Re: MWEB legal department - call for assistance

Hi Saul,
At 00:06 27-05-2014, Saul wrote:
>Yes I agree 100% one has recursive and authoritative servers.

The split between authoritative and recursive is for security reasons.

>Lets work through the following scenario:
>
>Just say I have both. My authoritative servers are responsible for 1000s of
>domains. Why would I want my tens of thousands of eyeballs, going to the
>root servers, inducing extra latency when if they could just look at the
>authoritative server, the responses would be much better.
>
>OK, one reason is that it would break DNS sec, but for smaller ISPs, it is
>very important to keep the DNS for your clients up. If your upstream were to
>loose connectivity the return to root, causes even your directly connected
>clients to loose connectivity (DNS) to you. Yes, I might have other routes
>to get to the root servers, but other levels of the DNS tree, so might know
>where to look for .za, but can't get to them to look for co.za

If DNS is not working (see above) it can break a lot of 
stuff.  That's why it is better to ensure that there is 
redundancy.  The above identify where things can fail.  The next step 
might be to see how to avoid those failures, e.g. see that there are 
reliable routes to .za and .co.za.

There are some non-technical reasons which I would also consider.  I 
am not mentioning them as it would be off-topic.

Regards,
-sm 


_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz