[dns-operations] Akamai's missing SOA bug fixed

[Ralf Weber]

Moin!

On 4 Oct 2017, at 19:56, David C Lawrence wrote:

> On Saturday at the DNS-OARC meeting, Ralf Weber of Nominum gave a very
> interesting presentation on cache performance. His slides are here:
>
> https://indico.dns-oarc.net/event/27/session/5/contribution/5/material/slides/0.pdf
>
> One of his observations was that he was getting a surprisingly high
> number of cache misses for Akamai names.  He eventually tracked this
> down to uncacheable negative answers where our authorities had not
> included an SOA in the response.  This was certainly a surprising
> finding to me, and so I got up to the mic and acknowledged it was
> unintentional and that we would endeavour to fix it quickly.
>
> The fix was deployed on Monday afternoon.
Thanks a lot for doing that and doing it so quick. It has a huge impact.
>
> It turns out that this was a bug introduced with a software release
> that completed on 30 August.  It had not been present in previous
> releases.  One of the nameservers team members noticed the problem and
> had already fixed it for the next software release, due imminently,
> but hadn't made the leap as to the implications for resolver caches.
The attached graph I grabbed from one server shows the authoritative
request over the last 90 days and shows a nearly 50% increase at peak 
time
in September because of this. The last two days it has been back to 
normal,
so thanks again for fixing this.

So long
-Ralf
-------------- next part --------------
A non-text attachment was scrubbed...
Name: authrequests.png
Type: image/png
Size: 205967 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20171005/2c4dc15f/attachment.png>