BGP Anycast Node Requirements for Authoritative Name Servers
|
|
|
- Debra Boone
- 5 years ago
- Views:
Transcription
1 BGP Anycast Node Requirements for Authoritative Name Servers March 19, th IETF meeting Yasuhiro Orange Morishita <yasuhiro@jprs.co.jp> Shinta Sato <shinta@jprs.co.jp> Takayasu Matsuura <matuura@jprs.co.jp> Yoshiro YONEYA <yone@jprs.co.jp>
2 Background JAPAN REGISTRY SERVICES IP anycast technology is now being deployed in authoritative name servers root servers C, F, I, J, K, M TLD servers Over 50 TLDs DNS servers are now in IP Anycast mesh (really!) Some DNS hosting service providers are now using IP anycast technology ISC, PCH, UltraDNS, etc. These serve some TLDs 2
3 Motivation Increasing physical server nodes without changing DNS protocol Not to exceed UDP packet size limitation Increasing tolerance against hardware troubles and/or cyber attacks Damages are localized Improvement of query response time from anywhere in the world Distribution of load between nodes 3
4 Principle Technique to increase reliability Single contact, consistent policy Never deploy disordered sites Use well known, matured techniques Common guidelines (BCP) is required RFC 3258 draft-ietf-grow-anycast-03.txt RFC 2182 RFC
5 Our intention To have common IP anycast guideline for TLD DNS servers draft-morishita-dnsop-anycast-node-requirements- 02.txt Based on JP s experiences Work in progress Why TLDs? Due to different features from Root servers: Larger zone size Higher zone update frequency 5
6 Targets and main focuses of our document Targets BGP anycast Global node Main focuses Selection of the Internet service provider (ISP) Selection of the IP anycast node location Evaluation of proper cost Evaluation of proper measurement and monitoring methods 6
7 Selection of the ISP JAPAN REGISTRY SERVICES Requirement To have geographical and network topological diversity Evaluation points Reliability of the ISP backbone network Connectivity of ISP outside area ISP s peering status Connectivity for DNS service address block and AS number Connectivity for administration Connectivity for IPv6 7
8 Selection of the IP anycast node location Requirement To conform to requirements of RFC 2182 and 2870 Evaluation points Security level Redundancy of electric power supply Tolerance against disasters Diversity of locations 8
9 Evaluation of proper cost Initial (construction) cost and Running (maintenance) cost Equipments (routers, switches, servers, etc.) Facilities (data center, connectivity, etc.) Human resources (daily, emergency, etc.) Serious in remote site 9
10 Evaluation of proper measurement and monitoring methods ICANN s CNNP test is one of useful guideline for validating IP anycast node Continuous measurement Routing stability, Reachability Round trip time It is hard to make the worldwide measuring points RIPE DNSMON is one of possible solution 10
11 Our findings through oversea site Running cost is dominant Facilities Human resources and traveling expense for troubleshooting and recovery Difference of business practices Based on different commercial law Some data center requires insurance contract Hard to have contract with foreign customer Others to remind Overheat due to rack placement Communication with remote hand Shipping for hardware replace 11
12 Future Works / Discussions JAPAN REGISTRY SERVICES Update the guideline and add other effective portions in it Selection of node locations In some places, there are two or more root (and TLD) servers at the same locations / places... Is it really redundant? Selection of server hardware Selection of server software Selection of remote maintenance tool / hardware How to do effective (and reasonable) remote maintenance How to do effective (and reasonable) measurement 12
13 Future Works / Discussions (cont.) Any other missing points? Any other remarkable experiences? How can TLDs / *IRs cooperate on this topics? No need? Buy existing services? Information sharing? Operational experiences More concrete formation? 13
14 Questions and comments? Any comments are welcome 14
15 Acknowledgements JAPAN REGISTRY SERVICES This memo is included in the results of the research activities funded by National Institute of Information and Communications Technology (NICT). 15
.JP technical update
.JP technical update September 2, 2003 RIPE 46 General Meeting Yasuhiro Orange Morishita Japan Registry Service, Co., Ltd. (JPRS) http://jprs.jp/ http://.jp/ Topics Japanese JP Domain
Measurement of BGP Anycast effects experiences in.jp
Measurement of BGP Anycast effects experiences in.jp Adding an anycast node at New York Kazunori Fujiwara Masato Minda, Shinta Sato, Izuru Shirai, Takayasu Matsuura Japan Registry
Measurement of Anycast Effects - from the experience on.jp anycast deployment -
Measurement of Anycast Effects - from the experience on.jp anycast deployment - Shinta Sato Japan Registry Services Co., Ltd. (JPRS) RIPE 54 DNS Working Group Thursday 10 May 2007
4. Performance Specifications. 4.1 Goals and intentions of Service Level Agreements and Public Service Monitoring. Goals of Service Level Agreements:
4. Performance Specifications 4.1 Goals and intentions of Service Level Agreements and Public Service Monitoring Goals of Service Level Agreements: Service Level Agreements are set between ICANN and Registry
Root Server Operated by ICANN. DNS Engineering DNS Symposium Madrid May 2017
Root Server Operated by ICANN DNS Engineering DNS Symposium Madrid May 2017 Root Server in a nutshell + RSSAC 026 + Entry point to the root server system. + Authoritative name server that answer queries
Draft Applicant Guidebook, v3
Draft Applicant Guidebook, v3 Module 5 Please note that this is a discussion draft only. Potential applicants should not rely on any of the proposed details of the new gtld program as the program remains
DS TTL shortening experience in.jp
DS TTL shortening experience in.jp APRICOT2014 DNS Session 27 Feb 2014 Yoshiro YONEYA Copyright 2014 Japan Registry Services Co., Ltd. 1 What is DS? Establish a DNSSEC chain
.BIZ Agreement Appendix 10 Service Level Agreement (SLA) (22 August 2013)
.BIZ Agreement Appendix 10 Service Level Agreement (SLA) (22 August 2013) Registry Operator and ICANN agree to engage in good faith negotiations to replace this Appendix 10 with a Service Level Agreement
Draft Applicant Guidebook, v4
Draft Applicant Guidebook, v4 Module 5 Please note that this is a discussion draft only. Potential applicants should not rely on any of the proposed details of the new gtld program as the program remains
Dense Anycast Deployment of DNS Authority Servers
Dense Anycast Deployment of DNS Authority Servers MENOG 10 Dubai, April 2012 Dave Knight Contents Background Expansion of L root Redesign Further Work Background In the beginning Authority service provided
K-Root Nameserver Operations
K-Root Nameserver Operations Andrei Robachevsky Chief Technical Officer andrei@ripe.net 1 Outline Root Server System What is a root server? Where is the root? Anycast Routing The basics Advantages of using
Internet Engineering Task Force (IETF) Request for Comments: Category: Best Current Practice ISSN: March 2017
Internet Engineering Task Force (IETF) Request for Comments: 8109 BCP: 209 Category: Best Current Practice ISSN: 2070-1721 P. Koch DENIC eg M. Larson P. Hoffman ICANN March 2017 Initializing a DNS Resolver
IPv6 Address Allocation and Assignment Policy
IPv6 Address Allocation and Assignment Policy How to read this draft document: This document relates to a project to improve the readability of RIPE policy documents. If approved, it will replace ripe-512,
Dense Anycast Deployment of DNS Authority Servers
Dense Anycast Deployment of DNS Authority Servers NANOG 55 Vancouver, June 2012 Dave Knight Contents Background Expansion of L root Redesign Further Work Background In the beginning Authority service provided
RIPE Network Coordination Centre. K-root and DNSSEC. Wolfgang Nagele RIPE NCC.
