Re: IPv4 ANYCAST setup

[Phil Regnauld <regnauld () nsrc org>]

Randy Bush (randy) writes:
> patience.  when things really start to break, and the finger of fate
> points at them, clue may arise.

        When this issue was brought up on the OARC dns-operations list,
        and it was suggested to make some simply factsheets (a bit like
        ICANN's IPv6 http://www.icann.org/announcements/factsheet-ipv6-26oct07.pdf),
        this was poo-pooed as being useless and a waste of time.

        Since the final victim is the end user, I still think it's worth the
        effort to try and make security officers and similar network operators
        aware of the issues and what they can do to mitigate potential problems.

        See for example:

        
http://www.afnic.fr/actu/nouvelles/240/l-afnic-invite-les-responsables-techniques-reseaux-a-se-preparer-a-la-signature-de-la-racine-dns-en-mai-2010

        (Yes, there's an English version too).

        Cheers,
        Phil