Aristotle Balogh February 2000 NSI Registry Update NANOG 18, San Jose, California Aristotle Balogh February 6, 2000

Aristotle Balogh February 2000 Agenda Background Registry Operating Metrics gTLD RFP and deployment plans/status Root and gTLD stat’s Next-generation stuff –Multicast satellite dist –DNSSEC

Aristotle Balogh February 2000 NSI Registry System Loads I Live operations with NSI registrar in April 1999 First non-NSI registrar in June 1999 By August 1999 –8 total registrars –Read-Write Create/Update/Delete Loads 132,000 operations per day 3.67 operations per second during busy hour –Read-Only Query Loads 1,300,000 operations per day operations per second during busy hour

Aristotle Balogh February 2000 NSI Registry System Loads II February 2000 –25+ total registrars –Read-Write Create/Update/Delete Loads 256,000 operations per day (94% increase) 7.11 operations per second during busy hour –Read-Only Query Loads 5.2M operations per day (300% increase) operations per second during busy hour

Aristotle Balogh February 2000 Reliability, Availability, Scalability “Dial Tone” Quality Product –“Hot” primary/secondary data centers –Read-Only (RO) operations separated from Create, Update, and Delete (CUD) operations –Self-help tools and protocol enhancements Repeatable Engineering Processes –Requirements, configuration, release, defect tracking, and escalation management with integrated tool support –Automated stress, performance and integrity testing –Detailed project planning, tracking, and oversight

Aristotle Balogh February 2000 gTLD Site Selection Request for Proposal RFP Objective: “Identify and place the gTLD servers at the topological cores of the Internet; put gTLD DNS infrastructure under contractual framework” Requirements Proximity to Internet hosts and users Internet connectivity Peering relationships Adequate site facilities Technical support Price Process: RFP distributed to over 80 qualified vendors in Nov/Dec 1999

Aristotle Balogh February 2000 gTLD Site Selection Request for Proposal RFP Results 28 vendors registered to provide proposals 20 vendors responded with proposals Proposals currently being evaluated Sites being visited Selected vendors to be identified during February 2000 Schedule Deployment of next generation systems scheduled to begin Feb, 2000 through July 15, 2000

Aristotle Balogh February 2000 Average QPS for A, J & J.gtld

Aristotle Balogh February 2000 Root and GTLD Servers Growth in.com is accelerating Pushing resources to the limits Axfer off of a.root-servers.net is no longer feasible (E450) Zone propagation is growing (3+ hours) to distant sites. Queries per second (QPS is growing).

Aristotle Balogh February 2000 Average QPS for A & J Root Servers

Aristotle Balogh February 2000 Top 10 a.root-servers.net Queries

Aristotle Balogh February 2000 Top 10 j.root-servers.net Queries

Aristotle Balogh February 2000 Top 10 j.gtld-servers.net Queries

Aristotle Balogh February 2000 Named Memory Usage

Aristotle Balogh February 2000 Average QPS - a.root-servers.net

Aristotle Balogh February 2000 Average QPS - j.root-servers.net

Aristotle Balogh February 2000 Average QPS - j.gtld-servers.net

Aristotle Balogh February 2000 Satellite Based Zone File Distribution Challenges with current zone file distribution –Large file size (e.g. com.xfer is about 1.4 GB) –Files sizes growing exponentially –Variable latency and congestion on the Internet causes problems during zone transfer. –Long transfer times for remote sites (e.g. 4 hrs for Hong Kong site) –Zone file distribution time limits frequency of zone file distribution (currently twice a day)

Aristotle Balogh February 2000 Distributing zone files via satellite: –Enables use of compressed zone files (com.xfer.gz is 120 MB) –Scalable: Impact of file size growth is less –Provides fixed latency and congestion free transport –Simultaneous delivery of zones –Less load on zone distribution servers –Enables more frequent zone file updates (e.g. 4 times a day) Satellite Based Zone File Distribution

Aristotle Balogh February 2000 Timeline: Satellite Based Zone File Distribution

Aristotle Balogh February 2000 DNS Security Issues Participated in a number of workshops –non-trivial to setup –current implementation is buggy What the future holds –Has to only work in EDNS-aware servers (packet overflow on the roots for UDP on present 512 byte limitation). –Bind 8.x will not work.

Aristotle Balogh February 2000 DNS Security Changes Registrar/Registry split means that client has to go through registrar to have registry to sign. Steps: –Registrar needs to identify the domain holder and selects key that they desire to have signed with) –Registrar identifies itself with the registry –Verify that domain is with registrar –Signs domain public key –Signed key is returned to domain holder

Aristotle Balogh February 2000 DNS Security Changes Issues for NSI Registry –Registrars need to setup a front-end signing service for their domain holders) –RRP (the protocol that is between the registrar and registry) needs to be enhanced –Performance issues –Security issues on the key

Aristotle Balogh February 2000 Contact Info Registry Engineering –Ari Balogh DNS/gTLD Programs –Tom Newell –Mark Kosters