K-root and DNSSEC Wolfgang Nagele RIPE NCC RIPE NCC One of the five Regional Internet Registries Provides IP address and AS number resources to Europe and Middle-East regions DNS related work - Parent
Network Working Group Request for Comments: Category: Best Current Practice Network Solutions R. Plzak SAIC June 2000
Network Working Group Request for Comments: 2870 Obsoletes: 2010 BCP: 40 Category: Best Current Practice R. Bush Verio D. Karrenberg RIPE NCC M. Kosters Network Solutions R. Plzak SAIC June 2000 Status
Utilizing Multiple Home Links in Mobile IPv6
Utilizing Multiple Home Links in Mobile IPv6 Hongbo Shi and Shigeki Goto Department of Computer Science, Waseda University 3-4-1 Ohkubo Shijuku-ku, Tokyo, 169-8555 JAPAN Email: {shi, goto}@goto.info.waseda.ac.jp
ROOT SERVERS MANAGEMENT AND SECURITY
ROOT SERVERS MANAGEMENT AND SECURITY WSIS African regional meeting 01/29/05 ALAIN PATRICK AINA aalain@trstech.net What is DNS(1)? Addresses are used to locate objects Names are easier to remember than
K-Root Name Server Operations
K-Root Name Server Operations Andrei Robachevsky andrei@ripe.net 1 Outline Root Server System brief update Architecture Current locations Anycast deployment K.root-servers.net Server Major milestones Current
Experience with 8 bit label in JP Zone
Experience with 8 bit label in JP Zone 1st August 2004 IEPG Meeting Yoshiro YONEYA Japan Registry Service Overview Introduction Specification Result of Survey Observed effects 2 Introduction
DNS Anycast for High Availability and Performance
White Paper DNS Anycast for High Availability and Performance by Timothy Rooney Product management director BT Diamond IP DNS Anycast for High Availability and Performance By Tim Rooney, Director, Product
Improving DNS Security and Resiliency. Carlos Vicente Network Startup Resource Center
Improving DNS Security and Resiliency Carlos Vicente Network Startup Resource Center Threats to DNS Server crashes Server compromise Denial of service attacks Amplification attacks Cache poisoning Targeted
HKIX Updates & Bilateral Peering over HKIX
HKIX Updates & Bilateral Peering over HKIX Che-Hoo CHENG 鄭志豪 The Chinese University of Hong Kong / Hong Kong Internet Exchange 29 JAN 2010 Introduction of HKIX (1/2) HKIX is a Settlement-Free Layer-2 2
RIPE Atlas. Philip Smith Network Startup Resource Center (NSRC) PacNOG th July 2014, Port Vila, Vanuatu
Philip Smith Network Startup Resource Center (NSRC) PacNOG 15 14 th July 2014, Port Vila, Vanuatu Intro https://atlas.ripe.net 3 Atlas in the Pacific 4 Measurement Devices 5 v1 & v2: Lantronix XPort Pro
Intended status: Informational Expires: January 5, 2015 July 4, 2014
DNSOP Internet-Draft Intended status: Informational Expires: January 5, 2015 G. Deng N. Kong S. Shen CNNIC July 4, 2014 Approach on optimizing DNS authority server placement draft-deng-dns-authority-server-placement-00
In the Domain Name System s language, rcode 0 stands for: no error condition.
12/2017 SIMPLE, FAST, RESILIENT In the Domain Name System s language, rcode 0 stands for: no error condition. If a DNS server answers a query with this result code, the service is running properly. This
DNS/DNSSEC Workshop. In Collaboration with APNIC and HKIRC Hong Kong. Champika Wijayatunga Regional Security Engagement Manager Asia Pacific
DNS/DNSSEC Workshop In Collaboration with APNIC and HKIRC Hong Kong Champika Wijayatunga Regional Security Engagement Manager Asia Pacific 22-24 January 2018 1 Agenda 1 2 3 Introduction to DNS DNS Features
gtld Applicant Guidebook (v ) Module 5
gtld Applicant Guidebook (v. 2012-06-04) Module 5 4 June 2012 This module describes the final steps required of an applicant for completion of the process, including execution of a registry agreement with
Measuring IPv6 Adoption
Measuring IPv6 Adoption Presenter: Johannes Zirngibl Technische Universität München Munich, 18. May 2017 Author: Jakub Czyz (University of Michigan) Mark Allman (International Computer Science Institute)
