[dns-operations] Quad9 denial of existence for _25._tcp.mx1.p01.antagonist.nl IN TLSA

2019-11-25 Thread Viktor Dukhovni
According DNSViz, and the Cloudflare, Google and Verisign public resolvers the qname below has a TLSA record, but Quad returns an apparently valid denial of existence. It is possible that Quad9 is "the guilty party" here only by accident, and had I asked at another time, some other server would

Re: [dns-operations] Questions on private nameservers registration

2019-11-25 Thread John W. O'Brien
On 2019/11/25 19:57, Wesley Peng wrote: > If I want to run my own nameservers, saying they are: > > ns1.wsly.de. 1.2.3.4 > ns2.wsly.de. 5.6.7.8 > > > Would I put the glues into DE's registry, or shall I put glues into all > registries, including COM, NET, INFO, ccTLD etc? You would publish

Re: [dns-operations] Questions on private nameservers registration

2019-11-25 Thread Wesley Peng
John, on 2019/11/26 9:35, John W. O'Brien wrote: Are ns{1,2}.wsly.de authoritative for wsly.de? Then glue is required in DE. Otherwise probably not [0]. Yes I plan to setup ns{1,2}.wsly.de to be wsly.de's auth-nameservers. Thank you for pointing out that. Regards.

[dns-operations] Questions on private nameservers registration

2019-11-25 Thread Wesley Peng
Hello If I want to run my own nameservers, saying they are: ns1.wsly.de. 1.2.3.4 ns2.wsly.de. 5.6.7.8 Would I put the glues into DE's registry, or shall I put glues into all registries, including COM, NET, INFO, ccTLD etc? Thanks. ___

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Wesley Peng
Thank you for instant support Peter. I love DENIC. on 2019/11/25 22:38, Peter Koch wrote: without knowing details about the registrar/reseller chain that you might be using, informing the registrar of such a change is a prerequisite for the delegation to change at the TLD level. That means,

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Fred Morris
Funny you should mention this. It just occurred to me, although it also apparently occurred to one other soul on the dnsrpz mailing list, you can use RPZ to audit and to some extent contain leakage. Assuming you own example.com, I'm speaking about entries akin to the following:

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Paul Ebersman
jim> What do you consider to be a lot of queries? The root server system jim> collectively handles 500K-1M queries per second. That seems rather jim> a lot to me. YMMV. fw> But globally? For the entire planet? fw> It's certainly beyond what I can run out of my basement using spare fw> parts,

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Florian Weimer
* Jim Reid: >> On 25 Nov 2019, at 20:54, Florian Weimer wrote: >> >> The query numbers are surprisingly low. To me at last. > > What do you consider to be a lot of queries? The root server system > collectively handles 500K-1M queries per second. That seems rather a > lot to me. YMMV. But

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Jim Reid
> On 25 Nov 2019, at 20:54, Florian Weimer wrote: > > The query numbers are surprisingly low. To me at last. What do you consider to be a lot of queries? The root server system collectively handles 500K-1M queries per second. That seems rather a lot to me. YMMV. I don't know of any other

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Bill Woodcock
> On Nov 25, 2019, at 9:54 PM, Florian Weimer wrote: > The query numbers are surprisingly low. To me at last. Duane Wessels did a good study some time ago of queries to the root. I believe over 99% were bogus, not real queries for resolvable things. > Do we know why the number of root

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread bert hubert
On Mon, Nov 25, 2019 at 09:54:55PM +0100, Florian Weimer wrote: > Do we know why the number of root instances has increased? Is it > because of the incoming data is interesting? I would venture the latter. This remains a seriously underdiscussed subject. There is of course "logging of all

Re: [dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Florian Weimer
* Mark Allman: > Left here to be ripped apart ... :-) The query numbers are surprisingly low. To me at last. Do we know why the number of root instances has increased? Is it because of the incoming data is interesting? ___ dns-operations mailing

[dns-operations] root? we don't need no stinkin' root!

2019-11-25 Thread Mark Allman
Left here to be ripped apart ... :-) Mark Allman. On Eliminating Root Nameservers from the DNS, ACM SIGCOMM Workshop on Hot Topics in Networks (HotNets), November 2019. https://www.icir.org/mallman/pubs/All19b/ Abstract: The Domain Name System (DNS) leverages nearly 1K

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Wesley Peng
Thanks for updating the info Victor. > > On Nov 25, 2019 at 10:10 PM, (mailto:ietf-d...@dukhovni.org)> wrote: > > > > On Mon, Nov 25, 2019 at 02:56:51PM +0100, Elmar K. Bins wrote: > > > > ;; AUTHORITY SECTION: > > > wsly.de. 86400 IN NS

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Michele Neylon - Blacknight
If we are directly integrated with the registry then a nameserver change is almost instant. But we aren’t directly integrated with all registries and not all of them handle DNS changes in the same way Some, for example, will do a pre-check before they’ll allow a change. -- Mr Michele Neylon

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Wesley Peng
I saw blacknight does good business on domain industry. How do you handle DNS delegation like my case? Thanks. > > On Nov 25, 2019 at 10:22 PM, (mailto:mich...@blacknight.com)> wrote: > > > > > > That depends on how they’re integrated > > > >

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Peter Koch
On Mon, Nov 25, 2019 at 10:20:17PM +0800, Wesley Peng wrote: > When I changed name servers in registrar, won’t they be registered into DE’s > servers automatically? Thank you. without knowing details about the registrar/reseller chain that you might be using, informing the registrar of such a

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Michele Neylon - Blacknight
That depends on how they’re integrated It’s really a question you need to be asking them -- Mr Michele Neylon Blacknight Solutions Hosting, Colocation & Domains https://www.blacknight.com/ http://blacknight.blog/ Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Personal blog:

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Wesley Peng
Hello When I changed name servers in registrar, won’t they be registered into DE’s servers automatically? Thank you. > > On Nov 25, 2019 at 9:56 PM, mailto:e...@4ever.de)> wrote: > > > > Hi Wesley, > > postmas...@wsly.de (Wesley Peng) wrote:

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Viktor Dukhovni
On Mon, Nov 25, 2019 at 02:56:51PM +0100, Elmar K. Bins wrote: > > ;; AUTHORITY SECTION: > > wsly.de.86400 IN NS art.ns.cloudflare.com. > > wsly.de.86400 IN NS roxy.ns.cloudflare.com. > > In order to update the records in "de" you need your

Re: [dns-operations] Questions about my domain's DNS

2019-11-25 Thread Elmar K. Bins
Hi Wesley, postmas...@wsly.de (Wesley Peng) wrote: > ;; AUTHORITY SECTION: > wsly.de.86400 IN NS ns1.alldomains.hosting. > wsly.de.86400 IN NS ns2.alldomains.hosting. > wsly.de.86400 IN NS ns3.alldomains.hosting.

[dns-operations] Questions about my domain's DNS

2019-11-25 Thread Wesley Peng
Hallo, I am confused about my domain's DNS glues. The domain is: wsly.de When I queried to .de's root nameservers, I got: $ dig wsly.de @n.de.net ; <<>> DiG 9.11.3-1ubuntu1-Ubuntu <<>> wsly.de @n.de.net ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: