[dns-operations] All root servers available over IPv6?!

Robert Edmonds edmonds at mycre.ws
Thu Nov 17 20:41:49 UTC 2016


Shane Kerr wrote:
> $ for n in a b c d e f g h i j k l m; do host -t aaaa $n.root-servers.net; done
> a.root-servers.net has IPv6 address 2001:503:ba3e::2:30
> b.root-servers.net has IPv6 address 2001:500:84::b
> c.root-servers.net has IPv6 address 2001:500:2::c
> d.root-servers.net has IPv6 address 2001:500:2d::d
> e.root-servers.net has IPv6 address 2001:500:a8::e
> f.root-servers.net has IPv6 address 2001:500:2f::f
> g.root-servers.net has IPv6 address 2001:500:12::d0d
> h.root-servers.net has IPv6 address 2001:500:1::53
> i.root-servers.net has IPv6 address 2001:7fe::53
> j.root-servers.net has IPv6 address 2001:503:c27::2:30
> k.root-servers.net has IPv6 address 2001:7fd::1
> l.root-servers.net has IPv6 address 2001:500:9f::42
> m.root-servers.net has IPv6 address 2001:dc3::35

Just for fun I checked the corresponding PTRs. 12/13 came back with the
same owner name as the AAAA record, except for E-Root:

    ; <<>> DiG 9.10.3 <<>> @8.8.8.8 -x 2001:500:a8::e
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 12592
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 512
    ;; QUESTION SECTION:
    ;e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. IN PTR

    ;; Query time: 10 msec
    ;; SERVER: 8.8.8.8#53(8.8.8.8)
    ;; WHEN: Thu Nov 17 15:32:03 EST 2016
    ;; MSG SIZE  rcvd: 101

(Google)

    ; <<>> DiG 9.10.3 <<>> @184.105.193.73 -x 2001:500:a8::e
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60123
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;e.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. IN PTR

    ;; Query time: 1107 msec
    ;; SERVER: 184.105.193.73#53(184.105.193.73)
    ;; WHEN: Thu Nov 17 15:32:32 EST 2016
    ;; MSG SIZE  rcvd: 101

(OARC ODVR)

It looks like these nameservers don't respond to any queries:

    8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 86400	IN NS	tyson.eroot.nasa.gov.
    8.a.0.0.0.0.5.0.1.0.0.2.ip6.arpa. 86400	IN NS	sagan.eroot.nasa.gov.
    ;; Received 155 bytes from 199.71.0.63#53(x.arin.net) in 78 ms

-- 
Robert Edmonds



More information about the dns-operations mailing list