[dns-operations] g.root-servers.net UDP service

Stephan Lagerholm stlagerh at microsoft.com
Sun Apr 17 23:23:15 UTC 2016



> -----Original Message-----
> From: dns-operations [mailto:dns-operations-bounces at dns-oarc.net] On
> Behalf Of Jared Mauch
> Sent: Saturday, April 16, 2016 4:49 AM
> To: Stefan <netfortius at gmail.com>
> Cc: dns-operations at dns-oarc.net
> Subject: Re: [dns-operations] g.root-servers.net UDP service
> 
> On Fri, Apr 15, 2016 at 05:42:07AM -0500, Stefan wrote:
> > On Apr 15, 2016 5:35 AM, "Stefan" <netfortius at gmail.com> wrote:
> > >
> > > On Apr 15, 2016 5:05 AM, "Stephane Bortzmeyer" <bortzmeyer at nic.fr>
> wrote:
> > > >
> > > > On Fri, Apr 15, 2016 at 04:56:12AM -0500,  Stefan
> > > > <netfortius at gmail.com> wrote  a message of 53 lines which said:
> > > >
> > > > > Is there any way to estimate the actual impact, assuming "x"
> > > > > hours of malfunction?
> > > >
> > > > Probably nil, since the other twelve worked fine during this time.
> > >
> > > If it was still part of the anycast, wouldn't some systems still
> > > continue
> > hitting it?
> > >
> > > Thank you,
> > > ***Stefan
> >
> > Never mind me. Don't know what I was thinking. Forgot the set of
> > systems behind "g" is actually "the" anycast.
> 
> 	As long as one of the 13 root servers is reachable there would be no
> impact.

Although I agree that there was probably no impact during the short duration that G-root was down, it is not accurate that only one of the 13 root servers have to be available for it to be no impact. Most recursive resolvers give up after 3 or 4 attempts to reach a nameserver and returns SERVFAIL after that. SERVFAILs can be cached by downstream resolvers for up to 5 minutes (RFC 2308).



Thanks, Stephan



> 	- Jared
> 
> --
> Jared Mauch  | pgp key available via finger from jared at puck.nether.net
> clue++;      |
> https://na01.safelinks.protection.outlook.com/?url=http:%2f%2fpuck.nether.
> net%2f~jared%2f&data=01%7C01%7Cstlagerh%40microsoft.com%7C2eea496
> 1ae6945e541eb08d365eee09e%7C72f988bf86f141af91ab2d7cd011db47%7C
> 1&sdata=BCILBK4Te0uO8fmgYOZJPRTae7%2fmp21nQ6qZNeH9XYc%3d  My
> statements are only mine.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.dns
> -oarc.net%2fmailman%2flistinfo%2fdns-
> operations&data=01%7c01%7cstlagerh%40microsoft.com%7c2eea4961ae694
> 5e541eb08d365eee09e%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata
> =Cvq8xg2VQdRh10t5qSp9cPWORIrERJJPHGDUdGpvNoY%3d
> dns-jobs mailing list
> https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.dns
> -oarc.net%2fmailman%2flistinfo%2fdns-
> jobs&data=01%7c01%7cstlagerh%40microsoft.com%7c2eea4961ae6945e541
> eb08d365eee09e%7c72f988bf86f141af91ab2d7cd011db47%7c1&sdata=3zaK
> scGxkAkCUqJ9uGs25BqFaJhibSyL1I7yY55PseM%3d




More information about the dns-operations mailing list