djb;
> > a significant fraction of the total root server query load
> > is the result of bad packet filtering
>
> Think about the numbers for a moment.
Before that, I think we should think about a DHCP configured name
server located beyond a firewall, which is no different from
an anycast name server located beyond a firewall.
> The screwups you're talking about, added up over the _entire Internet_,
> are on the scale of thousands of packets per second. Split the same
> screwup level across all of the Internet's ISPs and the load becomes
> unnoticeable.
And, that's why anycast is the way to go both for root servers
and autoconfigured recursive servers.
Masataka Ohta
#----------------------------------------------------------------------
# To unsubscribe, send a message to <[EMAIL PROTECTED]>.