> 
    > We investigated that situation on request and found some F-root
    > instances were receiving very high volume of queries for invalid TLD.
    
    I'm wondering why those ip's aren't distributing their queries across
    all the roots.

Not all resolvers are equal. Some lock on on servers, others don't
    
    > 24 hour traces collected between 01-09-2007 12:00 and 01-10-2007 12:00,
    > on 61 root server anycast nodes
    > 
    > C-root, all 4 instances
    > F-root, 36 out of 40
    > K-root, 15 out of 17
    > M-root, all 6 instances
    > 
    > So the data seems to be useful (but not complete). Once we got all the
    > data for DITL 2008 we could try to run the same test and look for
    > trends.
    
    This is quite interesting. F-root is also the most anycasted of this
    subset...  The next highest anycasted member has the least amount of bad
    TLD queries. Seems to be more variability with more highly anycasted
    servers. I wonder why...

If you look at this,

    > > >Doing an analysis per root, the numbers vary
    > > >
    > > >C-root         19.15%
    > > >F-root         46.79%
    > > >K-root         10.01%
    > > >M-root         20.96%

You'll note that C & M has less instances then K, but more of this
traffic. To me it seems too little data conclude anything.

    Do you have the number of anycast instances for all 13 roots?

As far as I know public information is available at
http://www.root-servers.org/

        jaap
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to