"trivial" changes to DNS (was: OpenNTPProject.org)
jared at puck.nether.net
Thu Jan 23 02:23:05 UTC 2014
On Jan 17, 2014, at 6:44 AM, Tony Finch <dot at dotat.at> wrote:
> Jared Mauch <jared at puck.Nether.net> wrote:
>> I can point anyone interested to the place in the
>> bind source to force it to reply to all UDP queries with TC=1
>> to force TCP. should be safe on any authority servers, as a recursive
>> server should be able to do outbound TCP.
> However see http://www.potaroo.net/ispcol/2013-09/dnstcp.html
Yes, I’m aware of the excellent work by Geoff on this topic. There are many
things that could be done, including the nonce (or similar) approach NTP
took with MONLIST vs MRULIST.
Perhaps it’s something like this:
More information about the NANOG