[rssac-caucus] aggressive NXDOMAIN in pDNS, and its effect on traffic to the root

Paul Hoffman paul.hoffman at icann.org
Mon Mar 27 03:19:07 UTC 2017


On Mar 26, 2017, at 7:19 PM, George Michaelson <ggm at algebras.org> wrote:
> I would like to propose a study in rssac-caucus to collect information
> about the effects of the deployment of aggressive NSEC response, on
> the volume of query at the root.
> 
> The work is late stage in DNSOP and I would expect to go to last-call
> and publication. This means that we can also expect deployment soon
> after, or even proceeding publication.
> 
> DITL style infrequent capture would be useful but its possible a less
> costly mechanism to construct a measurement exists: I am unsure if the
> current RSAC002 captures this, certainly the RCODE-VOLUME measure
> would provide it in aggregate, but because it's dissociated from the
> resolver its hard to do any more qualified analysis except to say 'it
> dropped'.
> 
> Because the change would herald a shift in the volume of undelegated
> (bogus) queries to the root and also reduce pressure in the known bad
> cases like .local, it has impacts on other policy questions under the
> oversight of the ICANN. It goes to that borderline between operations,
> and zone content.

Can you be more specific about "collect information about"? I don't see how we can collect information about queries that are not being sent, but it is quite possible I'm not being creative enough.

--Paul


More information about the rssac-caucus mailing list