Re: [DNSOP] m.root-servers.net DNSSEC TCP failures

sthaug@nethelp.no Wed, 17 March 2010 14:10 UTC

Return-Path: <sthaug@nethelp.no>
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C708328C130 for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 07:10:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.131
X-Spam-Level:
X-Spam-Status: No, score=0.131 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, J_CHICKENPOX_84=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kr6DnL2yA8qk for <dnsop@core3.amsl.com>; Wed, 17 Mar 2010 07:10:27 -0700 (PDT)
Received: from bizet.nethelp.no (bizet.nethelp.no [195.1.209.33]) by core3.amsl.com (Postfix) with SMTP id CF9C13A6C35 for <dnsop@ietf.org>; Wed, 17 Mar 2010 07:07:30 -0700 (PDT)
Received: (qmail 57320 invoked from network); 17 Mar 2010 14:07:40 -0000
Received: from bizet.nethelp.no (HELO localhost) (195.1.209.33) by bizet.nethelp.no with SMTP; 17 Mar 2010 14:07:40 -0000
Date: Wed, 17 Mar 2010 15:07:30 +0100
Message-Id: <20100317.150730.41662992.sthaug@nethelp.no>
To: dnsop@ietf.org
From: sthaug@nethelp.no
In-Reply-To: <20100317.150133.74723796.sthaug@nethelp.no>
References: <CF3EE840-0D45-4321-ABC4-31F4D186F9E6@rfc1035.com> <E94DC708-008B-49C5-8728-3F9AD106BF5F@icsi.berkeley.edu> <20100317.150133.74723796.sthaug@nethelp.no>
X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: Re: [DNSOP] m.root-servers.net DNSSEC TCP failures
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Mar 2010 14:10:29 -0000

A small followup:

> So it looks like the IPv4 instance refuses TCP, while the IPv6 instance
> handles it okay. No filters in the way at my end. The m.root-servers.net
> instance looks like it is in Paris or thereabouts - but there is quite
> a bit of difference between the instances: IPv4 (highly variable ping,
> RTT 700 ms or more) and IPv6 (ping steady at RTT 44-45 ms).

Should of course have checked hostname.bind, which reveals:

% dig @202.12.27.33 hostname.bind ch txt +short
"M-CDG-3"
% dig @2001:dc3::35 hostname.bind ch txt +short
"M-CDG-4"

So it seems my guess of Paris or thereabouts wasn't too far off. And
M-CDG-3 seems to have problems with TCP.

Steinar Haug, Nethelp consulting, sthaug@nethelp.no