1 / 13

RIPE NCC DNS Services Overview

RIPE NCC DNS Services Overview. Brett Carr Manager, DNS Services RIPE NCC. Overview. Introduction Reverse/ccTLD Server Infrastructure K-Root DNSSEC ENUM Future. Reverse/ccTLD Server Infrastructure.

tshawn
Télécharger la présentation

RIPE NCC DNS Services Overview

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. RIPE NCC DNS Services Overview Brett Carr Manager, DNS Services RIPE NCC Brett Carr

  2. Overview • Introduction • Reverse/ccTLD Server Infrastructure • K-Root • DNSSEC • ENUM • Future Brett Carr

  3. Reverse/ccTLD Server Infrastructure • 6 Servers involved- dnsadmin (dnssigner)- ns-pri.ripe.net- ns-sec.ripe.net- ns-tld.ripe.net- ns.ripe.net Brett Carr

  4. Reverse/ccTLD Server Infrastructure Brett Carr

  5. K-Root • Anycasted across 17 Locations • 5 Global Nodes • 12 Local Nodes • Hardware and OS Upgrades • Considering further deployments Brett Carr

  6. K-Root Brett Carr

  7. DNSSEC • Started rollout on non critical zones Oct 2005 • DS Records into reverse via our provisioning system • Total primary zones 113 • Signed zones 72 • NS Records 521811 (225432 sets) • DS Records 61 • RIPE NCC 14 • Other 47 Statistics as of October 2006 Brett Carr

  8. ENUM • Tasked by IAB to operate the e164.arpa domain • Receive delegation requests • Review technical DNS quality of request • Announce request to public and ITU • When no objections received perform delegation • e164.arpa operated at no charge to all • Technically almost identical to in-addr.arpa/ip6.arpa Brett Carr

  9. Queries per e164.arpa Nameserver – Aug 06 ns-pri.ripe.net 391084 ns0.verio.net 387080 tinnie.arin.net 382847 cnnic.net.cn 324755 sec3.apnic.net 255726 sunic.sunet.se 152300 Total 1893792 42 queries per minute Brett Carr

  10. Queries per delegation – August 2006 • Top 10 received at ns-pri.ripe.net • Average 8.76 queries per minute • 9.4.e164.arpa averages 0.74 queries per minute Brett Carr

  11. Invalid Queries • Total invalid queries 25922 (6.6%) • Queries prefixed with 0 8918 • Queries prefixed with 0.0 4966 • Rest:Missing separator 3100.e164.arpa Strange prefixes 4.4.+.e164.arpaIncorrect prefixes 1.8.8.e164.arpa • Probably misconfigured equipment Brett Carr

  12. Future • New team formed 01/11/2006 • DNS statistics improvements (DSC) • Hardware and OS upgrades/renewals • NSD/BIND 9.40 testing • Lameness checking/reporting Brett Carr

  13. Questions? Brett Carr

More Related