RIPE NCC DNS Update Anand Buddhdev. Anand Buddhdev, 15 May 2013 2 K-root Service stable with 17 instances – 5 global – 12 local (prefixes announced with.

Slides:

Advertisements

Similar presentations

1 Chapter 40 - Physiology and Pathophysiology of Diuretic Action Copyright © 2013 Elsevier Inc. All rights reserved.

Advertisements

Axel Pawlik. LACNIC IV, 25 April 2003, Santiago. 1 Update from the RIPE NCC.

Axel Pawlik. LACNIC VI, March 2004, Montevideo. An RIR in 2010 History, Continuity and Future presented by: Axel Pawlik.

1 Axel Pawlik LACNIC IX, May 2006, Guatemala RIPE NCC Update.

Measuring IPv6 Deployment Geoff Huston George Michaelson

Global SIP Dialling Plans (SIP Peering using key pads) SIP Workshop APAN Tokyo Japan 25 January 2005.

1 Brett Carr OARC, November 2006, Redmond RIPE NCC DNS Services Overview Brett Carr Manager, DNS Services RIPE NCC.

IPv6 deployment at Netnod (Nurani streaming Kurtis - but slower and without an Åland accent…) Who is Netnod? –IXP in Sweden, operator of i.root-servers.net,

The Domain Name System Continuity of Operations Apricot 2008 Taipei TAIWAN 28feb2008.

Copyright (c) 2002 Japan Network Information Center Introduction of JPNICs New Registry System Izumi Okutani IP Address Section Japan Network Information.

Reverse DNS SIG Summary Report APNIC Annual Member Meeting Bangkok, March

RIPE Network Coordination Centre 25, 29 April 2008, Taiwan 1 Nick Hyrka An Amsterdam Update ArtistServer.com/Brillman.

1 MyAPNIC Project update Database SIG APNIC 23, Bali 28 February 2007.

1 RIR Policy Development Update Policy SIG 8 Sep 2005 APNIC20, Hanoi, Vietnam Save Vocea.

Copyright © 2001 Nominum, Inc. IPv6 DNS Ashley Kitto Nominum, Inc.

RIPE Network Coordination Centre AfriNIC-10, 20 May 2009, Cairo Andrei Robachevsky 1 Update from the RIPE NCC.

DNS Operations S. Moonesamy Eland Systems AfriNIC 11 November

Spearheading Internet technology and policy development in the African Region Resource Services Report.

IANA TLD Zone Inspection Shanghai, China Louis Touton 29 October 2002.

DNS46 for the IPv4/IPv6 Stateless Translator

DIVIDING INTEGERS 1. IF THE SIGNS ARE THE SAME THE ANSWER IS POSITIVE 2. IF THE SIGNS ARE DIFFERENT THE ANSWER IS NEGATIVE.

ADDING INTEGERS 1. POS. + POS. = POS. 2. NEG. + NEG. = NEG. 3. POS. + NEG. OR NEG. + POS. SUBTRACT TAKE SIGN OF BIGGER ABSOLUTE VALUE.

SUBTRACTING INTEGERS 1. CHANGE THE SUBTRACTION SIGN TO ADDITION

MULT. INTEGERS 1. IF THE SIGNS ARE THE SAME THE ANSWER IS POSITIVE 2. IF THE SIGNS ARE DIFFERENT THE ANSWER IS NEGATIVE.

Review iClickers. Ch 1: The Importance of DNS Security.

Ohio Department of Transportation John R. Kasich, Governor Jerry Wray, Director Kronos Training April 19, 2012.

Budva, Montenegro, Sept , Administration of.am national domain I.Mkrtumyan, H.Dadivanyan, A.Karakhanyan AMNIC.

© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1 1 © 2010 Cisco and/or its affiliates. All rights reserved. LISP Mobility.

1IPv6 Day in Armenia, Yerevan, June 6, IPv6 Day in Armenia I.Mkrtumyan ISOC AM.

.TN ccTLD Overview ISOC ccTLD Workshop – Jordan Tunisian Internet Agency Makram BENHAMED

Past Tense Probe. Past Tense Probe Past Tense Probe – Practice 1.

IPv6 deployment metrics using.JP domain APNIC February 2004 Kenichi Kanayama Intec NetCore, Inc.

IPv6.kr DNS Deployment Plan Feb, 2004 Seung-hoon Lee & Billy Cheon IP Address Management Team Korea Network Information Center.

Internetdagarna October 2008 Folkets Hus, Stockholm IPv6 Golden Networks Jeroen Massar, SixXS /

Network Security Workshop Dhaka, Bangladesh 09 – 11 November 2013 Proudly Supported by:

1 Addition of IPv6 servers to in-addr.arpa tree DNS Operations Sig APNIC 18 2 September 2004, Fiji.

1 Welcome to JCCAA Data base presentation Click box to see the DEMO 1.JCCAA Web Site 2. Member Login 3. My Acount 4. School DBA The end.

IPv6 and.HK Ben Lee HKIRC 01 March Agenda 1. Why IPv6 for.hk 2. Roadmap of IPv6 deployment 3. Current status 4. Considerations 5. Further work.

Addition 1’s to 20.

