nanog mailing list archives

RE: Dropping support for the .ru top level domain


From: "Kain, Becki (.)" <bkain1 () ford com>
Date: Mon, 14 Mar 2022 15:35:57 +0000

So much for livejournal then.


From: NANOG <nanog-bounces+bkain1=ford.com () nanog org> On Behalf Of Patrick Bryant
Sent: Saturday, March 12, 2022 5:47 AM
To: nanog () nanog org
Subject: Dropping support for the .ru top level domain

WARNING: This message originated outside of Ford Motor Company. Use caution when opening attachments, clicking links, 
or responding.

I don't like the idea of disrupting any Internet service. But the current situation is unprecedented.

The Achilles Heel of general public use of Internet services has always been the functionality of DNS.

Unlike Layer 3 disruptions, dropping or disrupting support for the .ru TLD can be accomplished without disrupting the 
Russian population's ability to access information and services in the West.

The only countermeasure would be the distribution of Russian national DNS zones to a multiplicity of individual DNS 
resolvers within Russia. Russian operators are in fact implementing this countermeasure, but it is a slow and arduous 
process, and it will entail many of the operational difficulties that existed with distributing Host files, which DNS 
was implemented to overcome.

The .ru TLD could be globally disrupted by dropping the .ru zone from the 13 DNS root servers. This would be the most 
effective action, but would require an authoritative consensus. One level down in DNS delegation are the 5 
authoritative servers. I will leave it to the imagination of others to envision what action that could be taken there...

ru      nameserver = 
a.dns.ripn.net<https://clicktime.symantec.com/3cdaU2sBzT5kQAgPmU9MP27VN?u=http%3A%2F%2Fa.dns.ripn.net>
ru      nameserver = 
b.dns.ripn.net<https://clicktime.symantec.com/3uMLLDAAfFot5kLW2aGrLy7VN?u=http%3A%2F%2Fb.dns.ripn.net>
ru      nameserver = 
d.dns.ripn.net<https://clicktime.symantec.com/3VvNtYSroiUZkWrafZ2AH6h7VN?u=http%3A%2F%2Fd.dns.ripn.net>
ru      nameserver = 
e.dns.ripn.net<https://clicktime.symantec.com/3L2nFmWTn2Fxrq8VYwrH8ur7VN?u=http%3A%2F%2Fe.dns.ripn.net>
ru      nameserver = 
f.dns.ripn.net<https://clicktime.symantec.com/3FPH6SgxSCtpmphH1zdCawN7VN?u=http%3A%2F%2Ff.dns.ripn.net>

The impact of any action would take time (days) to propagate.


Current thread: