Ken, On Apr 28, 2014, at 7:43 PM, Ken Peng <[email protected]> wrote: > Recent days I found most of the root nameservers, and com/net's > nameservers can't work from here. When accessing to them I always got > timeout.
If you're querying from inside China, probably the first thing you should check is to see if the root server IP addresses you're querying match the following list (a-m): a.root-servers.net. - 198.41.0.4 b.root-servers.net. - 192.228.79.201 c.root-servers.net. - 192.33.4.12 d.root-servers.net. - 199.7.91.13 e.root-servers.net. - 192.203.230.10 f.root-servers.net. - 192.5.5.241 g.root-servers.net. - 192.112.36.4 h.root-servers.net. - 128.63.2.53 i.root-servers.net. - 192.36.148.17 j.root-servers.net. - 192.58.128.30 k.root-servers.net. - 193.0.14.129 l.root-servers.net. - 199.7.83.42 m.root-servers.net. - 202.12.27.33 and a.root-servers.net. - 2001:503:ba3e::2:30 b.root-servers.net. - c.root-servers.net. - 2001:500:2::c d.root-servers.net. - 2001:500:2d::d e.root-servers.net. - f.root-servers.net. - 2001:500:2f::f g.root-servers.net. - h.root-servers.net. - 2001:500:1::803f:235 i.root-servers.net. - 2001:7fe::53 j.root-servers.net. - 2001:503:c27::2:30 k.root-servers.net. - 2001:7fd::1 l.root-servers.net. - 2001:500:3::42 m.root-servers.net. - 2001:dc3::35 You then might want to do a traceroute to those IP addresses and see if it looks like they're going towards the right places (a little complicated given anycast routing, but if they all stay within China, you might be a bit suspicious). You then might want to try pinging those IP addresses to see the loss/latency stats. > I am from China, ISP telecom. > Can you tell what happens? Probably not definitively without more information... Regards, -drc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
