128.0/17 ! C ip prefix-list gtldns permit 198.17.208.0/24 ! F ip prefix-list gtldns permit 192.215.0.0/16 ! G ip prefix-list gtldns permit 216.33.64.0/19 ! H ip prefix-list gtldns permit 192.36.144.0/24 ! I ip prefix-list gtldns permit 198.41.0.0/24 ! J ip prefix-list gtldns permit 195.8.96.0/19 ! K ip prefix-list gtldns permit 210.176.0.0/16 ! M but I'd probably list them under a separate route-map section of Golden Networks. I hope the above can be incorporated in RIPE-210 so that accuracy is achieved. best wishes! philip -- -------------------------------------------------------- Philip Smith ph: +61 7 3238 8200 Consulting Engineering, Office of the CTO, Cisco Systems --------------------------------------------------------