IETF Logo Mail Archive

Re: How do we get the whole world to upgrade to DNSSEC capable resolvers?

Mark Andrews <Mark_Andrews@isc.org> Thu, 24 July 2008 02:11 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 842593A6A6B; Wed, 23 Jul 2008 19:11:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id morlSxYms38Y; Wed, 23 Jul 2008 19:11:58 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id A0DC73A69C9; Wed, 23 Jul 2008 19:11:58 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KLqDH-000Iti-Hq for namedroppers-data@psg.com; Thu, 24 Jul 2008 02:05:51 +0000
Received: from [2001:470:1f00:820:214:22ff:fed9:fbdc] (helo=drugs.dv.isc.org) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <marka@isc.org>) id 1KLqDD-000Imj-7X for namedroppers@ops.ietf.org; Thu, 24 Jul 2008 02:05:49 +0000
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.2/8.14.2) with ESMTP id m6O25YhD080674; Thu, 24 Jul 2008 12:05:36 +1000 (EST) (envelope-from marka@drugs.dv.isc.org)
Message-Id: <200807240205.m6O25YhD080674@drugs.dv.isc.org>
To: bert hubert <bert.hubert@netherlabs.nl>
Cc: David Conrad <drc@virtualized.org>, Ben Laurie <ben@links.org>, DNSEXT WG <namedroppers@ops.ietf.org>
From: Mark Andrews <Mark_Andrews@isc.org>
Subject: Re: How do we get the whole world to upgrade to DNSSEC capable resolvers?
In-reply-to: Your message of "Thu, 24 Jul 2008 00:49:08 +0200." <20080723224908.GA1935@outpost.ds9a.nl>
Date: Thu, 24 Jul 2008 12:05:34 +1000
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

> On Thu, Jul 24, 2008 at 08:39:02AM +1000, Mark Andrews wrote:
> > > 2) DNS has been hardened using random source ports
> > 	Which does not work well for large recursive servers due
> > 	to port/descriptor exhaustion.
> 
> Unsure what you refer to - this stuff has been in production for years now,
> at high query levels (20-30kqps per IP address), without problems.
> 
> It takes some work, but high performance is never easy. It is a well solved
> problem however (by now).

	Over how many concurrent ports without introducing queuing
	delays?
 
> 	Bert
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews@isc.org

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>

v2.23.0 | Report a Bug | By Email