frequent queries to root servers

[Simon Forster]

> On 30 Jan 2016, at 21:57, John Levine <johnl at iecc.com> wrote:
> 
>> If chained CNAMEs work for you, more power to you.  But don't be 
>> surprised if they fail unexpectedly at some point.
> 
> If they don't, you'll have a lot of unhappy users since there's a
> whole lot of the Internet they won't be able to see.  
> 
> Try www.apple.com and www.microsoft.com, both of which have three
> chained CNAMES through Akamai.

As a data point, we’ve seen occasional fails here with bind running RPZ. And to the point being raised, it tends to be with Akamai users (so the smaller players).

ISC is aware of the issue. I do not believe that the cause has been identified.

Simon