
Nice to get news third string... // Last week, ICANN setup a new IP address for one of the thirteen "root name servers" that oversee DNS queries across the net, and it plans on retiring the old address as soon as the late spring. http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server... ==================================================== J. Oquendo SGFA (FW+VPN v4.1) SGFE (FW+VPN v4.1) "I hear much of people's calling out to punish the guilty, but very few are concerned to clear the innocent." Daniel Defoe http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xF684C42E

On Nov 6, 2007, at 3:06 PM, J. Oquendo wrote:
Nice to get news third string...
// Last week, ICANN setup a new IP address for one of the thirteen "root name servers" that oversee DNS queries across the net, and it plans on retiring the old address as soon as the late spring.
http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server...
It was posted to DNS-Operations. Which is where, uh, DNS Operations are discussed.... Plus, as long as one of the IP addresses in your hints file is good, it doesn't really matter after launch. The SOA from one of the roots will override the hints file. -- TTFN, patrick

On Nov 6, 2007, at 3:24 PM, Patrick W. Gilmore wrote:
On Nov 6, 2007, at 3:06 PM, J. Oquendo wrote:
Nice to get news third string...
// Last week, ICANN setup a new IP address for one of the thirteen "root name servers" that oversee DNS queries across the net, and it plans on retiring the old address as soon as the late spring.
http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server...
It was posted to DNS-Operations. Which is where, uh, DNS Operations are discussed....
It was pointed out to me that the sarcasm in this post is not clear. I was not disagreeing, it should have been posted to NANOG (as well as other places). I simply didn't notice it 'cause I saw it elsewhere. Mostly I wanted to give out the info below, which somehow escaped my personal knowledgebase until a very nice person from VeriSign explained it to me at RIPE a couple weeks ago. -- TTFN, patrick
Plus, as long as one of the IP addresses in your hints file is good, it doesn't really matter after launch. The SOA from one of the roots will override the hints file.
-- TTFN, patrick

On Tue, 6 Nov 2007, J. Oquendo wrote:
http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server...
Here is what I posted the last time..... To: "'nanog@merit.edu'" <nanog@merit.edu> Subject: Don't Panic II (Re: updated root hints file) From: Sean Donelan <sean@donelan.com> Date: Wed, 28 Jan 2004 22:10:11 -0500 (EST) The previous change to the root hints was November 5 2002. The previous change was five years before that. The root hints changes do not require any immediate changes by most Internet users. As long as at least one of the IP addresses in your root.zone hints file responds, your name server will automatically use the current set of root name servers. Historically it has taken over 10 years to change all the IP addresses in the root hints file. Past performance is not a guarantee of future performance, but it is likely the root hints will continue to be very stable and change slowly. Client resolvers (i.e most Windows and other end-user machines) use either their ISP or organizations name servers. Most end-users do not need to make any changes. ISP or organization system administrators will update the main name servers for their users. Software developers and operating system vendors distributing Name Server programs will need to update the hints file included in their software distribution sometime before the last IP address in the hints file changes. Operators of resolving name servers will need to update the hints file on their systems, or it may be updated as part of the future vendor software update, sometime before the last IP address changes. Until the hints file is updated, some versions of Domain Name System software will print periodic warnings in the system log to remind the system administrator to check the hints file. Operators of "shadow" or alternative roots will need to update their configurations. Since this is more or less outside the DNS, it is up to those operators to ensure consistent operation. Network operators using "golden networks" to control route flap dampening will need to update their BGP dampening configuration for the new address and to remove the old address. Until updated, dampening may incorrectly ignore routes to the new address during periods of network instability. In practice, this is a rare occurance and the other root servers will still be configured.
participants (3)
-
J. Oquendo
-
Patrick W. Gilmore
-
Sean Donelan