February 2019 - ksk-rollover

Increased DNSKEY queries to the root servers since the KSK-2010 revocation
by Paul Hoffman March 22, 2019

March 22, 2019

Greetings again. Soon after the new DNSKEY RRset was published at 1400 UTC on 11 January 2019 with KSK-2010 revoked, there was a noticeable increase in ./IN/DNSKEY queries sent to root servers. While we have heard of no DNS service interruption for users, the average DNSKEY query load over all servers has more than doubled to between 2% and 2.5%. The increase was quite varied between the different root servers; some experienced almost no increase at all, while others experience an increase of up to 5%. Although some resolvers are newly making rapid queries to the root servers for the root’s DNSKEY RRset, we see no indication that those resolvers are failing to answer DNS queries from their customers. We will continue to monitor the situation. The ICANN organization is evaluating the traffic at the L-root to try to characterize the resolvers that are rapidly asking for the root’s DNSKEY RRset. From this, we can determine if we are able to help the operators of those resolvers to remediate this anomalous behavior. We will also share data with other root server operators who are conducting similar investigations. The results will be reported when our analysis is complete. --Paul Hoffman

10 10

Future rollover planning opportunities
by Kim Davies Feb. 21, 2019

Feb. 21, 2019

Colleagues, We are continuing to implement the final phases of the KSK-2017 rollover for the DNS Root Zone. While there are no plans to immediately schedule any subsequent planned rollover, we recognize this is a good opportunity to gather feedback while everyone’s experience with this rollover is still fresh in mind. Feedback from the community will inform our future strategy. We welcome feedback, particularly to this list, on what should be considered in designing the process for performing future rollovers. We are also planning to hold a number of outreach efforts in the coming months to capture further input. These sessions are being led by the ICANN’s Office of the Chief Technology Officer (OCTO) in coordination with IANA staff. These sessions will be at: * ICANN 64 in Kobe, as part of the DNSSEC workshop; * IETF 104 in Prague, as a proposed BOF; and * The 3rd ICANN DNS Symposium in Bangkok The feedback we receive will be used by the IANA team to develop a draft plan later in the year that we intend to share for public review. Thanks in advance. kim

10 13

ksk - New Meeting Session Request for IETF 104
by IETF Meeting Session Request Tool Feb. 19, 2019

Feb. 19, 2019

A new meeting session request has just been submitted by Liz Flynn, on behalf of the ksk working group. --------------------------------------------------------- Working Group Name: KSK Futures Area Name: Operations and Management Area Session Requester: Liz Flynn Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 150 Conflicts to Avoid: First Priority: dnsop dprive lamps saag git People who must be present: Paul E. Hoffman Warren "Ace" Kumari Resources Requested: Special Requests: ---------------------------------------------------------

1 0