[dns-operations] Acceptable query limit to root servers
andrew at vivalibre.com
Tue Jun 7 21:11:25 UTC 2016
Yes, thanks! I am a big fan of RIPE Atlas and have a probe on my home
On Tue, Jun 7, 2016 at 3:23 PM, Theodore Baschak <theodore at ciscodude.net>
> I found the following article pretty handy in terms of checking a
> locations connectivity:
> I've implemented it with great success. These hosts are explicitly on the
> internet *to* answer ICMP.
> Theodore Baschak - AS395089 - Hextet Systems
> On Jun 7, 2016, at 1:16 PM, Andrew White <andrew at vivalibre.com> wrote:
> Hi DRC,
> Thanks for your reply. If we have a root server on-net, then I still have
> the issue of not knowing whether my recursive server has working outbound
> connectivity; a local copy of the root then moves the issue to the TLD
> On Tue, Jun 7, 2016 at 12:32 PM, David Conrad <drc at virtualized.org> wrote:
>> On Jun 7, 2016, at 8:12 AM, Andrew White <andrew at vivalibre.com> wrote:
>> > We are considering adding some health checks on our recursive DNS
>> > We'd like to ensure each server has access to the root via a remote dig
>> at the recursive server. Specifically we are considering a query to an
>> effectively random top-level domain that should always be answered by an
>> NXDOMAIN by a root server.
>> > Given the large number of servers and our need to perform this check
>> fairly often, this could result in a large number of queries resulting in
>> NXDOMAIN to the root.
>> Not that it's likely your probes will go above the noise in the noise,
>> why not mirror the root (a la https://tools.ietf.org/rfc/rfc7706.txt)?
>> (speaking only for myself)
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> dns-jobs mailing list
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the dns-operations