IPv4 ANYCAST setup
Phil Regnauld
regnauld at nsrc.org
Tue Mar 30 09:24:20 UTC 2010
Randy Bush (randy) writes:
> patience. when things really start to break, and the finger of fate
> points at them, clue may arise.
>
When this issue was brought up on the OARC dns-operations list,
and it was suggested to make some simply factsheets (a bit like
ICANN's IPv6 http://www.icann.org/announcements/factsheet-ipv6-26oct07.pdf),
this was poo-pooed as being useless and a waste of time.
Since the final victim is the end user, I still think it's worth the
effort to try and make security officers and similar network operators
aware of the issues and what they can do to mitigate potential problems.
See for example:
http://www.afnic.fr/actu/nouvelles/240/l-afnic-invite-les-responsables-techniques-reseaux-a-se-preparer-a-la-signature-de-la-racine-dns-en-mai-2010
(Yes, there's an English version too).
Cheers,
Phil
More information about the NANOG
mailing list