[dns-operations] Root-servers returning TC=1 after 5 NXDOMAINS

Paul Hoffman paul.hoffman at vpnc.org
Tue Feb 10 16:33:03 UTC 2015


On Feb 10, 2015, at 4:40 AM, bert hubert <bert.hubert at netherlabs.nl> wrote:
> 
> On Tue, Feb 10, 2015 at 11:34:35AM +0000, ? Roy Arends wrote:
>>> We've since tried to curtail our queries to the root severly, but we still
>>> get TC=1 responses a lot, which slows down our resolution.
>> 
>> Have you thought about running a local copy of the root zone?
> 
> More frequently now, yes.

Please see <https://tools.ietf.org/html/draft-ietf-dnsop-root-loopback>, and comment on the DNSOP WG mailing list with any comments, questions, and suggestions.

> But I wonder if that is the intention.

The only people who can say what the intention of the F-root servers is the folks who run it.

> Is there an
> official policy on root-servers that allow AXFR yet?

No.

> Can one count on this
> working?

No, but you can add tooling to be sure that you are getting the most recent copy of the root in a timely fashion.

--Paul Hoffman



More information about the dns-operations mailing list