[dns-operations] Acceptable query limit to root servers

Andrew White andrew at vivalibre.com
Tue Jun 7 18:16:04 UTC 2016

Hi Duane,

The concern is that a routing issue or other connectivity problem, likely
inside our network, may make recursion impossible, and we'd like the server
to stop participating in our Anycast recursive platform if such an issue
exists. To my knowledge, we've never failed to get a valid answer from a
root server in any other case.


On Tue, Jun 7, 2016 at 12:57 PM, Wessels, Duane <dwessels at verisign.com>

> > On Jun 7, 2016, at 8:12 AM, Andrew White <andrew at vivalibre.com> wrote:
> >
> >
> > We are considering adding some health checks on our recursive DNS
> platform.
> >
> > We'd like to ensure each server has access to the root via a remote dig
> at the recursive server. Specifically we are considering a query to an
> effectively random top-level domain that should always be answered by an
> NXDOMAIN by a root server.
> Out of curiosity, what is the motivation for such monitoring?  Have there
> been times where you apparently did not get responses from a root server?
> DW
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160607/f626fbc6/attachment.html>

More information about the dns-operations mailing list