There is one confusing point in page 12 "– whose RR TTL is smaller than NCACHE TTL" Does this really matter? Because the increased requests are to check the DS RR's non-existence when NCAHCE for this DS RR exipres, so how is it related to the RR's TTL?
On Fri, Jun 7, 2013 at 2:37 PM, <[email protected]> wrote: > JPRS observed that DS queries for JP registered domain names have been > increasing and 3.5% of queries are qtype DS now. > > I make a presentation about it at DNS-OARC 2013 Spring workshop and I > wrote a draft as a DNSSEC side effect. > > Presentation material is here: > > https://indico.dns-oarc.net/indico/getFile.py/access?contribId=14&resId=0&materialId=slides&confId=0 > > Do you observe an increase of DS queries ? > > Comments appreciated. > > A new version of I-D, draft-fujiwara-dnsop-ds-query-increase-00.txt > has been successfully submitted by Kazunori Fujiwara and posted to the > IETF repository. > > Filename: draft-fujiwara-dnsop-ds-query-increase > Revision: 00 > Title: Side effect of DNSSEC: an increase of DS queries > Creation date: 2013-06-07 > Group: Individual Submission > Number of pages: 5 > URL: > http://www.ietf.org/internet-drafts/draft-fujiwara-dnsop-ds-query-increase-00.txt > Status: > http://datatracker.ietf.org/doc/draft-fujiwara-dnsop-ds-query-increase > Htmlized: > http://tools.ietf.org/html/draft-fujiwara-dnsop-ds-query-increase-00 > > > Abstract: > A significant increase of periodic DS queries is observed at top > level domain (TLD) DNS servers. Currently, almost all of periodic DS > queries come from DNSSEC validators and are queries for unsigned > delegations. The reason of the increase is low NCACHE TTL value and > DS nonexistence. This phenomena is DNSSEC protocol and DNS parameter > issue. DS queries will increase as DNSSEC validators will increase. > > -- > Kazunori Fujiwara, JPRS <[email protected]> > _______________________________________________ > DNSOP mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/dnsop >
_______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