IPv6 How-To for a Registry 17th CENTR Technical Workshop
IPv6 How-To for a Registry 17th CENTR Technical Workshop Amsterdam, October 2007 Alvaro Vives (alvaro.vives@consulintel.es) Jordi Palet (jordi.palet@consulintel.es) Introduction Main steps to be undertaken
P2PSIP Draft Charter. Dean Willis March 2006
P2PSIP Draft Charter Dean Willis March 2006 Purpose The purpose of the Peer-to-Peer (P2P) Session Initiation Protocol working group (P2PSIP WG) is to develop guidelines and mechanisms for the use of the
Internet 101. The Technical Roots of Internet Governance. Marco Hogewoning and Chris Buckridge External Relations RIPE NCC
Internet 101 The Technical Roots of Internet Governance Marco Hogewoning and Chris Buckridge External Relations RIPE NCC EuroDIG 2014 Berlin - Germany 12 June 2014 About this session 2 An overview of the
Internet Engineering Task Force (IETF) Request for Comments: 7706 Category: Informational ISSN: November 2015
Internet Engineering Task Force (IETF) Request for Comments: 7706 Category: Informational ISSN: 2070-1721 W. Kumari Google P. Hoffman ICANN November 2015 Decreasing Access Time to Root Servers by Running
Internet Engineering Task Force. Intended Status: Informational. Additional Reserved Top Level Domains draft-chapin-additional-reserved-tlds-00
Internet Engineering Task Force Internet-Draft Intended Status: Informational Expires: July 2014 L. Chapin Interisle M. McFadden InterConnect Communications January 7, 2014 Additional Reserved Top Level
IXP Techniques. 4 7 July 2017, Suva, Fiji.
IXP Techniques 4 7 July 2017, Suva, Fiji. Acknowledgment Cisco Systems Philip Smith 2 Overview What is an Internet Exchange Point (IXP)? What is the value of Peering? How to build an IXP? IXP Design Considerations
A Root DNS Server. Akira Kato. Brief Overview of M-Root. WIDE Project
A Root DNS Server Akira Kato WIDE Project kato@wide.ad.jp Brief Overview of M-Root Assumes basic knowledge on DNS Dr. Tatsuya Jinmei has introduced in Nov 19, 2004 What s Root Servers? Start point of the
The Internet Ecosystem
The Internet Ecosystem How does the Internet really work? Alvaro Retana (aretana@cisco.com) Distinguished Engineer, Cisco Services Original Slides with Russ White (russ@riw.us) The Net What are the protocols
IETF RFCs Supported by Cisco NX-OS Unicast Features Release 6.x
IETF Supported by Cisco NX-OS Unicast Features Release 6.x BGP, page 1 First-Hop Redundancy Protocols, page 2 IP Services, page 3 IPv6, page 3 IS-IS, page 4 OSPF, page 5 RIP, page 5 BGP RFC 1997 BGP Communities
DNSSEC: A game changing example of multi-stakeholder cooperation. ICANN Meeting, Singapore 21 June 2011
DNSSEC: A game changing example of multi-stakeholder cooperation ICANN Meeting, Singapore 21 June 2011 richard.lamb@icann.org ICANN ICANN is a global organization that coordinates the Internet s unique
REGISTRATION DATA DIRECTORY SERVICE (WHOIS) SPECIFICATION
REGISTRATION DATA DIRECTORY SERVICE (WHOIS) SPECIFICATION [Note: ICANN will be proposing updated language regarding the term Whois to comply with SSAC recommendations. The updated language will not represent
RIPE NCC Technical Services. Kaveh Ranjbar, Chief Information Officer
RIPE NCC Kaveh Ranjbar, Chief Information Officer MENOG 15 Dubai, UAE 2 April 2015 Overview 2 RIPE Atlas K-root expansion DNS services RIPEstat Research Mostly global services, accessible by everyone -
Introduction to The Internet
Introduction to The Internet ITU/APNIC/MOIC IPv6 Workshop 19 th 21 st June 2017 Thimphu These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/)
DNS and ICANN. Laurent Ferrali. 27th August 2018
Laurent Ferrali 27th August 2018 DNS and ICANN ITU Annual Regional Human Capacity Building Workshop on Strengthening Capacities in Internet Governance in Africa, Abuja, Nigeria 1 DNS? 2 Unique Names and
What is an Internet exchange Point (IXP)?
