[dns-operations] [Ext] K-root in CN leaking outside of CN

[George Michaelson]

I helped deploy the unit. Great war stories about this. I think my
favourite was the guys charcoaling lunch in the machineroom next door
in the DC, using a wastepaper basket as a cooker, sitting on a
salvaged sofa. That, and having rack power die when the room lights
were turned out.

On Mon, Nov 8, 2021 at 9:53 AM Manu Bretelle <chantr4 at gmail.com> wrote:
>
>
>
> On Sun, Nov 7, 2021 at 1:48 AM Ray Bellis <ray at isc.org> wrote:
>>
>>
>>
>> On 07/11/2021 09:28, Ray Bellis wrote:
>>
>> > There most certainly were - a similar leak/poison pattern was
>> > detected from an I root node hosted in China in March 2010.
>>
>> and checking our own records, we've had F root servers in China since at
>> least 2006.
>>
>> However we announce our Anycast prefixes "NO_EXPORT" and make it very
>> clear that our routes must not propagate beyond the border.
>
>
> Thanks Ray, that’s useful info.
>
> My original Google searches seemed to indicate that the first root in CN were quite recent but if did not dig enough.
> A colleague pointed me to
> https://archive.nanog.org/meetings/nanog53/presentations/Tuesday/Losher.pdf /
> https://bgpmon.net/f-root-dns-server-moved-to-beijing/
>
> Which was about F hosted in China leaking out back in Oct 2011, but Nanog slides indicate that answers were not rewritten in this case.
>
> Manu
>>
>>
>>
>> Ray
>> _______________________________________________
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations