On Tue, 1 Apr 2008, Sebastian Castro wrote:
> On Tue, Apr 01, 2008 at 01:51:54PM -0400, Edward Lewis wrote:
> > At 10:35 -0700 4/1/08, Sebastian Castro Avila wrote:
> >
> > >Sorry for the late response. About this matter, using the data collected
> > >at the root server instances participating in DITL 2007, we found 24.73%
> > >of the queries seen at the roots were for invalid TLD's.
> > >
> > >Doing an analysis per root, the numbers vary
> > >
> > >C-root 19.15%
> > >F-root 46.79%
> > >K-root 10.01%
> > >M-root 20.96%
> >
> > Wow, what a dispersion. I'm not calling into question the effort,
> > etc., but seeing these numbers makes me wonder about the value of the
> > results. The reasons for my suspicion are:
> >
> > 1) That there such wide variation
>
> We investigated that situation on request and found some F-root
> instances were receiving very high volume of queries for invalid TLD.
Do you have the source IP's that are generating the invalid tld's?
I'm wondering why those ip's aren't distributing their queries across
all the roots.
> 24 hour traces collected between 01-09-2007 12:00 and 01-10-2007 12:00,
> on 61 root server anycast nodes
>
> C-root, all 4 instances
> F-root, 36 out of 40
> K-root, 15 out of 17
> M-root, all 6 instances
>
> So the data seems to be useful (but not complete). Once we got all the
> data for DITL 2008 we could try to run the same test and look for
> trends.
This is quite interesting. F-root is also the most anycasted of this
subset... The next highest anycasted member has the least amount of bad
TLD queries. Seems to be more variability with more highly anycasted
servers. I wonder why...
Do you have the number of anycast instances for all 13 roots?
--Dean
--
Av8 Internet Prepared to pay a premium for better service?
www.av8.net faster, more reliable, better service
617 344 9000
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
