[Yeti DNS Discuss] One funny naming scheme for root name servers, to test

P Vixie paul at redbarn.org
Wed Apr 6 19:14:50 UTC 2016


It depends on the rcode. Refused means trying other addresses for that server will not work. Servfail likewise.

I did read the RFC.

On April 6, 2016 3:04:54 PM EDT, Marc Blanchet <marc.blanchet at viagenie.ca> wrote:
>
>
>On 6 Apr 2016, at 15:51, Stephane Bortzmeyer wrote:
>
>> Suggestion from Paul Hoffman: use just one name, and one IP address
>> per server. So, for instance:
>>
>> .             IN    NS     the-real-and-only.root.
>> the-real-and-only.root.  IN AAAA 240c:f:1:22::6
>>                          IN AAAA 2a01:4f8:161:6106:1::10
>>                          IN AAAA 2001:e30:1c1e:1::333
>>                          IN AAAA 2a02:ec0:200::1
>>                          IN AAAA 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
>>                          IN AAAA 2001:67c:217c:6::2
>>                          IN AAAA 2a02:2810:0:405::250
>>                          IN AAAA 2001:6d0:6d06::53
>>                          IN AAAA 2001:1398:1:21::8001
>>                          IN AAAA 2001:559:8000::6
>>                          IN AAAA 2001:200:1d9::35
>>                          IN AAAA 2604:6600:2000:11::4854:a010
>>                          IN AAAA 2001:620:0:ff::29
>>                          IN AAAA 2a02:cdc5:9715:0:185:5:203:53
>>                          IN AAAA 2001:1608:10:167:32e::53
>>
>> In theory, it should work because RFC 1034 is crystal-clear: "[in
>case
>> of failure] The client should try other servers and server addresses
>> before repeating a query to a specific address of a server." So, the
>> client, the resolver, will try all the IP *addresses* of
>> the-real-and-only.root before giving in.
>>
>> On the other hand, not every implementer reads the RFC and some
>> resolvers will try only other *names* and thus failed the first time
>> they will encounter a problem.
>>
>> A good way to test it would be to add deliberately unreachable
>> addresses to the above set.
>
>I like this a lot! good idea to use yeti for that test!
>
>Marc.
>
>> _______________________________________________
>> discuss mailing list
>> discuss at lists.yeti-dns.org
>> http://lists.yeti-dns.org/mailman/listinfo/discuss
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>discuss mailing list
>discuss at lists.yeti-dns.org
>http://lists.yeti-dns.org/mailman/listinfo/discuss

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.yeti-dns.org/pipermail/discuss/attachments/20160406/0a45ad3a/attachment.html>


More information about the discuss mailing list