| | At Large Membership and Civil Society Participation in ICANN |
|
| |
|
|
|
|
This discussion has been archived.
No new comments can be posted.
|
|
.ly Mess: The Wages of Obsessive Secrecy
|
Log in/Create an Account
| Top
| 9 comments
|
Search Discussion
|
|
|
|
The Fine Print:
The following comments are owned by whoever posted them.
We are not responsible for them in any way.
|
|
 |
The DNS protocol should work with UDP and TCP.
With DNS via TCP, the anycast legacy Root Servers are not reliable. The TCP session (or stream) may end up at different physical servers, mid-session.
The best solution is to abstract the 13 root-server addresses on to a local edge appliance (firewall).
The TCP session then goes to that device, reducing root server traffic on the global Internet.
For security and easy router management, all 13 of the root-server /16 sub-nets can also be abstracted inside the local site, to the DMZ or "root zone".
Add to the above the recommendation from New.Net and you have most of the fixes needed to make your site MORE RELIABLE, MORE SECURE, and you REDUCE TRAFFIC on your expensive links to the global Internet.
http://www.new.net/help_isp_info.tp
Alternatively, you may slave the root zone, ".", from a master DNS server. // Slave the root zone from a new.net master DNS server.
zone "." {
type slave;
file "root.zone";
masters {
206.132.100.42;
};
};
|
|
|
|
[ Reply to This | Parent
]
|
| |
Privacy Policy: We will not knowingly give out your personal data -- other than identifying your postings in the way you direct by setting your configuration options -- without a court order. All logos and trademarks in this site are property of their
respective owner. The comments are property of their posters, all the rest © 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008 by ICANNWatch.Org. This web site was made with Slashcode, a web portal system written in perl. Slashcode is Free Software released under the GNU/GPL license.
You can syndicate our headlines in .rdf, .rss, or .xml. Domain registration services donated by DomainRegistry.com
|
