Re: g.root-servers.net not reachable anymore
On Apr 18 2016, Dave Warren wrote: On 2016-04-14 03:02, 'Stephane Bortzmeyer' wrote: On Thu, Apr 14, 2016 at 11:55:04AM +0300, Daniel Dawalibi wrote a message of 22 lines which said: Do you think it is better to remove it from named.root? Certainly not, your resolver removes it automatically from the list of authoritative servers for the zone. Also, named will add it right back to the in-memory cache (the one that matters) since it will reach out to one of the hints servers to find the up to date list of root servers. The hints file is just a hint of how to find the roots, not an absolute list of root servers. In any case, this was only(!) a 9.5 hour outage (2016-04-14 03:00-12:30 UTC). Any kind of local manual configuration change would have been an inappropriate response. I think the only explanation we have seen so far is https://lists.dns-oarc.net/pipermail/dns-operations/2016-April/014765.html which is fairly tight-lipped! -- Chris Thompson Email: c...@cam.ac.uk ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: g.root-servers.net not reachable anymore
On 2016-04-14 03:02, 'Stephane Bortzmeyer' wrote: On Thu, Apr 14, 2016 at 11:55:04AM +0300, Daniel Dawalibi wrote a message of 22 lines which said: Do you think it is better to remove it from named.root? Certainly not, your resolver removes it automatically from the list of authoritative servers for the zone. Also, named will add it right back to the in-memory cache (the one that matters) since it will reach out to one of the hints servers to find the up to date list of root servers. The hints file is just a hint of how to find the roots, not an absolute list of root servers. -- Dave Warren http://www.hireahit.com/ http://ca.linkedin.com/in/davejwarren ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: g.root-servers.net not reachable anymore
On Thu, Apr 14, 2016 at 11:55:04AM +0300, Daniel Dawalibi wrote a message of 22 lines which said: > Do you think it is better to remove it from named.root? Certainly not, your resolver removes it automatically from the list of authoritative servers for the zone. > Is there any impact on the DNS resolving ? Zero impact (that's why you must have several name servers for a zone, idm.net.lb has only two, which is light). ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: g.root-servers.net not reachable anymore
Do you think it is better to remove it from named.root? Is there any impact on the DNS resolving ? Regards Daniel -Original Message- From: Stephane Bortzmeyer [mailto:bortzme...@nic.fr] Sent: 14 April, 2016 10:35 AM To: Daniel Stirnimann Cc: Daniel Dawalibi; bind-us...@isc.org Subject: Re: g.root-servers.net not reachable anymore On Thu, Apr 14, 2016 at 08:35:00AM +0200, Daniel Stirnimann wrote a message of 14 lines which said: > Looks like you are not alone! > > https://atlas.ripe.net/dnsmon/group/g-root Only broken over UDP. Works on TCP and still replies to traceroute. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: g.root-servers.net not reachable anymore
On Thu, Apr 14, 2016 at 08:35:00AM +0200, Daniel Stirnimann wrote a message of 14 lines which said: > Looks like you are not alone! > > https://atlas.ripe.net/dnsmon/group/g-root Only broken over UDP. Works on TCP and still replies to traceroute. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: g.root-servers.net not reachable anymore
On 14.04.16 08:31, Daniel Dawalibi wrote: > Anyone experiencing a reach ability issue toward g.root-servers.net? Looks like you are not alone! https://atlas.ripe.net/dnsmon/group/g-root Daniel ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
g.root-servers.net not reachable anymore
Hello Anyone experiencing a reach ability issue toward g.root-servers.net? # dig @g.root-servers.net ns ; <<>> DiG 9.7.0-P1 <<>> @g.root-servers.net ns ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached # dig @192.112.36.4 ns ; <<>> DiG 9.7.0-P1 <<>> @192.112.36.4 ns ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached Regards Daniel ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users