Re: MWEB legal department - call for assistance

Saul,

On 27/05/2014 09:06, Saul wrote:
> HI Mark,
>
> Interesting point you make, something that I have been pondering of late:
>
>> The two types of Nameservers should be kept completely separate. A
>> Recursive server must find an answer to a query by chasing the >answer down
> >from the root. (And of course cache it for the designated time..)
>
> Yes I agree 100% one has recursive and authoritative servers.
>
> Lets work through the following scenario:
>
> Just say I have both. My authoritative servers are responsible for 1000s of
> domains. Why would I want my tens of thousands of eyeballs, going to the
> root servers, inducing extra latency when if they could just look at the
> authoritative server, the responses would be much better.

Firstly - don't forget - resolvers also cache.

Now, you're assuming that you can always keep your Auth's up to date, 
and that Registrants always tell you of their changes. My experience 
tells me this is not always the case. But then these days I only get the 
really tricky situations to debug....

The evolution of separate resolver and authoritative servers also expose 
the best practice of keeping these two different functions separate.

>
> OK, one reason is that it would break DNS sec, but for smaller ISPs, it is
> very important to keep the DNS for your clients up. If your upstream were to
> loose connectivity the return to root, causes even your directly connected
> clients to loose connectivity (DNS) to you. Yes, I might have other routes
> to get to the root servers, but other levels of the DNS tree, so might know
> where to look for .za, but can't get to them to look for co.za

If you're going to do less than optimal network stuff - please let your 
clients know what they're buying ;-)
And if you are running such a small network that you feel it isn't 
economically feasible to virtualise the resolving and authoritative 
functions to different ip addresses (can one even buy hardware that 
can't handle this these days), then I can't see that you'd have enough 
clients to worry about the scenario you've raised.

just my thoughts...

--Calvin

>
> Any thoughts?
>
>
> _______________________________________________
> IOZ mailing list
> [email protected]
> http://lists.internet.org.za/mailman/listinfo/ioz


_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz