You are here: Home > Publications > RIPE Labs > Anand Buddhdev

Anand Buddhdev

RIPE NCC Staff — 10 Jul, 2010 04:25 PM
Updated Reply-Size Tester by Anand Buddhdev — last modified 17 Oct, 2016 08:57 AM

A new version of the reply-size tester tool is available now, incorporating feedback received since its first release.

Testing your Resolver for DNS Reply Size Issues by Anand Buddhdev — last modified 30 Oct, 2018 01:27 PM

Some weeks ago, we installed a reply-size tester application at the global instances of K-root. We want to make this test available to more people, in an easy-to-use way. We have therefore written a Java application for this purpose.

DNSSEC Algorithm Roll-over by Anand Buddhdev — last modified 10 Oct, 2018 07:02 PM

Rolling over the algorithm (usually to a stronger variant) used to sign a DNS zone isn't as easy as regular key roll-overs. This is because some DNSSEC validators are less forgiving than others, and fail validation unless the right combination of keys and signatures is present in a zone. This article describes our experiences with DNSSEC algorithm roll-over. We hope that our experience will help others who may be considering doing this.

Reverse DNS Outage for Out-of-Region Address Space by Anand Buddhdev — last modified 10 Apr, 2017 10:45 AM

On Thursday 16 March 2017, at around 20:00 UTC, a bug in a script caused an outage for some reverse DNS delegations registered in the RIPE Database. The effects of the bug were not immediate, but began a cascading failure, that persisted until 18:00 UTC on Friday 17 March. In the following article, you will find more information about what happened.

The Future of DNSSEC at the RIPE NCC by Anand Buddhdev — last modified 24 Oct, 2017 10:06 AM

DNSSEC signing solutions and products have evolved greatly since we first began signing our zones. We are now exploring ways of doing it better and smarter.

Anycasting AS197000 More Widely by Anand Buddhdev — last modified 06 Nov, 2017 04:28 PM

This is an experiment to see if we can increase the capacity and resiliency of the RIPE NCC's authoritative DNS service (AS197000). This service hosts all the reverse DNS zones, ripe.net and provides secondary service for various ccTLDs.

DNSSEC Signer Migration by Anand Buddhdev — last modified 18 Sep, 2018 08:33 AM

In this article we describe the evaluation and selection of a new DNSSEC signer solution, along with a plan of how we intend to perform the migration.