[as112-ops] hidden secondary for iana.org?

[Peter Koch]

Hi Aleksi,

> I see queries for prisoner.iana.org and blackhole-#.iana.org quite often 
> on our AS112 server and while it's not authoritative for that zone, I 
> don't see any reason why it couldn't be authoritative.

the original setup suggested to do this, also to fill the additional
section in referrals right away.  Due to the nature of the traffic,
there are very few referrals, though, and modern resolver logic would
not accept this information (for iana.org) from the servers authoritative
for {10,...}.in-addr.arpa.  The latest Internet-Draft on the topic
<draft-ietf-dnsop-as112-ops-02.txt> "AS112 Nameserver Operations"
also doesn't mention slaving iana.org anymore.

Our AS112 instance sees quite a number of queries for prisoner, far less for
blackhole-[12].

> Apart from IANA's willingness to share access to such hidden secondaries 
> of course.

Old setup hints might still show the hidden address, but I doubt this is
well scalable and maintainable in a loosely coupled cloud.

-Peter