[as112-ops] uceb.org "A" queries on AS112

[Nick Hilliard]

Paul Vixie wrote:
> in general the problem with uceb is our responses, not the questions.
> if we had zone-selective blackholing, such that any query that didn't
> fit one of our zones was just dropped, would we care about uceb?

If you get a uceb.org or any other widely used rogue domain which decides 
to point NS records to blackhole-X.iana.org, and if the blackhole 
nameserver operator just drops the queries instead of answering them, then 
you end up with query retries spamming your server until each resolver dns 
request has timed out.  So although your nameserver query load will drop 
and your extra outbound traffic load will go to zero, this comes at the 
expense of multiplying your inbound query load by a noticeable factor.

You could hope that whatever domain administrator was running the rogue 
domain knew that unexpected queries to an AS112 server would be dropped, 
and that therefore it would be pointless to point your domain's NS records 
to the blackhole boxes.  But that would mean that you're depending on some 
expectation of clue on behalf of the rogue operator.

Nick