> Maybe I'm missing something, but if you query one of the root > servers for a domain's NS servers, they are always returned in the > order that they are listed in your domain name registration.
"Registrar order" is not observed by the recursors querying the authoritative nameservers for a domain. Please, look at your logs. Check to see whether your "primary" DNS gets hit at all times unless the "secondary" is down ... <pause> ... yeah, didn't think so! You were using a client resolver to do your testing against roots and gtlds -- very different from using an actual recursor, because it's letting _you_ decide how to walk the tree. The gtlds don't have to _visually_ rotate the NS records, because they're not walking down the tree to the NSs themselves; they leave it up to the querier to decide what to do with the data. So, if you're debugging with your local resolver straight into the gtlds, you will see a fixed NS order. But when you let a real recursor do the work, it will take the array of NSs and shuffle requests to _all_ of them according to, as I said, a combination of response time and round-robin. > On the other hand, if you query your own DNS server and have it set > for round robin, it does rotate them, but that doesn't matter here. It's true that this doesn't matter. Local RR shuffling used by modern recursors in communicating back to the client resolver is a different area. > Try querying some domains names against a server like > h.gtld-servers.net see what I mean. Doesn't matter what order a gtld "says" back to you. What matters is what an unattended recursor -- not nslookup or dig -- does with the data. And it does use all the NS records. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