What is an IXP? What is an Internet exchange Point (IXP)? The Internet is an interconnection of networks Each controlled by separate entities Generally called Internet Service Providers (ISPs) Grouped
Root DNS Anycast in South Asia
Root DNS Anycast in South Asia Anurag Bhatia, Network Researcher JANOG 38 What are root DNS servers? Authoritative DNS servers for top level dot (like com. / net. etc) Knows authoritative DNS server of
Two days in The Life of The DNS Anycast Root Servers
Two days in The Life of The DNS Anycast Root Servers Ziqian Liu Beijing Jiaotong Univeristy Bradley Huffaker, Marina Fomenkov Nevil Brownlee, and kc claffy CAIDA PAM2007 Outline DNS root servers DNS anycast
A Look at RFC 8145 Trust Anchor Signaling for the 2017 KSK Rollover
A Look at RFC 8145 Trust Anchor Signaling for the 2017 KSK Rollover Duane Wessels DNS-OARC 26 San Jose, CA September 29, 2017 Background 2 2017 Root Zone KSK Rollover October 11, 2017! Root zone DNSKEY
Introduction to The Internet
Introduction to The Internet ITU/APNIC/MICT IPv6 Security Workshop 23 rd 27 th May 2016 Bangkok Last updated 5 th May 2015 1 Introduction to the Internet p Topologies and Definitions p IP Addressing p
Avi Freedman Chief Network Scientist, Akamai Chief Network Architect, FastNet
Avi Freedman Chief Network Scientist, Akamai Chief Network Architect, FastNet Do we spend enough energy worrying about security, vs. scalability and reliability? Proposing some thought topics; lab and
Security and Stability Advisory Committee!! Activities Update! ICANN Los Angeles Meeting! October 2014! #ICANN51
Security and Stability Advisory Committee!! Activities Update! ICANN Los Angeles Meeting! October 2014! 1 Agenda 1. Overview (5 minutes) 2. Recent Achievements (5 minutes) 3. IANA Functions Stewardship
An overview on Internet Measurement Methodologies, Techniques and Tools
An overview on Internet Measurement Methodologies, Techniques and Tools AA 2011/2012 emiliano.casalicchio@uniroma2.it (Agenda) Lezione 2/05/2012 Part 1 Intro basic concepts ISP Traffic exchange (peering)
Stichting NLnet Labs NLnet Labs
Stichting NLnet Labs NLnet Labs To develop Open Source Software and Open Standards for the benefits of the Internet. Paraphrased Article 1 of the Foundations Charter Areas of Interest DNS IP and Routing
The term "router" in this document refers to both routers and Layer 3 switches. Step Command Remarks. ipv6 host hostname ipv6-address
Contents Configuring IPv6 DNS 1 Overview 1 Configuring the IPv6 DNS client 1 Configuring static domain name resolution 1 Configuring dynamic domain name resolution 1 Displaying and maintaining IPv6 DNS
DNS Security. Wolfgang Nagele DNS Group Manager
DNS Security Wolfgang Nagele DNS Group Manager DNS: the Domain Name System Specified by Paul Mockapetris in 1983 Distributed Hierarchical Database Main purpose: Translate names to IP addresses Since then:
Recursives in the Wild: Engineering Authoritative DNS Servers
Recursives in the Wild: Engineering Authoritative DNS Servers Moritz Müller 1,2, Giovane C. M. Moura 1, Ricardo de O. Schmidt 1,2, John Heidemann 3 1 SIDN Labs The Netherlands 2 University of Twente The
DNSSEC for the Root Zone. ICANN 37 Nairobi March 2010
DNSSEC for the Root Zone ICANN 37 Nairobi March 2010 Kim Davies, ICANN This design is the result of a cooperation between ICANN & VeriSign with support from the U.S. DoC NTIA Design Design Requirements
RSSAC001. Service Expectations of Root Servers. Service Expectations of Root Servers
Service Expectations of Root Servers STATUS: is approved by the RSSAC on 11/20/2014. It will be held for publication in tandem with a complementary RFC by the IAB, specifying the DNS Root Name Service
