[dns-operations] [Ext] Re: Is this DNS Flag Day 2020 including 'in-addr.arpa.' and 'ip6.arpa.' clean-up?

[Edward Lewis]

I've been doing some examinations of ip6.arpa and in-addr.arpa as part of other work and I'd say they are pretty darn clean as they are.  So I (too) am curious what would be needed as part of a "Flag Day" level clean up.

I'm looking at the delegation information in the two zones and the information at the zones they delegate.  As far as delegations from those zones to RIR run zones, I'd say they are perfect.  For a while there were two zones with misaligned NS sets, but they were "fixed" rather speedily last week.  (There's no glue in the zones.)

What I mean by "delegations from those zones to RIR run zones" means that there are a few delegations from ip6.arpa and in-addr.arpa that go to non-RIRs or are "special" (like 10.in-addr.arpa).  Of those, there are some hiccups but that is something that is best handled by addressing the individual situation.  I don't see a "Flag Day" level concern - thus my curiosity above.

On 2/14/20, 2:24 PM, "dns-operations on behalf of Ondřej Surý" <dns-operations-bounces at dns-oarc.net<mailto:dns-operations-bounces at dns-oarc.net> on behalf of ondrej at sury.org<mailto:ondrej at sury.org>> wrote:

Hi,

the DNS Flag Days initiative focus on protocol issues, and neither forward or reverse zones are in the focus.

If you have anything specific you could bring this up here. How is the .arpa neglected?

Ondrej
--
Ondřej Surý <ondrej at sury.org>


On 14 Feb 2020, at 18:22, Pirawat WATANAPONGSE <pirawat.w at ku.th> wrote:

If you think my topic is irrelevant to DNS Flag Day 2020, or if someone has already mentioned it, I do apologize.

My reasoning is that the campaign is lopsided; we are focusing on the ‘forward’ zones (because those are our children, bear our names, and we like to brag), but the 2 huge ‘reverse’ zones are neglected (because they are the bastard children).

Anyone plans to clean up the ‘in-addr.arpa.’ and ‘ip6.arpa.’ this upcoming Flag Day? Or it is not a priority (just yet) at this moment?

By the way, do not confuse properly scaffolding the (reverse) zones from populating them; from my point of view, they are separate issues. Even if you are ever going to put just one PTR into it, a properly secured, hierarchized, delegated (reverse) zone is still crucial.


My two cents’ worth,

Pirawat.

--
        _/_/      _/_/ _/_/       _/_/ Assist.Prof. Pirawat WATANAPONGSE, Ph.D.
       _/_/    _/_/   _/_/       _/_/ Department of Computer Engineering
      _/_/  _/_/     _/_/       _/_/ Kasetsart University, Bangkhen (Main) Campus
     _/_/_/_/       _/_/       _/_/ Bangkok 10900, THAILAND
    _/_/_/_/       _/_/       _/_/ eMail: Pirawat.W at ku.th<mailto:Pirawat.W at ku.th> or Pirawat.W at ku.ac.th<mailto:Pirawat.W at ku.ac.th>
   _/_/  _/_/     _/_/       _/_/ Tel: +66 2 797 0999 extension 1417
  _/_/    _/_/    _/_/_/_/_/_/ Fax: +66 2 579 6245
_/_/      _/_/      _/_/_/_/    http://www.cpe.ku.ac.th/~pw/

_______________________________________________
dns-operations mailing list
dns-operations at lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20200219/b6ad0da9/attachment.html>