Test B, 100 Subtraction Facts

Update about the “SHOULDs Analysing Project” in RIPE Policy Documents “Should” we use the RFC 2119 Defined Language in RIPE Policy Documents? Jan Žorž,

1 Unit 1 Kinematics Chapter 1 Day

ARIN Update Aaron Hughes ARIN Board of Trustees Focus IPv4 Depletion & IPv6 Uptake Developing, adapting, and enhancing processes and procedures.

State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.

User Network Interface - auto-configuration mechanism -

Energy Year 2014 Electricity Finnish Energy Industries.

Java Network Programming Vishnuvardhan.M. Dept. of Computer Science - SSBN Java Overview Object-oriented Developed with the network in mind Built-in exception.

Lecture 1 Overview of Socket Programming Erick Pranata © Sekolah Tinggi Teknik Surabaya 1.

1 Securing BGP using DNSSEC Lutz Donnerhacke db089309: 1c1c 6311 ef09 d819 e029 65be bfb6 c9cb.

DNS Alphabet Soup. IPv6 Increases packet size Both transport and question/answer sections Preference: goes first Fragmentation done by end points (ICMPv6!)

What’s Next: DNSSEC & RPKI Mark Kosters. Why are DNSSEC and RPKI Important Two critical resources – DNS – Routing Hard to tell when it is compromised.

June 2007APTLD Meeting/Dubai ANYCAST Alireza Saleh.ir ccTLD

IANA Status Update ARIN XXVI meeting, Atlanta Barbara Roseman October 2010.

Technical Area Report Bryon Ellacott, Technical Area Manager APNIC 28.

Installing a New Windows Server 2008 Domain Controller in a New Windows Server 2008 R2.

Test cases for domain checks – a step towards a best practice Mats Dufberg,.SE Sandoche Balakrichenan, AFNIC.

Rev Mats Dufberg TeliaSonera, Sweden Resolving DNSsec.

© 2015 ISC November 2013 Sunset for the DLV?. © 2015 ISC Background (c) Interested

RIPE NCC DNS Update Anand Buddhdev RIPE NCC. Presenter Name, Date 2 The GII Team.

* Agenda  What is the DNS ?  Poisoning the cache  Short term solution  Long term solution.

1 DNSMON DNS Server Monitoring RIPE NCC 3 December 2015.

Mark Kosters Engineering Status Report. Engineering Theme 2011 success was aided by contractors Lots of work yet to do (but a great deal now done) An.

AFRINIC Update Madhvi Gokool Registration Service Manager RIPE66 meeting, Dublin May 2013.

Ch 6: DNSSEC and Beyond Updated DNSSEC Objectives of DNSSEC Data origin authentication – Assurance that the requested data came from the genuine.

Using Digital Signature with DNS. DNS structure Virtually every application uses the Domain Name System (DNS). DNS database maps: –Name to IP address.

RIPE NCC ENUM Update Anand Buddhdev DNS Services Manager, RIPE NCC.

DNSSEC Status Update in UA

Presentation transcript:

RIPE NCC DNS Update Anand Buddhdev

Anand Buddhdev, 15 May K-root Service stable with 17 instances – 5 global – 12 local (prefixes announced with NO_EXPORT) Around 20,000 q/s on average More information at

Anand Buddhdev, 15 May 2013 K-root member instances An idea in development Small, single-server instances Service for a member network and its customers Virtual server, perhaps sharing a physical host with an Atlas anchor More information later this year 3

Anand Buddhdev, 15 May 2013 Other DNS services Anycast cluster with two sites 5170 zones – ripe.net – e164.arpa – IPv4 and IPv6 reverse zones – ns.ripe.net – several ccTLDs – various other small zones 120,000 q/s on average, with peaks of 180,000 4

Anand Buddhdev, 15 May 2013 Other DNS services Third site this year Server upgrades – Extra RAM for increasing zone sizes (DNSSEC) All servers running BIND 9 – We are considering diversity with NSD 4 and Knot 5

Anand Buddhdev, 15 May 2013 DNSSEC 125 signed zones All except for three have chains of trust Uneventful KSK roll-over in November secure delegations (641 at RIPE 65) Some DNSCurve-style delegations – nserver: uz53mlpjxf12mg… – nserver: uz5j8kz3j7blzw… 6

Anand Buddhdev, 15 May 2013 ENUM (e164.arpa) 52 delegations (no change since RIPE 65) 6 signed delegations Around 5 q/s at our server 7

Anand Buddhdev, 15 May 2013 New DNSMON Measurements using Atlas probes – Anchors and a random selection of user probes Control panel to define: – Zone – Name servers and IP addresses – Query types (SOA, hostname.bind, id.server) – Transport (UDP, TCP) – Traceroutes – NSID (RFC 5001) 8

Anand Buddhdev, 15 May 2013 New DNSMON Better graphs Raw data available – Atlas user-defined measurement Pilot in Q with some users Production planned for Q Current DNSMON is still running as a service 9

Anand Buddhdev, 15 May 2013 DNSMON control panel step 1 10

Anand Buddhdev, 15 May 2013 DNSMON control panel step 2 11

Anand Buddhdev, 15 May 2013 DNSMON control panel step 3 12

Anand Buddhdev, 15 May 2013 DNSMON control panel step 4 13

Questions?