MinutesSIG: DNS operationsThursday 26 February 2003, Palace of the Golden Horses Hotel, Kuala Lumpur, MalaysiaMinutes Meeting commenced: 2:00 pm Chair: Joe Abley The Chair introduced the SIG and explained the agenda. He also encouraged any questions or discussions on the mailing list between meetings. Contents
Joe Abley, ISC The Chair reviewed the outstanding action items. dns-16-001: Secretariat to implement proposal "Lame delegation cleanup revised" (prop-004-v001). Update: Open. The status of this action item will be covered in George Michaelson's presentation. Nick Griffin, New Zealand Registry Services The presenter provided a brief background to the New Zealand Registry Service (NZRS) and the .nz domain name space, which now holds more than 145,000 names. He noted that there is no legislation in New Zealand regarding domain names and reviewed the structure of the domain name environment in New Zealand. The presenter also announced the availability of the registry systems software used by NZRS to run the .nz registry as Open Source, free software. Questions and discussion Action items Andrei Robachevsky, RIPE NCC This presentation provided a background to the root server system, which provides 13 root servers, run by 12 operators. The presenter noted that 13 is a hard limit in the DNS system. All root servers are equal in terms of the DNS information they carry. The presenter discussed the evolution of the root server system and then discussed the introduction of anycasting. Anycasting provides many benefits by allowing the root servers to be cloned and made available locally. The presenter then discussed the deployments of anycast mirrors of the K-root, which have been made by RIPE NCC. RIPE NCC now plans to deploy 3-5 global nodes and 10-15 local nodes in 2004. Questions and discussion Action items George Michaelson, APNIC The presenter explained that the more anycast nodes are deployed in the region, the better the resistance to denial of service attacks. Multiple distributed deployments also boost quality of service. Anycast mirrors also build a greater resilience to loss of connectivity. To achieve better resistance to denial of service attacks, the mirrors are generally deployed in locations with a high degree of interconnection. The presenter noted that measurements so far have shown very high benefits in terms of speed of service. The CN node has improved DNS RTT to root by 15 times. Roots in local regions also protect isolated countries against failures from undersea cables. The presenter provided an overview of APNIC's role in root services. APNIC facilitates roots services, provides coordination and funding, and undertakes formal agreements. However, APNIC is not a root server operator. APNIC has deployed root mirrors in Hong Kong, Seoul, Beijing, Taipei, Singapore, and Brisbane. In 2004, APNIC expects to perform additional deployments of F, I, and K roots. APNIC will re-issue the call for expressions of interest in hosting a root server. Finally, the presenter gave an overview of how root mirrors are deployed and what equipment and hosting services are required. Questions and discussion Action items George Michaelson, APNIC The presenter described the necessity for reverse DNS services and the problems that can arise if the reverse DNS data is not accurate. He then described the work done since APNIC 16, where it was decided that the Secretariat should identify and rectify lame DNS registrations. The original proposal was to be implemented three months after approval. This implementation has not yet been met as other changes in APNIC's DNS systems need to be completed first. The lame delegation clean up has been rescheduled for the second quarter of 2004. Questions and discussion Action items Joao Damas, ISC The presenter described progress in OARC (Operations, Analysis, and Research Center), which is an information sharing and analysis project for global DNS. This project features incident response, operational characterisation of the normal state of the system, testing of configurations and implementations, analysis of collected DNS data, and outreach to assist efforts to defend against attacks and improve operator knowledge. The presenter explained that OARC will have membership, which is aimed at four types of institutions: Root and TLD operators, other large DNS operators, government institutions, research and analysis institutions with a strong operational focus. The presenter encouraged any interested parties to contact OARC for more information. Questions and discussion Action items Meeting closed: 3:20 pm Minuted by: Gerard Ross Open action items
|
