[dns-operations] Unplanned DLV zone outage on 2009-Apr-06

Hugo Salgado hsalgado at nic.cl
Tue Apr 14 19:59:57 UTC 2009


Lutz Donnerhacke wrote:
> * Samuel Weiler wrote:
>> If the world had multiple useful DLV registries
> 
> There are currently two of them calling themself "productive":
> 
> dlv.isc.org:
>  - aims to trustworthy: Validate on purpose
>  - designed to demonstrate the technology
>  - imports entries on explicit request and after a verification step
>  - resolved the open problems with key rollovers and transitions to
>    unsigned state in the last two months by introducting a web interface
>    
> dnssec.iks-jena.de:
>  - aims to fill the gaps in the hierarchy: Validate if possible
>  - designed to run on auto-pilot
>  - imports entries by crawling and user input
>  - maintains the entries using RFC 5011
> 
> If you are running a validating resolver, I strongly recommend you to slave
> the DLV you are referering to. All DLVs allow AXFR exactly for this purpose.
> 
> There are other DLVs out there, i.e. dlv.vulcano.cl.

hey! that's my sandbox zone. it's just a test, preparing myself
to bypass the unforeseeable .cl signed zone ;)

by the way, here's another production dlv repo:
  http://secspider.cs.ucla.edu/faq.html#dlv

hugo




More information about the dns-operations mailing list