1Brett Carr OARC, November 2006, Redmond http://www.ripe.net

RIPE NCC DNS Services Overview

Brett CarrManager, DNS Services

RIPE NCC

OARC, November 2006, Redmond http://www.ripe.net 2Brett Carr

Overview

• Introduction

• Reverse/ccTLD Server Infrastructure

• K-Root

• DNSSEC

• ENUM

• Future

OARC, November 2006, Redmond http://www.ripe.net 3Brett Carr

Reverse/ccTLD Server Infrastructure

• 6 Servers involved- dnsadmin (dnssigner)- ns-pri.ripe.net- ns-sec.ripe.net- ns-tld.ripe.net- ns.ripe.net

OARC, November 2006, Redmond http://www.ripe.net 4Brett Carr

Reverse/ccTLD Server Infrastructure

OARC, November 2006, Redmond http://www.ripe.net 5Brett Carr

K-Root

• Anycasted across 17 Locations

• 5 Global Nodes

• 12 Local Nodes

• Hardware and OS Upgrades

• Considering further deployments

OARC, November 2006, Redmond http://www.ripe.net 6Brett Carr

K-Root

OARC, November 2006, Redmond http://www.ripe.net 7Brett Carr

DNSSEC

• Started rollout on non critical zones Oct 2005

• DS Records into reverse via our provisioning system

• Total primary zones 113

• Signed zones 72

• NS Records 521811 (225432 sets)

• DS Records 61

- RIPE NCC 14

- Other 47

Statistics as of October 2006

OARC, November 2006, Redmond http://www.ripe.net 8Brett Carr

ENUM

• Tasked by IAB to operate the e164.arpa domain

• Receive delegation requests

• Review technical DNS quality of request

• Announce request to public and ITU

• When no objections received perform delegation

• e164.arpa operated at no charge to all

• Technically almost identical to in-addr.arpa/ip6.arpa

OARC, November 2006, Redmond http://www.ripe.net 9Brett Carr

Queries per e164.arpa Nameserver – Aug 06

ns-pri.ripe.net 391084

ns0.verio.net 387080

tinnie.arin.net 382847

cnnic.net.cn 324755

sec3.apnic.net 255726

sunic.sunet.se 152300

Total 1893792

42 queries per minute

0

50000

100000

150000

200000

250000

300000

350000

400000

ns0.v

erio

.net

sunic

.sun

et.s

etin

niear

in.n

et

e164

-arp

a.cn

nic.n

et.c

nns-

pri.rip

e.net

sec3

.apn

ic.n

et

OARC, November 2006, Redmond http://www.ripe.net 10Brett Carr

Queries per delegation – August 2006

• Top 10 received at ns-pri.ripe.net

• Average 8.76 queries per minute

• 9.4.e164.arpa averages 0.74 queries per minute

0%

1%

2%

3%

4%

5%

6%

7%

8%

9%

DE AT

NANP IT CH NL FR UK PL SE

OARC, November 2006, Redmond http://www.ripe.net 11Brett Carr

Invalid Queries

• Total invalid queries 25922 (6.6%)

• Queries prefixed with 0 8918

• Queries prefixed with 0.0 4966

• Rest:Missing separator 3100.e164.arpa Strange prefixes 4.4.+.e164.arpaIncorrect prefixes 1.8.8.e164.arpa

• Probably misconfigured equipment

OARC, November 2006, Redmond http://www.ripe.net 12Brett Carr

Future

• New team formed 01/11/2006

• DNS statistics improvements (DSC)

• Hardware and OS upgrades/renewals

• NSD/BIND 9.40 testing

• Lameness checking/reporting

13Brett Carr OARC, November 2006, Redmond http://www.ripe.net

Questions?