[dns-operations] root-tld-changes

[Robert Edmonds]

Stephane Bortzmeyer wrote:
> On Fri, Aug 26, 2011 at 09:34:45PM +0000,
>  Paul Vixie <vixie at isc.org> wrote 
>  a message of 69 lines which said:
> 
> > receives notice of every change seen in the root zone.
> 
> It would be nice to have the *former* NS set in the outgoing message,
> because it is not obvious to see what changed.

i use DNSDB for that.

> Also, how "real-time" is it? SK changed its NS set two days ago in the
> root and I still did not receive a message. 

there is a small (~1 hour) processing delay of the actual data, and the
data itself comes from ISC Passive DNS.  there is of course the
possibility of delay between an NS change occurring and that change
being observed by one of our sensors, but it is somewhat difficult to
measure this, since we don't know when a change occurred, only when the
change was observed.

the SK change was observed here, on Mon, 29 Aug 2011 02:06:55 +0000:

https://lists.isc.org/pipermail/root-tld-changes/2011-August/000073.html

you were not subscribed until Mon, 29 Aug 2011 07:43:54 +0000 :)

> But I just received one for HK, despite the fact that it did not
> change for a long time.

you are referring to this alert:

https://lists.isc.org/pipermail/root-tld-changes/2011-August/000075.html

HK did just change.  the current NS is:

    ;;  bailiwick: hk.
    ;; first seen: 2011-08-31 08:22:00 -0000
    ;;  last seen: 2011-08-31 08:22:00 -0000
    hk. IN NS b.dns.tw.
    hk. IN NS hk-ns.pch.net.
    hk. IN NS z.hkirc.net.hk.
    hk. IN NS sec3.apnic.net.
    hk. IN NS ns2.cuhk.edu.hk.
    hk. IN NS ns1.hkirc.net.hk.
    hk. IN NS ns2.hkirc.net.hk.
    hk. IN NS adns1.berkeley.edu.

the previous one was:

    ;;  bailiwick: hk.
    ;; first seen: 2011-08-18 07:48:20 -0000
    ;;  last seen: 2011-08-31 04:52:42 -0000
    hk. IN NS b.dns.tw.
    hk. IN NS hk-ns.pch.net.
    hk. IN NS z.hkirc.net.hk.
    hk. IN NS sec3.apnic.net.
    hk. IN NS ns2.cuhk.edu.hk.
    hk. IN NS ns3.cuhk.edu.hk.
    hk. IN NS ns1.hkirc.net.hk.
    hk. IN NS ns2.hkirc.net.hk.
    hk. IN NS adns1.berkeley.edu.
    hk. IN NS adns2.berkeley.edu.

note that both of those NS RRsets are different from the one that is in
the root zone:

    ;;  bailiwick: .
    ;; first seen: 2010-06-24 03:11:32 -0000
    ;;  last seen: 2011-08-31 15:24:43 -0000
    ;; first seen in zone file: 2010-04-13 18:39:17 -0000
    ;;  last seen in zone file: 2011-08-30 03:41:09 -0000
    hk. IN NS b.dns.tw.
    hk. IN NS hk-ns.pch.net.
    hk. IN NS sec3.apnic.net.
    hk. IN NS ns2.cuhk.edu.hk.
    hk. IN NS ns3.cuhk.edu.hk.
    hk. IN NS ns1.hkirc.net.hk.
    hk. IN NS ns2.hkirc.net.hk.
    hk. IN NS adns1.berkeley.edu.
    hk. IN NS adns2.berkeley.edu.

-- 
Robert Edmonds
edmonds at isc.org