[as112-ops] Request to add home.arpa to AS112 repertoire
Aleksi Suhonen
as112-ops at trex.fi
Mon Dec 11 03:36:11 UTC 2017
Hi everyone,
On 12/06/2017 11:32 PM, Kim Davies wrote:
> In order to be fully functional, there must be a delegation of
> 'home.arpa.' in the '.arpa.' zone [RFC3172]. This delegation MUST
> NOT include a DS record, and MUST point to one or more black hole
> servers, for example 'blackhole-1.iana.org.' and 'blackhole-
> 2.iana.org.'. The reason that this delegation must not be signed is
> that not signing the delegation breaks the DNSSEC chain of trust,
I would advocate pointing to blackhole.as112.arpa instead, even without
the proper DNAME delegation. I would expect the operators of that
service to be abreast of current events... N'est-ce pas?
Can someone use their ring node access rights to repeat the home.arpa
readiness test @blackhole.as112.arpa?
Also: I noticed that Kim's ring node test did not specify IP address
family. I noticed this because the list contained two ring nodes where
our anycast node route should NOT be visible. Upon further investigation
it turned out that only IPv6 traffic from those nodes came to our node.
IPv4 traffic from those nodes went elsewhere.
BTW, does someone or something still use the names blackhole-3.iana.org
and blackhole-4.iana.org? Now that those addresses are incorporated in
blackholes 1 and 2, I'm wondering if they're still necessary.
Yours,
--
+358 44 9756548 / http://www.trex.fi/
Aleksi Suhonen / TREX Regional Exchanges Oy
You say "potato", I say "closest-exit."
More information about the as112-ops
mailing list