Re: [DNSOP] m.root-servers.net DNSSEC TCP failures

Gilles Massen <gilles.massen@restena.lu> Wed, 17 March 2010 15:03 UTC

Return-Path: <gilles.massen@restena.lu>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3396E3A699C for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 08:03:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.869
X-Spam-Level:
X-Spam-Status: No, score=-0.869 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, J_CHICKENPOX_84=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mNLGH4XT7oCk for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 08:03:48 -0700 (PDT)
Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) by core3.amsl.com (Postfix) with ESMTP id 447A03A6C2A for <dnsop@ietf.org>; Wed, 17 Mar 2010 07:59:22 -0700 (PDT)
Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id CB44310586; Wed, 17 Mar 2010 15:59:31 +0100 (CET)
Received: from [IPv6:2001:a18:1:8:230:5ff:fefe:537e] (unknown [IPv6:2001:a18:1:8:230:5ff:fefe:537e]) by smtprelay.restena.lu (Postfix) with ESMTP id AD09110088; Wed, 17 Mar 2010 15:59:31 +0100 (CET)
Message-ID: <4BA0EE53.20603@restena.lu>
Date: Wed, 17 Mar 2010 15:59:31 +0100
From: Gilles Massen <gilles.massen@restena.lu>
Organization: Fondation RESTENA
User-Agent: Thunderbird 2.0.0.23 (X11/20090817)
MIME-Version: 1.0
To: cet1@cam.ac.uk
References: <CF3EE840-0D45-4321-ABC4-31F4D186F9E6@rfc1035.com> <E94DC708-008B-49C5-8728-3F9AD106BF5F@icsi.berkeley.edu> <20100317.150133.74723796.sthaug@nethelp.no> <20100317.150730.41662992.sthaug@nethelp.no> <Prayer.1.3.2.1003171419160.16088@hermes-2.csi.cam.ac.uk>
In-Reply-To: <Prayer.1.3.2.1003171419160.16088@hermes-2.csi.cam.ac.uk>
X-Enigmail-Version: 0.95.7
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV
Cc: dnsop@ietf.org
Subject: Re: [DNSOP] m.root-servers.net DNSSEC TCP failures
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2010 15:03:49 -0000

Chris Thompson wrote:
> On Mar 17 2010, sthaug@nethelp.no wrote:
> 
>> Should of course have checked hostname.bind, which reveals:
>>
>> % dig @202.12.27.33 hostname.bind ch txt +short
>> "M-CDG-3"
>> % dig @2001:dc3::35 hostname.bind ch txt +short
>> "M-CDG-4"
>>
>> So it seems my guess of Paris or thereabouts wasn't too far off. And
>> M-CDG-3 seems to have problems with TCP.

Well, I'm getting IPv6 replies from M-CDG-2 which should be in Paris as
well. I have perfect ping responses (30ms, no packet loss). And TCP
works except for the ANY query... so that doesn't quite look like a
stressed network.

> That would explain why I don't see the effect at all. I am getting
> M-NRT-JPIX-3 for IPv4 and M-CDG-4 for IPv6 (over either UDP or TCP).

I would love to know why your get M-CDG-4 and I get M-CDG-2... I'd guess
that your packets should take the janet-geant-sfinx route?


Gilles

-- 
Fondation RESTENA - DNS-LU
6, rue Coudenhove-Kalergi
L-1359 Luxembourg
tel: (+352) 424409
fax: (+352) 422473