<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hello all,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I've been asked to look into the issues stemming from the
changes being rolled out in a testing form at the root name servers starting
May 5th and permanently applied on July 1st<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>From my basic reading of the issue, it appears that packet
reply sizes will be much bigger starting May 5th, and some servers / routers
& firewalls may not be equipped to handle it.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>A test of our recursive server (running PDNS) shows it
appears we are indeed affected by this. Does anyone have any advice on
what the actual issue is? Is it our servers, our router? The
information out there is kind of vague at best.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Below (results of a test to our server using dig and another
server):<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>[jbarron@ops-ns1-srv01 ~]$ dig +short rs.dns-oarc.net
txt<o:p></o:p></p>
<p class=MsoNormal>rst.x476.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>rst.x485.x476.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>rst.x490.x485.x476.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>"Tested at 2010-05-04 15:05:36 UTC"<o:p></o:p></p>
<p class=MsoNormal>"216.222.1.2 DNS reply size limit is at least 490"<o:p></o:p></p>
<p class=MsoNormal>"216.222.1.2 lacks EDNS, defaults to 512"<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>[jbarron@ops-ns1-srv01 ~]$ dig @4.2.2.2 +short
rs.dns-oarc.net txt<o:p></o:p></p>
<p class=MsoNormal>rst.x3827.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>rst.x3837.x3827.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>rst.x3843.x3837.x3827.rs.dns-oarc.net.<o:p></o:p></p>
<p class=MsoNormal>"Tested at 2010-05-04 15:08:42 UTC"<o:p></o:p></p>
<p class=MsoNormal>"192.221.163.127 sent EDNS buffer size 4096"<o:p></o:p></p>
<p class=MsoNormal>"192.221.163.127 DNS reply size limit is at least
3843"<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Thanks
so much!<o:p></o:p></span></b></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Josh
Barron<o:p></o:p></span></b></p>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>American
Fiber Systems</span></b><b><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>
</span></b><o:p></o:p></p>
</div>
</body>
</html>