[dns-operations] Root-servers returning TC=1 after 5 NXDOMAINS
Paul Hoffman
paul.hoffman at vpnc.org
Tue Feb 10 16:33:03 UTC 2015
On Feb 10, 2015, at 4:40 AM, bert hubert <bert.hubert at netherlabs.nl> wrote:
>
> On Tue, Feb 10, 2015 at 11:34:35AM +0000, ? Roy Arends wrote:
>>> We've since tried to curtail our queries to the root severly, but we still
>>> get TC=1 responses a lot, which slows down our resolution.
>>
>> Have you thought about running a local copy of the root zone?
>
> More frequently now, yes.
Please see <https://tools.ietf.org/html/draft-ietf-dnsop-root-loopback>, and comment on the DNSOP WG mailing list with any comments, questions, and suggestions.
> But I wonder if that is the intention.
The only people who can say what the intention of the F-root servers is the folks who run it.
> Is there an
> official policy on root-servers that allow AXFR yet?
No.
> Can one count on this
> working?
No, but you can add tooling to be sure that you are getting the most recent copy of the root in a timely fashion.
--Paul Hoffman
More information about the dns-operations
mailing list