[dns-operations] Domain Name System without Root Servers

[Tony Finch]

Daniel Karrenberg <dfk at ripe.net> wrote:
>
> Methinks we could do even better by just loading the whole root zone
> into resolvers.

I was interested by Petr Špaček's presentation on RFC 7706 root slaving
vs. RFC 8198 negative answer synthesis.

https://indico.dns-oarc.net/event/27/session/3/contribution/7/material/slides/0.pdf

One of the things he discusses is actively pre-populating the cache, which
made me wonder what effect Hammer Time early refresh has. I don't know if
the Petr's resolvers were configured to do this...

https://tools.ietf.org/html/draft-wkumari-dnsop-hammer

> As this paper shows nicely lameness will be very limited even if a
> resolver operator chooses to do this only every couple of weeks.

Hmm, I get the impression from https://twitter.com/diffroot that TLDs
flip DS records fairly frequently - in the last two weeks,

.kia
.infiniti
.nissan
.ru
.hyundai
.chloe

and a couple with different rollover timing,

.mil (5 day overlap)
.lat (16 day overlap)

so it looks to me like you would need frequent updates to avoid bogosity,
unless TLDs commit to following RFC 5011 timing constraints.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Hebrides, Bailey, Fair Isle, Faeroes: West or southwest 7 to severe gale 9.
Very rough, occasionally high. Squally showers. Moderate or good.