Root Hints.

[Haim [Howard] Roman]

Thanks.  In my old root file (Nov 1, 2007), the TTLs for the NS records
was 3600000.  In the output of the dig command below, the TTL is
518400.  Is the new one correct, or does it matter?


(in both, the TTL of the A records is 3600000)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Haim (Howard) Roman
Computer Center, Jerusalem College of Technology
roman at jct.ac.il
Phone: 052-8-592-599 (6022 from within Machon Lev)



-------- Original Message  --------
Subject: Root Hints.
From: Mark Andrews <Mark_Andrews at isc.org>
To: bind-users at isc.org
Date: Tue Feb 05 2008 01:00:32 GMT+0200 (IST)
> 	The 6 of root servers now have IPv6 addresses.  You should
> 	be updating your hints file to reflect this change.
>
> 	You can retrieve a new set of root hint by running:
>
> 	dig +bufsize=1200 +norec NS . @a.root-servers.net > newhints
>
> 	Note: +bufsize=1200 is needed as the response will no longer
> 	fit in plain DNS/UDP response.
>
> 	If your version of dig does not support +bufsize= it really is
> 	time to upgrade.  The world is passing you by.
>
> 	If you have a firewall that doesn't allow EDNS packet bigger
> 	than 512 bytes through it is time to upgrade that firewall.
> 	In the meantime you can use a query like this to update the
> 	root hints.
>
> 	dig +vc +norec NS . @a.root-servers.net > newhints
>
> 	Note: this is not a long term solution.  You will get better
> 	performance out of your DNS servers if you upgrade.
>
> 	Mark
>
> ; <<>> DiG 9.3.4-P1 <<>> +bufsize=1200 +norec NS . @a.root-servers.net
> ; (2 servers found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31496
> ;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 20
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;.				IN	NS
>
> ;; ANSWER SECTION:
> .			518400	IN	NS	E.ROOT-SERVERS.NET.
> .			518400	IN	NS	F.ROOT-SERVERS.NET.
> .			518400	IN	NS	G.ROOT-SERVERS.NET.
> .			518400	IN	NS	H.ROOT-SERVERS.NET.
> .			518400	IN	NS	I.ROOT-SERVERS.NET.
> .			518400	IN	NS	J.ROOT-SERVERS.NET.
> .			518400	IN	NS	K.ROOT-SERVERS.NET.
> .			518400	IN	NS	L.ROOT-SERVERS.NET.
> .			518400	IN	NS	M.ROOT-SERVERS.NET.
> .			518400	IN	NS	A.ROOT-SERVERS.NET.
> .			518400	IN	NS	B.ROOT-SERVERS.NET.
> .			518400	IN	NS	C.ROOT-SERVERS.NET.
> .			518400	IN	NS	D.ROOT-SERVERS.NET.
>
> ;; ADDITIONAL SECTION:
> A.ROOT-SERVERS.NET.	3600000	IN	A	198.41.0.4
> A.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:503:ba3e::2:30
> B.ROOT-SERVERS.NET.	3600000	IN	A	192.228.79.201
> C.ROOT-SERVERS.NET.	3600000	IN	A	192.33.4.12
> D.ROOT-SERVERS.NET.	3600000	IN	A	128.8.10.90
> E.ROOT-SERVERS.NET.	3600000	IN	A	192.203.230.10
> F.ROOT-SERVERS.NET.	3600000	IN	A	192.5.5.241
> F.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:500:2f::f
> G.ROOT-SERVERS.NET.	3600000	IN	A	192.112.36.4
> H.ROOT-SERVERS.NET.	3600000	IN	A	128.63.2.53
> H.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:500:1::803f:235
> I.ROOT-SERVERS.NET.	3600000	IN	A	192.36.148.17
> J.ROOT-SERVERS.NET.	3600000	IN	A	192.58.128.30
> J.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:503:c27::2:30
> K.ROOT-SERVERS.NET.	3600000	IN	A	193.0.14.129
> K.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:7fd::1
> L.ROOT-SERVERS.NET.	3600000	IN	A	199.7.83.42
> M.ROOT-SERVERS.NET.	3600000	IN	A	202.12.27.33
> M.ROOT-SERVERS.NET.	3600000	IN	AAAA	2001:dc3::35
>
> ;; Query time: 246 msec
> ;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30)
> ;; WHEN: Tue Feb  5 09:56:13 2008
> ;; MSG SIZE  rcvd: 615
>
>