Top-Down Network Design
Top-Down Network Design Chapter Six Designing Models for Addressing and Naming Copyright 2010 Cisco Press & Priscilla Oppenheimer Guidelines for Addressing and Naming Use a structured model for addressing
c anomaly detection using a distributed measurement network
Tra c anomaly detection using a distributed measurement network Razvan Oprea Supervisor: Emile Aben (RIPE NCC) System and Network Engineering February 8, 2012 Outline Introduction Similar projects Research
draft-ietf-magma-igmp-proxy-04.txt Brian Haberman, Caspian Networks Hal Sandick, Sheperd Middle School Expire: March, 2004 September, 2003
MAGMA Working Group Bill Fenner, AT&T Research INTERNET-DRAFT Haixiang He, Nortel Networks draft-ietf-magma-igmp-proxy-04.txt Brian Haberman, Caspian Networks Hal Sandick, Sheperd Middle School Expire:
USING TRANSACTION SIGNATURES (TSIG) FOR SECURE DNS SERVER COMMUNICATION
USING TRANSACTION SIGNATURES (TSIG) FOR SECURE DNS SERVER COMMUNICATION 11-30-2016 USING TRANSACTION SIGNATURES (TSIG) FOR SECURE DNS SERVER COMMUNICATION Transaction Signatures (TSIG) provide a secure
DNS Delegation Requirements draft-wallstrom-dnsop-dns-delegation-requirements
DNS Delegation Requirements draft-wallstrom-dnsop-dns-delegation-requirements Authors: Speaker: Patrik Wallström Jakob Schlyter Vincent Levigneron
SDN Controllers in the WAN: protocols and applications
SDN Controllers in the WAN: protocols and applications Julian Lucek jlucek@juniper.net @julianlucek Agenda SDN Controller for WAN concept Enabling protocols BGP Link State (BGP-LS) Path Computation Element
IPv6 Multi-Prefix Environment ~ Concept, Issues, and Solutions ~
IPv6 Multi-Prefix Environment ~ Concept, Issues, and Solutions ~ APNIC Meeting 22 - IPv6 technical SIG Intec NetCore, Inc. IPv6 R&D Group Ken-ichi Kanayama What is IPv6 Multi-Prefix environment? IPv6 Multi-Prefix
TTM AS-level Traceroutes
TTM AS-level Traceroutes Matching IPs to ASes René Wilhelm New Projects Group RIPE NCC 1 Motivation TTM performs frequent traceroutes to find closest IP route for delay measurements
One Namespace, Many Circles. Dr. Paul Vixie, CEO Farsight Security, Inc.
One Namespace, Many Circles Dr. Paul Vixie, CEO Farsight Security, Inc. DNS Works Only Because of Voluntary Cooperation Every Internet host chooses Recursive DNS servers Can either believe ISP settings,
IPv6 implementation in a multi-vendor network.
IPv6 implementation in a multi-vendor network. Roque Gagliano www.antel.com.uy Agenda motivation. first experience. backbone deployment. addressing. routing. multi-vendor environment. conclusion / next
Ivano Guardini Telecom Italia Lab March 2002
Ivano Guardini Telecom Italia Lab ivano.guardini@tilab.com March 2002 Developing IPv6 ISPs Why IPv6? The real reason for IPv6 is that the IPv4 addresses are rapidly running out assigned IPv4 addresses:
IETF Activities Update
IETF Activities Update Marla Azinger marla.azinger@frontiercorp.com ARIN XXV APR 20, 2010 Toronto Note This presentation is not an official IETF report There is no official IETF Liaison to ARIN or any
RSSAC024: Key Technical Elements of Potential Root Operators
RSSAC024: Key Technical Elements of Potential Root Operators An Advisory from the ICANN Root Server System Advisory Committee (RSSAC) 4 November 2016 Preface This is an Advisory to the Internet Corporation
Anycast vs. DDoS: Evaluating Nov. 30
Anycast vs. DDoS: Evaluating Nov. 30 Giovane C. M. Moura 1, Ricardo de O. Schmidt 2, John Heidemann 3, Wouter B. de Vries 2, Moritz Müller 1, Lan Wei 3, Cristian Hesselman 1 1 SIDN Labs 2 University of
Cloud DNS. High Performance under any traffic conditions from anywhere in the world. Reliable. Performance
