North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: large organization nameservers sending icmp packets to dns servers.

  • From: Valdis . Kletnieks
  • Date: Thu Aug 09 17:46:38 2007 
On Thu, 09 Aug 2007 21:05:26 -0000, Paul Vixie said:

> i think you're advising folks to monitor their authority servers to find out
> how many truncated responses are going out and how many TCP sessions result
> from these truncations and how many of these TCP sessions are killed by the
> RFC1035 4.2.2 connection management logic, and if the numbers seem high, then
> they ought to change their applications and DNS content so that truncations
> no longer result.

How does the (eventual) deployment of DNSSEC change these numbers?

And who's likely to feel *that* pain first?

Attachment: pgp00012.pgp
Description: PGP signature