----------
The Internet Last Week

* DediPath route announcements decreasing
https://www.cidr-report.org/cgi-bin/as-report?as=AS35913&view=2.0
* SSH signals falling
https://dataplane.org/statistics/sshclient.html
https://dataplane.org/statistics/sshpwauth.html
* OARC 41
https://indico.dns-oarc.net/event/47/
* AusNOG 2023
https://www.ausnog.net/events/ausnog-2023 sep 7-8

#DediPath #SSH #OARC41 #AusNOG2023

Goodbye from all of us at OARC 41. Kudos and thanks to all of our presenters and participants - you create the magic that happens at OARC workshops! Thank you to our hosts VNNIC, to ICANN, to our annual workshop patron Verisign and our OARC 41 patrons Auda and ISC. Please don't forget to provide OARC 41 event feedback (and enter the giveaway prize draw):
https://bit.ly/oarc41-survey
#OARC41 #LoveDNS ^CA

Joao Luis Silva Damas presents APNIC researchers' study of NXDOMAIN and DNSSEC as viewed via the query stream of a popular open resolver.
https://indico.dns-oarc.net/event/47/contributions/1030/
#OARC41 #LoveDNS ^CA

Johan Stenstam from The Swedish Internet Foundation asserts that there are Problems Brewing for DNS Recursive Services that we are not (yet?) taking the right approach to tackle. What should we be doing?
https://indico.dns-oarc.net/event/47/contributions/1031/
#OARC41 #LoveDNS ^CA

Nicolai Leymann is talking about the DNS platform of Deutsche Telekom (architecture, performance, features) and the implementation status of encrypted DNS (mainly DoT and DoH) including some interesting challenges that have been encountered.
https://indico.dns-oarc.net/event/47/contributions/1029/
#OARC41 #LoveDNS ^CA

Klaus Darilion (nic.at GmbH) is opening a discussion for new approaches to keep Secondaries in sync with their Primaries, based on his experience that "XFR does not scale to millions of zones".
https://indico.dns-oarc.net/event/47/contributions/1017/
#OARC41 #LoveDNS ^CA

Making the most of OARC 41 Day 2 mid-afternoon break and sad that we're nearly at the end. Are you coming to OARC 42? Do you have something interesting that you'd like to present? Tell us about it here:
https://indico.dns-oarc.net/event/48/abstracts/
#OARC41 #LoveDNS ^CA

ED25529 and ED448 are not yet FIPS compliant - how to comply without compromising DNSSEC security? "Treating failed as failed and treating successful as unsigned makes sense but makes my head explode". Join the online Mattermost discussion on this and more in the Workshops channel!
https://indico.dns-oarc.net/event/47/contributions/1020/
#OARC41 #LoveDNS ^CA

Lunchtime for onsite participants at OARC 41 (photo of Woman@OARC table); now also taking a moment to remind everyone that OARC 42 is planned for February 2024, located in Charlotte, NC USA. Will you be there? Would you like to be a workshop sponsor?
https://indico.dns-oarc.net/event/48/
#OARC41 #LoveDNS ^CA

I'm watching a fascinating talk from Fenglu Zhang of Tsinghua University, discussing an attack they've seen against a very specific type of noncompliant #DNS server.

A clever DoS attack? Punishment for not following the protocol? Schadenfreude? This talk has everything!

https://indico.dns-oarc.net/event/47/contributions/1018/

#OARC41 #security #DenialOfService

Fenglu Zhang from Tsinghua University: creating a DDoS attack by redirecting legitimate query traffic (exploiting authoritative server DNS protocol non-compliance; implementers be warned) - neat!
https://indico.dns-oarc.net/event/47/contributions/1018/
#OARC41 #LoveDNS ^CA

Fenglu Zhang from Tsinghua University presenting a novel attack, named Disablance, that targets domains with different NS records in: "Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers".
https://indico.dns-oarc.net/event/47/contributions/1018/
#OARC41 #LoveDNS ^CA

Felipe Barbosa gives us an honest review of InternetNZ's DNSSEC incident in May 2023, including the useful lessons learned. This presentation should be of great value to anyone considering, or already DNSSEC-signing their zones.
https://indico.dns-oarc.net/event/47/contributions/1016/
#OARC41 #LoveDNS ^CA

Robert Story lets us know that USC/ISI is renumbering both its IPv4 and IPv6 addresses for b.root-servers.net on 2023-11-27. Why, and what you need to know about what's happening: "B.root-servers.net renumbering in Nov. 2023"
https://indico.dns-oarc.net/event/47/contributions/1013/
#OARC41 #LoveDNS ^CA

While enjoying our mid-morning coffee break, please don't forget to rate the first two talks via matterpoll in the DNS-OARC Mattermost chat (Workshops channel). The link to provide OARC 41 event feedback (and enter the giveaway prize draw) is:
https://www.surveyhero.com/c/oarc41
#OARC41 #LoveDNS ^CA

Andrey Meshkov on implementing EDNS Client Subnet in a privacy preserving way: do we actually need ECS, could we do better - and what are the content providers giving us anyway?
https://indico.dns-oarc.net/event/47/contributions/1022/
#OARC41 #LoveDNS ^CA

Andrey Meshkov, CTO and Co-Founder of AdGuard, explains the risks and benefits of location-specific DNS resolution and how AdGuard can help in "Implementing EDNS Client Subnet in a privacy preserving way"
https://indico.dns-oarc.net/event/47/contributions/1022/
#OARC41 #LoveDNS ^CA

Shuyue Yu from Columbia University talks about the interaction between DNS caches and the responsiveness of load-balanced services in "The role of DNS in residential Internet use". How effective is cached DNS in reality?
https://indico.dns-oarc.net/event/47/contributions/1006/
#OARC41 #LoveDNS ^CA

Make sure you take time to fill out the survey after workshop close to get your name entered into our prize drawing for a 3D Printer. The survey will help us improve upon future workshops to further benefit you. You can find the survey at https://bit.ly/oarc41survey
#OARC41 #LoveDNS #survey ^RP

Good morning and welcome to OARC 41 Day 2. We're getting set up and ready for another day of interesting talks after enjoying the local sites, both last night and this morning (before the heat of the day). Agenda is here:
https://indico.dns-oarc.net/event/47/timetable/#20230907.detailed
#OARC41 #LoveDNS ^CA