IETF Logo Mail Archive

Re: [DNSOP] m.root-servers.net DNSSEC TCP failures

Chris Thompson <cet1@cam.ac.uk> Wed, 17 March 2010 14:33 UTC

Return-Path: <cet1@hermes.cam.ac.uk>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 33EC63A6C49 for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 07:33:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.734
X-Spam-Level:
X-Spam-Status: No, score=-5.734 tagged_above=-999 required=5 tests=[AWL=-0.865, BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, J_CHICKENPOX_84=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OY5MFI1O+GFZ for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 07:33:04 -0700 (PDT)
Received: from ppsw-5.csi.cam.ac.uk (ppsw-5.csi.cam.ac.uk [131.111.8.135]) by core3.amsl.com (Postfix) with ESMTP id 9E20B3A6C51 for <dnsop@ietf.org>; Wed, 17 Mar 2010 07:19:07 -0700 (PDT)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:50048) by ppsw-5.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.155]:25) with esmtpa (EXTERNAL:cet1) id 1Nru5c-0007QK-J7 (Exim 4.70) (return-path <cet1@hermes.cam.ac.uk>); Wed, 17 Mar 2010 14:19:16 +0000
Received: from prayer by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local (PRAYER:cet1) id 1Nru5c-0008Qz-TQ (Exim 4.67) (return-path <cet1@hermes.cam.ac.uk>); Wed, 17 Mar 2010 14:19:16 +0000
Received: from [131.111.11.47] by webmail.hermes.cam.ac.uk with HTTP (Prayer-1.3.2); 17 Mar 2010 14:19:16 +0000
Date: Wed, 17 Mar 2010 14:19:16 +0000
From: Chris Thompson <cet1@cam.ac.uk>
To: sthaug@nethelp.no
Message-ID: <Prayer.1.3.2.1003171419160.16088@hermes-2.csi.cam.ac.uk>
In-Reply-To: <20100317.150730.41662992.sthaug@nethelp.no>
References: <CF3EE840-0D45-4321-ABC4-31F4D186F9E6@rfc1035.com> <E94DC708-008B-49C5-8728-3F9AD106BF5F@icsi.berkeley.edu> <20100317.150133.74723796.sthaug@nethelp.no> <20100317.150730.41662992.sthaug@nethelp.no>
X-Mailer: Prayer v1.3.2
Mime-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="ISO-8859-1"
Sender: Chris Thompson <cet1@hermes.cam.ac.uk>
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] m.root-servers.net DNSSEC TCP failures
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: cet1@cam.ac.uk
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2010 14:33:05 -0000

On Mar 17 2010, sthaug@nethelp.no wrote:

>A small followup:
>
>> So it looks like the IPv4 instance refuses TCP, while the IPv6 instance
>> handles it okay. No filters in the way at my end. The m.root-servers.net
>> instance looks like it is in Paris or thereabouts - but there is quite
>> a bit of difference between the instances: IPv4 (highly variable ping,
>> RTT 700 ms or more) and IPv6 (ping steady at RTT 44-45 ms).
>
>Should of course have checked hostname.bind, which reveals:
>
>% dig @202.12.27.33 hostname.bind ch txt +short
>"M-CDG-3"
>% dig @2001:dc3::35 hostname.bind ch txt +short
>"M-CDG-4"
>
>So it seems my guess of Paris or thereabouts wasn't too far off. And
>M-CDG-3 seems to have problems with TCP.

That would explain why I don't see the effect at all. I am getting
M-NRT-JPIX-3 for IPv4 and M-CDG-4 for IPv6 (over either UDP or TCP).

-- 
Chris Thompson               University of Cambridge Computing Service,
Email: cet1@ucs.cam.ac.uk    New Museums Site, Cambridge CB2 3QH,
Phone: +44 1223 334715       United Kingdom.

v2.23.0 | Report a Bug | By Email