[ Quoting <[email protected]> in "[dns-wg] Re: More Than 70% of DNS R..." ]
The BIND instructions are in RFC 8806, as are those for some other
resolvers that support this.
There are caveats:
- allowing AXFR of the root is something that some root operators do,
but it is not a formal service offering. Any (or all) of them could
withdraw it at any point.
- you'll want to have really good monitoring in place to make sure your
transfers are succeeding
- without NOTIFY you might miss urgent root zone updates, e.g. in the
case of an urgent TLD key roll
- you might also want to use ZONEMD to check that the zone is correct.
There is the localroot project: https://localroot.isi.edu/about/
/Miek
-----
To unsubscribe from this mailing list or change your subscription options,
please visit: https://mailman.ripe.net/mailman3/lists/dns-wg.ripe.net/
As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings.
More details at: https://www.ripe.net/membership/mail/mailman-3-migration/