Cloud DNS High Performance under any traffic conditions from anywhere in the world Secure DNS System Reduce vulnerability to spoofing and distributed denial of service (DDoS) attacks Reliable Performance
A paper on DNSSEC - NSEC3 with Opt-Out
A paper on DNSSEC - NSEC3 with Opt-Out DNSSEC A Way Forward for TLD Registries Method for faster adoption of DNSSEC Providing greater security with minimal impact on customers, registries and Zone Management
Service Level Agreement
This ( ) sets forth the specific terms and conditions under which LightEdge Solutions, Inc. ( LightEdge ) shall supply all Managed Services to Customer. The Master Agreement entered into between LightEdge
cctld Best Practices & Considerations John Crain Internet Corporation for Assigned Names and Numbers
cctld Best Practices & Considerations John Crain Internet Corporation for Assigned Names and Numbers cctld as a public trust cctlds are designated to operators who will operate them in the best interests
President s Report 2009
President s Report 2009 Paul Twomey, President and CEO Public Forum 2 March 2009 At Large Summit New gtld Program IDN cctld Fast Track 2010 Operating Plan and Budget Improving Institutional Confidence
Denial of Service Protection Standardize Defense or Loose the War
Denial of Service Protection Standardize Defense or Loose the War ETSI : the threats, risk and opportunities 16th and 17th - Sophia-Antipolis, France By: Emir@cw.net Arslanagic Head of Security Engineering
Computer Science 461 Midterm Exam March 14, :00-10:50am
NAME: Login name: Computer Science 461 Midterm Exam March 14, 2012 10:00-10:50am This test has seven (7) questions, each worth ten points. Put your name on every page, and write out and sign the Honor
IXP Design Considerations
IXP Design Considerations Where are we? Day 3 : Stage 4 Day 2 : Stage 3 Day 1 : Stage 2 Day 1 : Stage 1 Building the concept of Routing Routing Introduction Demystifying IXP Concept What is IXP? Value
DDoS made easy. IP reflection attacks for fun and profit. Gert Döring, SpaceNet AG, München. DECIX/ECO security event,
DDoS made easy IP reflection attacks for fun and profit Gert Döring, SpaceNet AG, München DECIX/ECO security event, 04.12.14, Frankfurt Agenda what are IP reflection attacks? why are they so effective
Request for Comments: 3172 BCP: 52 September 2001 Category: Best Current Practice
Network Working Group G. Huston, Editor Request for Comments: 3172 IAB BCP: 52 September 2001 Category: Best Current Practice Management Guidelines & Operational Requirements for the Address and Routing
DNS Related Activities at the RIPE NCC
DNS Related Activities at the RIPE NCC Henk Uijterwaal RIPE NCC New Projects Group Amersfoort, 29 August 2005 1 Agenda RIPE and the RIPE NCC Who we are What we do DNS related areas where we are active
DNS Operational Experiences in JPRS/.JP - DNS itself, IPv6, IDN, ENUM -
DNS Operational Experiences in JPRS/.JP - DNS itself, IPv6, IDN, ENUM - February 22, 2005 APRICOT 2005 Tutorial Yasuhiro Orange Morishita Japan Registry Services Co., Ltd. (JPRS)
BGP Scaling Techniques
BGP Scaling Techniques ISP Workshops These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/) Last updated
Network Working Group Request for Comments: 3446 Category: Informational H. Kilmer D. Farinacci Procket Networks January 2003
Network Working Group Request for Comments: 3446 Category: Informational D. Kim Verio D. Meyer H. Kilmer D. Farinacci Procket Networks January 2003 Status of this Memo Anycast Rendevous Point (RP) mechanism
Request for Comments: 7314 Category: Experimental July 2014 ISSN: Extension Mechanisms for DNS (EDNS) EXPIRE Option.
