On Sun, Oct 28, 2018 at 01:32:51PM +0100, A. Schulze wrote:
> RFC 2870 (Root Name Server Operational Requirements) say
> 
>       2.7 Root servers SHOULD NOT answer AXFR, or other zone transfer,
>             queries from clients other than other root servers.
> 
> The update, RFC 7720 (DNS Root Name Service Protocol and Deployment
> Requirements) don't even mention AXFR at all.  All I found is
> https://tools.ietf.org/html/rfc7720#section-2
> 
>       o MUST implement core DNS [RFC1035] and clarifications to the DNS
>       [RFC2181].
> 
> Is AXFR a strict requirement for root-servers today?

As a relatively new consideration, root zone local mirroring (RFC 7706)
depends on at least a subset of root servers being able to provide the
zone via AXFR. The configuration examples in the appendix specify B, F,
G, and K.

I've been assured by ISC folks that we'll always serve AXFR on F, but I
don't know if that commitment is in writing, nor whether the other roots
that currently support it have made any promises to keep doing so.

IMHO it would be nice if all 13 letters provided AXFR service, but at a
minimum we it's important for *some* of them to do so.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to