Re: RR distribution by type?

Peter Koch <pk@TechFak.Uni-Bielefeld.DE> Thu, 05 April 2001 17:53 UTC

Received: from nic.cafax.se ([192.71.228.17]) by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA09572 for <dnsop-archive@odin.ietf.org>; Thu, 5 Apr 2001 13:53:07 -0400 (EDT)
Received: by nic.cafax.se (8.12.0.Beta7/8.12.0.Beta5) id f35HSLkQ006993 for dnsop-outgoing; Thu, 5 Apr 2001 19:28:21 +0200 (MEST)
Received: from gemma.TechFak.Uni-Bielefeld.DE (gemma.TechFak.Uni-Bielefeld.DE [129.70.136.103]) by nic.cafax.se (8.12.0.Beta7/8.12.0.Beta5) with ESMTP id f35HSILt006988 for <dnsop@cafax.se>; Thu, 5 Apr 2001 19:28:20 +0200 (MEST)
Received: from grimsvotn.TechFak.Uni-Bielefeld.DE (grimsvotn.TechFak.Uni-Bielefeld.DE [129.70.137.40]) by gemma.TechFak.Uni-Bielefeld.DE (8.9.1/8.9.1/TechFak/pk+ro20000427) with SMTP id TAA15508; Thu, 5 Apr 2001 19:28:16 +0200 (MET DST)
Received: from localhost by grimsvotn.TechFak.Uni-Bielefeld.DE (SMI-8.6/pk19971205) id TAA21034; Thu, 5 Apr 2001 19:28:15 +0200
Message-Id: <200104051728.TAA21034@grimsvotn.TechFak.Uni-Bielefeld.DE>
To: "Larson, Matt" <mlarson@verisign.com>
Cc: dnsop@cafax.se
Subject: Re: RR distribution by type?
In-reply-to: Your message of "Mon, 02 Apr 2001 16:27:01 EDT." <DF737E620579D411A8E400D0B77E671DA20111@regdom-ex01.prod.netsol.com>
X-Organization: Uni Bielefeld, Technische Fakultaet
X-Phone: +49 521 106 2902
Date: Thu, 05 Apr 2001 19:28:15 +0200
From: Peter Koch <pk@TechFak.Uni-Bielefeld.DE>
Sender: owner-dnsop@cafax.se
Precedence: bulk


> Has anybody ever done or seen a (recent) survey of how various RR types are
> distributed "in the wild" in real-world zones?  Ideally, I'd be interested

Here's an excerpt of what was discovered during the latest RIPE DNS hostcount
<http://www.ripe.net/ripencc/pub-services/stats/hostcount/> for the TLD DE
<http://www.TechFak.Uni-Bielefeld.DE/~pk/dns/hostcount/latest.html>.

	38506954 total
	13173185 A
	11301138 NS
	 7970557 MX
	 4916802 SOA
	  829975 CNAME
	  202454 HINFO
	   90459 TXT
	    9544 PTR
	    4101 SRV
	    2465 WKS
	    2456 RP
	    1105 AAAA
	    1037 MB
	     943 MR
	     621 LOC
	      50 A6
	      23 KEY
	      18 MINFO
	      17 AFSDB
	       2 NSAP
	       2 MG

The figures for A, NS and SOA are off by a factor of two (see ref'd document
for an explanation). Some observations:

o HINFO is rather popular

o PTR RRs are due to RFC1101 and classless delegation (RFC2317) pointing
  into the "forward" zone

o SRV is still rather low, but the survey only covers some 80 % (== 2.45
  million) of the zones and only sees the externally visible part of the
  namespace

o Given the distribution of AAAA and A6 - does this call for combined
  operations?

Finally, the question whether a certain RR type is "used" remains unanswered
for most of them, because you'd have to take into account both zone population
and query patterns.

-Peter