Rolling the root key
The root key of the DNS is scheduled to roll on 11 October. How many DNSSEC-validating recursive resolvers have learned of KSK-2024 and incorporated it into their TA sets?
Tag: DNS
[Podcast] ‘Just say no’ isn’t as simple as you think
A continuation of the discussion on surplus DNS queries seen at APNIC Labs, the implications of how you say ‘no’, and the transport used for the DNS.
One or two nameservers?
Do multiple dual-stack nameservers increase or decrease repeat DNS queries? The results of this experiment were a complete surprise.
Building resilient self hosted services is not always easy
Resiliency through more redundancy is important no matter the scenario.
What part of ‘No!’ is so hard for the DNS to understand?
At APNIC Labs we’ve been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks.
[Podcast] Measuring the impact of locally served root zone
An analysis of the traffic impacts of locally served root zones, by Ilyas Rahimi at UvA.
The lingering legacy of ‘reserved’ ports
Modern service discovery mechanisms increasingly allow services to run on arbitrary ports, yet DNS may remain the one protocol that cannot fully escape its dependency on the long-established convention of port 53.
AI, IPv6, and the future Internet at IETF 126
Guest Post: At IETF 126, discussions highlighted how AI is beginning to shape the future of Internet infrastructure. Participants identified IPv6 as a critical foundation for large-scale AI ecosystems and explored new approaches.
[Podcast] DNS cold start
Geoff Huston discusses the unexpected behaviours of the DNS when you perform a query after ‘cold start’ with no cached data.
BGP topics from IETF 126
BGP ORIGIN, ASPAs, PAVA, and ASRAs at IETF 126.