Re: [DNSOP] Adding more example configurations to draft-ietf-dnsop-7706bis

["John Levine" <[e-mail]>]

In article <[e-mail]> you write:
>The 7706-bis text changes that to say:
>
>   The examples here use a loopback address of 127.12.12.12, but typical
>   installations will use 127.0.0.1.  The different address is used in
>   order to emphasize that the root server does not need to be on the
>   device at the name "localhost" which is often locally served as
>   127.0.0.1.
>
>My reading of this is that "the device" referred to is still "the local
>device", not "a n other device".  I think the text is just trying to say
>"just because it's on loopback doesn't require that it be *called*
>localhost".

The usual reason not to put the local root on 127.0.0.1 is that's
where the cache is.  Depending on the quirks of your system, you might
put the local root on another loopback address in 127/8. on a
different port on 127.0.0.1 (works fine in unbound/nsd, haven't tried
it on bind), or even port 53 or another port on a real interface and
firewall out external queries.

R's,
John