Hi Dan,

I found evidence of a software but that may have caused some of the traffic increase. I'm waiting for a bug report to be released as it's being looked into now. Though my guess was it wouldn't drop after the key removal, so I'll stay tuned too!

On March 22, 2019 1:45:04 PM PDT, Dan York <york@isoc.org> wrote:


On Mar 22, 2019, at 1:45 PM, Ray Bellis <ray@isc.org> wrote:

On 22/03/2019 17:12, Matt Larson wrote:

The root zone without KSK-2010 went out ~1440 UTC. We've already seen a massive drop in DNSKEY queries from everywhere we have data. Note the graph below.

I'm seeing the same on our F-root nodes - a 95% reduction on the volume seen a couple of days ago.


Do we have an understanding of WHY we are seeing the massive drop in volume?  (Or why we saw the massive volume in the first place?)

Just curious,
Dan

--
Dan York
Director of Web Strategy, Internet Society
york@isoc.org   +1-603-439-0024 
Jabber: york@jabber.isoc.org  Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/
ksk-rollover mailing list
ksk-rollover@icann.org
https://mm.icann.org/mailman/listinfo/ksk-rollover


Wes Hardaker
USC/ISI