On 2020/01/21 09:34, Dr Eberhard W Lisse wrote:
Calvin,

I really like it when we can put facts and/or figures in to the debate.
And such data lends itself, especially when run through something like R
to a presentation at TechDay :-)-O

What's the Y Axis? Doesn't have a label or scale :-)-O

El,


The Y Axiz label is queries per second, and it's linear. Purposely left it off as it's an average across NS's and parts of NS instances (ie anycast stuff).

But it is good enough (IMO) to answer the question of "what % of queries hitting mostly co.za Auth servers has the do bit set, indicating that the question asker is indicating they're DNSSEC aware".

As to if the question askers are actually geared up to do the correct thing with answers is a whole other discussion ;-)


--Calvin



el

On 21/01/2020 08:33, Calvin Browne wrote:
On 2020/01/10 15:55, Dr Eberhard W Lisse wrote:
<SNIP>
Mark,

50% lookups is actually almost worth than zero :-)-).

     And how many of those hit infrastructure actually in South Africa?
     Does the figure include the public ones from Google and Cloudflare?

<SNIP>


if you're going to argue about figures, here are some actuals hitting
mainly co.za auth infrastructure, attached.

This is an analysis of queries wrt to do_bit, stacked (ie both lines
add up to 100% of queries).

Yellow is with do bit (ie the resolver says I can handle DNSSEC), the
green without.

Lots of green stuff is not "legit" traffic, ie data miners etc.


--Calvin

_______________________________________________
AfrICANN mailing list
[email protected]
https://lists.afrinic.net/mailman/listinfo/africann

Reply via email to