Re: large organization nameservers sending icmp packets to dns servers.

[Valdis.Kletnieks () vt edu]

On Thu, 09 Aug 2007 21:05:26 -0000, Paul Vixie said:

> i think you're advising folks to monitor their authority servers to find out
> how many truncated responses are going out and how many TCP sessions result
> from these truncations and how many of these TCP sessions are killed by the
> RFC1035 4.2.2 connection management logic, and if the numbers seem high, then
> they ought to change their applications and DNS content so that truncations
> no longer result.

How does the (eventual) deployment of DNSSEC change these numbers?

And who's likely to feel *that* pain first?

Attachment: _bin
Description: