nanog mailing list archives

Re: Journal of Internet Disasters


From: Dean Anderson <dean () av8 com>
Date: Fri, 13 Nov 1998 18:57:48 -0500

At 03:11 PM 11/13/1998 -0800, you wrote:


- it is known that various individuals flood the Internic with packets
related to aatempts to suck down the whois database, one item at a time
and/or detect when a specific domain name goes off hold and becomes
available for re-registration

- pathshow indicated that the Internic circuit over which AXFR was being
attempted was congested.

    - f.root-servers.net and NSI's servers reacted differently.  What
     are the differences between them (BIND versions, in-house source
     code changes, operating systems/run-time libraries/compilers)


Of course, it would be possible for Internic to have multiple connections
routing whois requests over one link, and DNS transfers over another link.
Or limiting the bandwidth for whois, reserving bandwidth for DNS. etc.
Aside from the obvious solution to not have insane servers.

The purpose of analyzing disasters is to identify ways of avoiding them.

                --Dean
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
           Plain Aviation, Inc                  dean () av8 com
           LAN/WAN/UNIX/NT/TCPIP          http://www.av8.com
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


Current thread: