Anand Buddhdev
Articles
Likes on articles
About the author
Published tags
Hosted DNS Application Update
Expanding the RIPE NCC Authoritative DNS Service means cooperating with the community to find organisations out there willing to host AuthDNS instances on their networks. In this article, find out exactly what's required from hosts and how to apply.
Expanding Our Authoritative DNS Cluster
We're steadily expanding the capacity of our Authoritative DNS (AuthDNS) cluster to ensure it keeps providing resilient and speedy service. Here's a look at what the cluster does and the steps we're taking towards its expansion.
DNSSEC Signer Migration
In this article we describe the evaluation and selection of a new DNSSEC signer solution, along with a plan of how we intend to perform the migration.
Anycasting AS197000 More Widely
This is an experiment to see if we can increase the capacity and resiliency of the RIPE NCC's authoritative DNS service (AS197000). This service hosts all the reverse DNS zones, ripe.net and provides secondary service for various ccTLDs.
Reverse DNS Outage for Out-of-Region Address Space
On Thursday 16 March 2017, at around 20:00 UTC, a bug in a script caused an outage for some reverse DNS delegations registered in the RIPE Database. The effects of the bug were not immediate, but began a cascading failure, that persisted until 18:00 UTC on Friday 17 March. In the following article,…
DNSSEC Algorithm Roll-over
Rolling over the algorithm (usually to a stronger variant) used to sign a DNS zone isn't as easy as regular key roll-overs. This is because some DNSSEC validators are less forgiving than others, and fail validation unless the right combination of keys and signatures is present in a zone. This ar…
Interesting Graph - TCP Queries on K-root
This graph shows TCP queries coming to K-root during 4 hours on 3 June 2010.
Testing your Resolver for DNS Reply Size Issues
Some weeks ago, we installed a reply-size tester application at the global instances of K-root. We want to make this test available to more people, in an easy-to-use way. We have therefore written a Java application for this purpose.
Showing 10 article(s)
DNS Root Server Transparency: K-Root, Anycast and More
The RIPE NCC is operating K-root, one of the 13 DNS root servers. In this article we shed some light on the operational policies of K-root to clarify possible misunderstandings about how it is operated.
Report: K-root on 30 November and 1 December 2015
In this report we provide some more details about the incidents of 30 November and 1 December 2015, as seen from the K-root environment. We also share some of the lessons we took away from this event.
New Architecture Model for K-root Local Instances
We have redesigned the K-root architecture for our hosted nodes, formerly known as K-root local instances. System architecture and network setup have been simplified a lot. This will reduce our management effort for K-root and reduce costs for K-root hosts.
Comparing TCP and UDP Response Times of DNS Root Servers
We did some measurements on the round-trip (RT) values of DNS queries for SOA (Start of Authority) records from our RIPE Atlas probes, over both UDP and TCP. We plotted the TCP/UDP ratios on graphs, and found that, as expected, for the majority of the measurements, it is around 2. However, we also …
Showing 4 article(s)
Hi Roland. We don't have plans for CDS/CDNSKEY at the moment. However, if we hear otherwise from the community, and more people would like the RIPE NCC to support it, then we would certainly look at implementing it for the reverse DNS zones.
Showing 1 comment(s)