[dns-operations] [Ext] K-root in CN leaking outside of CN
ggm at algebras.org
Sun Nov 7 23:56:41 UTC 2021
I helped deploy the unit. Great war stories about this. I think my
favourite was the guys charcoaling lunch in the machineroom next door
in the DC, using a wastepaper basket as a cooker, sitting on a
salvaged sofa. That, and having rack power die when the room lights
were turned out.
On Mon, Nov 8, 2021 at 9:53 AM Manu Bretelle <chantr4 at gmail.com> wrote:
> On Sun, Nov 7, 2021 at 1:48 AM Ray Bellis <ray at isc.org> wrote:
>> On 07/11/2021 09:28, Ray Bellis wrote:
>> > There most certainly were - a similar leak/poison pattern was
>> > detected from an I root node hosted in China in March 2010.
>> and checking our own records, we've had F root servers in China since at
>> least 2006.
>> However we announce our Anycast prefixes "NO_EXPORT" and make it very
>> clear that our routes must not propagate beyond the border.
> Thanks Ray, that’s useful info.
> My original Google searches seemed to indicate that the first root in CN were quite recent but if did not dig enough.
> A colleague pointed me to
> https://archive.nanog.org/meetings/nanog53/presentations/Tuesday/Losher.pdf /
> Which was about F hosted in China leaking out back in Oct 2011, but Nanog slides indicate that answers were not rewritten in this case.
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
More information about the dns-operations