Independent Submission M. Andrews Request for Comments: 7314 ISC Category: Experimental July 2014 ISSN: 2070-1721 Abstract Extension Mechanisms for DNS (EDNS) EXPIRE Option This document specifies a method
RIPE NCC DNS Update. Anand Buddhdev Oct 2016 RIPE 73
RIPE NCC DNS Update Anand Buddhdev Oct 2016 RIPE 73 The DNS team Anand Colin Iñigo Paul Florian Romeo Anand Buddhdev RIPE 73 27 Oct 2016 2 K-root AS 25152 Status Active at 44 sites - Five core sites -
DNS Infrastructure Distribution. Steve Gibbard Packet Clearing House
DNS Infrastructure Distribution Steve Gibbard Packet Clearing House http://www.pch.net/ scg@pch.net Introduction Previous talk on importance of keeping critical infrastructure local. Without local infrastructure,
How does Internet (Big-I) routing work? The Internet is broken up into Autonomous Systems (AS) An AS is an administrative boundary. Each ISP has 1 or
Internet Routing Robustness Improving ftp://engr.ans.net/pub/slides/ndss/feb-1999/ Curtis Villamizar How does Internet routing work? How noticeable are routing related outages? Why have
Network Security Part 3 Domain Name System
Network Security Part 3 Domain Name System Domain Name System The$domain$name$system$(DNS)$is$an$applica6on7layer$ protocol$$for$mapping$domain$names$to$ip$addresses$ DNS www.example.com 208.77.188.166
DNS Security and DNSSEC in the root zone Luzern, Switzerland February 2010
DNS Security and DNSSEC in the root zone Luzern, Switzerland February 2010 Kim Davies Manager, Root Zone Services Internet Corporation for Assigned Names & Numbers Recap DNS originally not designed with
Removing IPv6 PI RIPE Jordi Palet
Removing IPv6 PI RIPE-2018-05 Jordi Palet (jordi.palet@theipv6company.com) 1 Removing IPv6 PI (=IPv6 Persistent Individual) RIPE-2018-05 Jordi Palet (jordi.palet@theipv6company.com) 2 Summary of Proposal
Internet Engineering Task Force (IETF) Request for Comments: 6441 BCP: 171 November 2011 Category: Best Current Practice ISSN:
Internet Engineering Task Force (IETF) L. Vegoda Request for Comments: 6441 ICANN BCP: 171 November 2011 Category: Best Current Practice ISSN: 2070-1721 Abstract Time to Remove Filters for Previously Unallocated
CDAR Continuous Data-driven Analysis of Root Stability
CDAR Progress report DNS WG Ripe 73 Jaap Akkerhuis (NLnet Labs) DISCLAIMER: All data subject to change CDAR Study Objective Analyze the technical impact of the introduction of new gtlds on the stability
A Day in the Life of an Address. Bill Fenner AT&T Labs - Research IETF Routing Area Director
A Day in the Life of an Address Bill Fenner AT&T Labs - Research fenner@research.att.com IETF Routing Area Director 1 Overview Addressing Routing Policy Data 2 Overview Addressing Routing Policy Data 3
Network Security - ISA 656 Routing Security
Network Security - ISA 656 Angelos Stavrou December 4, 2007 What is? What is Routing Security? History of Routing Security Why So Little Work? How is it Different? The Enemy s Goal? Bad guys play games
DNS Security. Wolfgang Nagele DNS Services Manager
DNS Security Wolfgang Nagele DNS Services Manager DNS: the Domain Name System Specified by Paul Mockapetris in 1983 Distributed Hierarchical Database Main purpose: Translate names to IP addresses Since
Regional Internet Registries. Statistics & Activities
Regional Internet Registries Statistics & Activities IEPG @ IETF 58 Minneapolis Prepared By APNIC, ARIN, LACNIC, RIPE NCC 9 November 2003 IEPG @ IETF 58 Minneapolis Overview Internet Number Resource Status
Internet Kill Switches Demystified
Internet Kill Switches Demystified Benjamin Rothenberger, Daniele E. Asoni, David Barrera, Adrian Perrig EuroSec 17, Belgrade B.Rothenberger 23.04.2017 1 B.Rothenberger 23.04.2017 2 Internet Kill Switches
APNIC & Internet Address Policy in the Asia Pacific
APNIC & Internet Address Policy in the Asia Pacific NZ Internet Industry Forum Auckland, 29 November 2001 Anne Lord, APNIC Overview Introduction to APNIC Policy Development Address Management APNIC Update