[Dnsmon-test] DNSMON Atlas testing for .hk

Ben Choy ben.choy at hkirc.hk
Tue Mar 25 03:31:28 CET 2014


Anand,

Thanks for the update. Interesting result. We have an Atlas probe at one of our site, but not at the site where B is and that probe is IPv4/6. It seems to reach all the anchors ok, but then it using another ISP. We were thinking of putting a probe in where B is, but there are some infrastructure limitations we need to overcome. As to why B do not reply on RA bit, we are still checking our config. But since it is not a recursive server, I suppose it is set to ignore this as default, unless it from our ACL list.

Many thx.


Benjamin Choy
Project Manager (System & Network)
Hong Kong Internet Registration Corporation Limited (HKIRC)  http://www.hkirc.hk  http://互聯網註冊.香港
Hong Kong Domain Name Registration Company Limited (HKDNR)  http://www.hkdnr.hk  http://域名註冊.香港 
Tel: +852 2319 1313 / Fax: +852 2319 2626 / Direct: +852 2319 3819 / Email: ben.choy at hkirc.hk

The information in this email is confidential and may be legally privileged. If you are not the intended recipient, please notify the sender immediately and then delete this e-mail entirely. 
You must not retain, copy, distribute or use this e-mail for any other purpose not intended by this email or disclose any of its content to others. 
The recipient should check the email and attachment for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.
PROTECT OUR ENVIRONMENT - think before printing!


-----Original Message-----
From: Anand Buddhdev [mailto:anandb at ripe.net] 
Sent: Tuesday, March 25, 2014 12:13 AM
To: Ben Choy; dnsmon-test at ripe.net
Cc: anandb at ripe.net; Ben Lee
Subject: Re: [Dnsmon-test] DNSMON Atlas testing for .hk

On 21/03/2014 03:46, Ben Choy wrote:

Hi Ben,

> If this is a bug, then we rather leave our setting and see if your fix 
> in the next release does do the job.

This afternoon, we updated the probe software on RIPE Atlas anchors.
DNSMON queries no longer set the RA bit. If you now look at the DNSMON graphs for b.hkirc.net.hk/IPv6, you'll see a lot more green :)

You'll also notice, however, that some probes are still timing out on
IPv6 queries, but I think that is because these anchors just don't have a path to your name server. Perhaps your IPv6 prefix is being filtered out by the upstream transits of these anchors.

Regards,

Anand Buddhdev
RIPE NCC