nanog mailing list archives

Re: ICANN registrar supporting v6 glue?


From: Mark Andrews <Mark_Andrews () isc org>
Date: Mon, 2 Jul 2007 09:56:27 +1000 (EST)


In article <20070630133219.GF18222 () MrServer telecomplete net> you write:

I've read your email twice and I dont follow. 

Either you are telling me

a) Provide my own hints with AAAA included (you specifically say thats not what you mean tho)

or

b) Serve my own root zone. From a root operator, surely thats not right either (I hope!)?

        You don't want to override the NS records.  You want to augment the
        address records.  You can do it on a per host basis (which is what I
        do at home) or you can do it by augmenting the contents of
        root-servers.net.  You will note that I have choosen not
        to leak the addresses to anyone other than myself.

        zone "b.root-servers.net" {
                type master;
                file "master/b.root-servers.net";
                notify no;
                allow-query { localhost; };
        };

        zone "f.root-servers.net" {
                type master;
                file "master/f.root-servers.net";
                notify no;
                allow-query { localhost; };
        };

        zone "h.root-servers.net" {
                type master;
                file "master/h.root-servers.net";
                notify no;
                allow-query { localhost; };
        };

        zone "k.root-servers.net" {
                type master;
                file "master/k.root-servers.net";
                notify no;
                allow-query { localhost; };
        };

        zone "m.root-servers.net" {
                type master;
                file "master/m.root-servers.net";
                notify no;
                allow-query { localhost; };
        };

        or

        zone "root-servers.net" {
                type master;
                file "master/root-servers.net";
                notify no;
                allow-query { localhost; };
        }

     In the few couple of years I've only seen two outages with the
     IPv6 root instances.  In both cases they were fixed soon after
     reporting the outage.

So there are v6 roots out there?

        I'm using the IPv6 addresses published by the root server
        operators on http://www.root-servers.org/.  They are the
        addresses that will be added to root-servers.net zone once
        there is agreement to add them.

Where are they hiding and why arent they being provided in
the hints file or NS queries on . ?

        They arn't hiding.  They were published years ago.  It's
        just a long process to get them added to the root-servers.net
        zone.

        I added them to my config on Feb 18 2005 and they had been
        published for a long time when I did that.

-rw-r--r--  1 root  wheel  160 Feb 18  2005 /var/named/master/b.root-servers.net
-rw-r--r--  1 root  wheel  156 Feb 18  2005 /var/named/master/f.root-servers.net
-rw-r--r--  1 root  wheel  162 Feb 18  2005 /var/named/master/h.root-servers.net
-rw-r--r--  1 root  wheel  154 Feb 18  2005 /var/named/master/k.root-servers.net
-rw-r--r--  1 root  wheel  155 Feb 18  2005 /var/named/master/m.root-servers.net

        Mark

Steve


B.ROOT-SERVERS.NET.     3600    IN      A       192.228.79.201
B.ROOT-SERVERS.NET.     3600    IN      AAAA    2001:478:65::53
F.ROOT-SERVERS.NET.     3600    IN      A       192.5.5.241
F.ROOT-SERVERS.NET.     3600    IN      AAAA    2001:500::1035
H.ROOT-SERVERS.NET.     3600    IN      A       128.63.2.53
H.ROOT-SERVERS.NET.     3600    IN      AAAA    2001:500:1::803f:235
K.ROOT-SERVERS.NET.     3600    IN      A       193.0.14.129
K.ROOT-SERVERS.NET.     3600    IN      AAAA    2001:7fd::1
M.ROOT-SERVERS.NET.     3600    IN      A       202.12.27.33
M.ROOT-SERVERS.NET.     3600    IN      AAAA    2001:dc3::35

Note also that various ccTLD's are able to add glue to your zone on
request (notably .fr/.ch/.nl/.se do so already for quite some time)

Greets,
Jeroen


Current thread: