Preparing for Use of 32-bit ASN in a Production Network
• 2 min read
We were assigned a 32-bit Autonomous System Number from IANA to deploy a new DNS cluster with a different routing policy.
Search found 364 results
DNSSEC Key Roll-over Pitfalls
Mirjam Kühne
Mirjam Kühne
Based in Amsterdam, The Netherlands
I wrote the articles collected here during my time as community builder of the RIPE NCC and the maintainer and editor of RIPE Labs. I have since taken on a new role serving as the Chair of the RIPE Community. You can reach my new profile via the website link … More
• 2 min read
A few weeks ago the RIPE NCC was alerted to a rapid increase in DNSKEY queries for its signed reverse DNS zones. We did some investigations. Read about the results in this article.
Measuring DNS Transfer Sizes - First Results
Daniel Karrenberg
Daniel Karrenberg
Based in Western Europe, NL&DE mostly
>>>>>>>>>>>> https://www.ripe.net/about-us/press-centre/publications/speakers/daniel-karrenberg <<<<<<<<<<<< Ample information about his past sins can be found using your favourite search engine. Following are a few additional keywords you might use, arranged by decade: 1980s: GUUG EUUG EUnet unido mcvax cwi RARE iepg RIPE; 1990s: RIPE+NCC rir iana postel terena ebone centr k.root-servers.net; 2000s: dnsmon … More
• 9 min read
Here are the first results of our DNS transfer size measurements. We are interested to determine any possible problems for users of K-root once it starts giving DNSSEC responses to resolvers that request them. DNSSEC responses are significantly larger than current responses. We are interested to le…
Preparing K-root for a Signed Root Zone
• 4 min read
Earlier this year, ICANN and VeriSign announced plans to sign the DNS root zone, using DNSSEC. DNSSEC is a set of extensions to the DNS protocol which allow one to digitally sign the records in a zone and allow a client to verify the authenticity of these records.