Re: g.root-servers.net not reachable anymore

2016-04-18 Thread Chris Thompson

On Apr 18 2016, Dave Warren wrote:


On 2016-04-14 03:02, 'Stephane Bortzmeyer' wrote:

On Thu, Apr 14, 2016 at 11:55:04AM +0300,
  Daniel Dawalibi  wrote
  a message of 22 lines which said:


Do you think it is better to remove it from named.root?

Certainly not, your resolver removes it automatically from the list of
authoritative servers for the zone.


Also, named will add it right back to the in-memory cache (the one that 
matters) since it will reach out to one of the hints servers to find the 
up to date list of root servers.


The hints file is just a hint of how to find the roots, not an absolute 
list of root servers.


In any case, this was only(!) a 9.5 hour outage (2016-04-14 03:00-12:30 UTC).
Any kind of local manual configuration change would have been an inappropriate
response.

I think the only explanation we have seen so far is

https://lists.dns-oarc.net/pipermail/dns-operations/2016-April/014765.html

which is fairly tight-lipped!

--
Chris Thompson
Email: c...@cam.ac.uk



___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: g.root-servers.net not reachable anymore

2016-04-17 Thread Dave Warren

On 2016-04-14 03:02, 'Stephane Bortzmeyer' wrote:

On Thu, Apr 14, 2016 at 11:55:04AM +0300,
  Daniel Dawalibi  wrote
  a message of 22 lines which said:


Do you think it is better to remove it from named.root?

Certainly not, your resolver removes it automatically from the list of
authoritative servers for the zone.


Also, named will add it right back to the in-memory cache (the one that 
matters) since it will reach out to one of the hints servers to find the 
up to date list of root servers.


The hints file is just a hint of how to find the roots, not an absolute 
list of root servers.


--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: g.root-servers.net not reachable anymore

2016-04-14 Thread 'Stephane Bortzmeyer'
On Thu, Apr 14, 2016 at 11:55:04AM +0300,
 Daniel Dawalibi  wrote 
 a message of 22 lines which said:

> Do you think it is better to remove it from named.root?

Certainly not, your resolver removes it automatically from the list of
authoritative servers for the zone.

> Is there any impact on the DNS resolving ?

Zero impact (that's why you must have several name servers for a
zone, idm.net.lb has only two, which is light).
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: g.root-servers.net not reachable anymore

2016-04-14 Thread Daniel Dawalibi
Do you think it is better to remove it from named.root?
Is there any impact on the DNS resolving ?


Regards
Daniel

-Original Message-
From: Stephane Bortzmeyer [mailto:bortzme...@nic.fr] 
Sent: 14 April, 2016 10:35 AM
To: Daniel Stirnimann
Cc: Daniel Dawalibi; bind-us...@isc.org
Subject: Re: g.root-servers.net not reachable anymore

On Thu, Apr 14, 2016 at 08:35:00AM +0200,  Daniel Stirnimann
 wrote  a message of 14 lines which said:

> Looks like you are not alone!
> 
> https://atlas.ripe.net/dnsmon/group/g-root

Only broken over UDP. Works on TCP and still replies to traceroute.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: g.root-servers.net not reachable anymore

2016-04-14 Thread Stephane Bortzmeyer
On Thu, Apr 14, 2016 at 08:35:00AM +0200,
 Daniel Stirnimann  wrote 
 a message of 14 lines which said:

> Looks like you are not alone!
> 
> https://atlas.ripe.net/dnsmon/group/g-root

Only broken over UDP. Works on TCP and still replies to traceroute.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: g.root-servers.net not reachable anymore

2016-04-13 Thread Daniel Stirnimann
On 14.04.16 08:31, Daniel Dawalibi wrote:
> Anyone experiencing a reach ability issue toward g.root-servers.net?

Looks like you are not alone!

https://atlas.ripe.net/dnsmon/group/g-root

Daniel
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


g.root-servers.net not reachable anymore

2016-04-13 Thread Daniel Dawalibi
Hello

 

Anyone experiencing a reach ability issue toward g.root-servers.net?

 

# dig @g.root-servers.net ns

 

; <<>> DiG 9.7.0-P1 <<>> @g.root-servers.net ns

; (1 server found)

;; global options: +cmd

;; connection timed out; no servers could be reached

 

# dig @192.112.36.4 ns

 

; <<>> DiG 9.7.0-P1 <<>> @192.112.36.4 ns

; (1 server found)

;; global options: +cmd

;; connection timed out; no servers could be reached

 

 

Regards

Daniel

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users