[dns-operations] How much trouble am in in on May 5?

Jaap Akkerhuis jaap at NLnetLabs.nl
Thu May 6 06:30:06 UTC 2010


Doug,
    
If I understand you correctly,

    The root hints file has the following:
    .                        3600000  IN  NS    A.ROOT-SERVERS.NET.
    A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
    A.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:BA3E::2:30
    
    But 'dig @<a-m>.root-servers.net . ns produces the following for all but
    H, K, and L:
    ;; ANSWER SECTION:
    .                       518400  IN      NS      a.root-servers.net.
    ...
    ;; ADDITIONAL SECTION:
    a.root-servers.net.     3600000 IN      A       198.41.0.4

... you point to the diffrence in TTLs.
    
There is nothing new in this. This is the difference between NSD &
BIND.  It has been pointed out various root operators in the past.
If I remember correctly, NSD takes the TTL for root-servers.net and
not from the glue.

	jaap



More information about the dns-operations mailing list