North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Impact of MS SQL Worm on DNS Root Name Service on 25.1.2003

  • From: Daniel Karrenberg
  • Date: Mon Jan 27 02:21:15 2003

THe RIPE NCC monitors response times to DNS queries of
all root server addresses from ~60 points worldwide.
Most of these points are within the RIPE region.  

2 of the 13 server addresses (B&G) showed noticable degradation of
response times to DNS queries across all measuring points.  

The other 11 server addresses awere *not* measurably affected. 

For the two servers that were affected, the data suggests that the
servers themselves remained healthy during the event but that network
infrastructure relatively close to them was affected.  For B this lasted
roughly from 0530(UTC) to 0630 and again shortly around 0730.  For G it
lasted from 0530 to roughly 1030. 

My conclusion is, that any degradation in DNS root name service that
people have seen was due to Internet infrastructure problems between
themselves and the servers.  For only two of the thirteen server
addresses these problems have been close enough to them to cause service
degradation across all of our measurement points. 

A further tentative conclusion is that this data (again) supports 
the case for distributing root service across the Internet using
IP anycasting.

We expect to present a more detailed analysis at the RIPE meeting this
week.

Daniel