[ksk-rollover] Revoked KSK-2010 now gone [was: Increased DNSKEY queries to the root servers since the KSK-2010 revocation]

[Wes Hardaker]

Hi Dan, 

I found evidence of a software but that may have caused some of the traffic increase. I'm waiting for a bug report to be released as it's being looked into now. Though my guess was it wouldn't drop after the key removal, so I'll stay tuned too! 

On March 22, 2019 1:45:04 PM PDT, Dan York <york at isoc.org> wrote:
>
>
>> On Mar 22, 2019, at 1:45 PM, Ray Bellis <ray at isc.org> wrote:
>> 
>> On 22/03/2019 17:12, Matt Larson wrote:
>> 
>>> The root zone without KSK-2010 went out ~1440 UTC. We've already
>seen a massive drop in DNSKEY queries from everywhere we have data.
>Note the graph below.
>> 
>> I'm seeing the same on our F-root nodes - a 95% reduction on the
>volume seen a couple of days ago.
>
>
>Do we have an understanding of WHY we are seeing the massive drop in
>volume?  (Or why we saw the massive volume in the first place?)
>
>Just curious,
>Dan
>
>--
>Dan York
>Director of Web Strategy, Internet Society
>york at isoc.org   +1-603-439-0024 
>Jabber: york at jabber.isoc.org  Skype: danyork  
>http://twitter.com/danyork
>
>http://www.internetsociety.org/
>_______________________________________________
>ksk-rollover mailing list
>ksk-rollover at icann.org
>https://mm.icann.org/mailman/listinfo/ksk-rollover

Wes Hardaker 
USC/ISI
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ksk-rollover/attachments/20190322/d0de0017/attachment.html>