<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div apple-content-edited="true" class=""><br class="">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On 6/01/2015, at 11:59 am, Franck Martin <<a href="mailto:fmartin@linkedin.com" class="">fmartin@linkedin.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><div class=""><br class="Apple-interchange-newline">On Jan 4, 2015, at 2:44 AM, Alexander Neilson <<a href="mailto:alexander@neilson.net.nz" class="">alexander@neilson.net.nz</a>> wrote:</div></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""><blockquote type="cite" class=""><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><br class=""><blockquote type="cite" class=""><div class=""><br class=""><blockquote type="cite" class="">* IPv6 access to resolving and authoritative servers<br class=""></blockquote>Even Better :-)<br class=""></div></blockquote><div class=""><br class=""></div><div class="">Next step is a full IPv6 rollout to customers</div></div></div></blockquote><div class=""><br class=""></div>Excellent… On a side note you may want to read: <a href="https://www.m3aawg.org/sites/maawg/files/news/M3AAWG_Inbound_IPv6_Policy_Issues-2014-09.pdf" class="">https://www.m3aawg.org/sites/maawg/files/news/M3AAWG_Inbound_IPv6_Policy_Issues-2014-09.pdf</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Which deals with email but also rDNS.</div></div></blockquote><div><br class=""></div><div>Thanks, Will take a look</div><br class=""><blockquote type="cite" class=""><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""><blockquote type="cite" class=""><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><br class=""><blockquote type="cite" class=""><div class=""><br class=""><blockquote type="cite" class="">* Resolved Fragmentation issues to allow full 4096 EDNS resolution<br class=""></blockquote>The best ;-). It seems like you already learned a lot and have taken the right decisions.<br class=""></div></blockquote><div class=""><br class=""></div><div class="">I am doing my best to try improve all aspects of our network. However the learning is what I really value out of it all as every change I make helps me to understand how it all works in the plumbing.</div></div></div></blockquote><div class=""><br class=""></div>You may find some useful documentation here if you worry about your network and not DNS only: <a href="https://www.m3aawg.org/published-documents" class="">https://www.m3aawg.org/published-documents</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div></div></blockquote><div><br class=""></div><div>Thank you, more resources on networks all over (DNS or otherwise) are always welcome. Trying to learn more to be a better network operator.</div><br class=""><blockquote type="cite" class=""><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><blockquote type="cite" class=""><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><br class=""><blockquote type="cite" class=""><div class=""><br class="">[..]<br class=""><blockquote type="cite" class="">To give an idea of the current top questions I have (however not limiting myself to learning about these):<br class=""><br class="">* prioritisation of root servers (my analysis of my server queries shows a high proportion of queries to<span class="Apple-converted-space"> </span><a href="http://a.root-servers.net/" class="">a.root-servers.net</a><span class="Apple-converted-space"> </span>however I have identified that this is one of the lowest response performance root server from where I am located), I would like to prefer the 6 root servers with the best response time (I have found 6 with RTT of less than 5ms and the rest show RTT ~180-200)<br class=""></blockquote>Normally your resolver software should do this. The only reason I have why it doesn't is that there is a difference between the round trip that ping gives you and the actual round trip of the dns message, which the resolver will use for it's decision which server to query. Some servers take some time to answer a query, although it shouldn't be in the hundreds of milliseconds range.<br class=""></div></blockquote><div class=""><br class=""></div><div class="">I did some actual resolution checks from the system and saw the following response times for a DNS queries for the com TLD NS</div><div class=""><br class=""></div><div class="">a: Query time: 199 msec</div><div class="">b: Query time: 137 msec</div><div class="">c: Query time: 144 msec</div><div class="">d: Query time: 9 msec</div><div class="">e: Query time: 8 msec</div><div class="">f: Query time: 129 msec</div><div class="">g: Query time: 172 msec</div><div class="">h: Query time: 201 msec</div><div class="">i: Query time: 79 msec</div><div class="">j: Query time: 134 msec</div><div class="">k: Query time: 206 msec</div><div class="">l: Query time: 8 msec</div><div class="">m: Query time: 243 msec</div><div class=""><br class=""></div><div class="">Now it may be something inside the network that specifically asks for a resolution of or against<span class="Apple-converted-space"> </span><a href="http://a.root-servers.net/" class="">a.root-servers.net</a> but I am seeing 11% of queries for a. and nothing in the top lists for any other root server.</div></div></div></blockquote><div class=""><br class=""></div><div class="">I would have expected from NZ, the I and F root server would be the fastest… </div><div class=""><br class=""></div><div class=""><a href="http://www.apnic.net/community/support/root-servers/root-server-map" class="">http://www.apnic.net/community/support/root-servers/root-server-map</a></div><div class=""><a href="https://www.google.com/maps/d/u/0/viewer?ll=11.424429,26.178063&ie=UTF8&om=1&msa=0&spn=142.883537,288.632813&z=2&hl=en&mid=zlG9ajNou0XE.kueIslroMXZQ" class="">https://www.google.com/maps/d/u/0/viewer?ll=11.424429,26.178063&ie=UTF8&om=1&msa=0&spn=142.883537,288.632813&z=2&hl=en&mid=zlG9ajNou0XE.kueIslroMXZQ</a></div><div class=""><br class=""></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">You may want to get an atlas probe, so you can participate in global DNS measurements: </span><a href="https://atlas.ripe.net/" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://atlas.ripe.net/</a><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">See results there: <a href="https://atlas.ripe.net/results/maps/" class="">https://atlas.ripe.net/results/maps/</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">and how it matches your view of the Internet.</div></div></blockquote><div><br class=""></div>i root server is live in Wellingon (so our wellington customers get better times to it than this) however we haven’t fully integrated our Wellington WIX peering with our Auckland and north network (some legacy AS borders between our Southern half and Northern half.</div><div><br class=""></div><div>the ISC f root server had a node peering at APE however this had some issues with their BGP announcement (so some manual routing had to be done to use it. And now their Peering IP Address doesn’t respond to packets nor do they seem to have any live sessions. I have emailed ISC about this over the shutdown and they are yet to respond (may be just back in the office)<br class=""><br class=""></div><div><br class=""></div><div><br class=""></div><div><div class="">Regards</div><div class="">Alexander</div><div class=""><br class=""></div><div class="">Alexander Neilson</div><div class="">Neilson Productions Limited</div><div class=""><br class=""></div><div class=""><a href="mailto:alexander@neilson.net.nz" class="">alexander@neilson.net.nz</a></div><div class="">+64 21 329 681</div><div class="">+64 22 456 2326</div></div><br class=""></body></html>