Skip to Content.
Sympa Menu

netsec-sig - [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?

Subject: Internet2 Network Security SIG

List archive

[Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?


Chronological Thread 
  • From: Michael H Lambert <>
  • To: Steven Wallace <>
  • Cc: , NTAC <>, Kim Milford <>,
  • Subject: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?
  • Date: Fri, 3 Nov 2017 11:25:47 -0400
  • Dkim-filter: OpenDKIM Filter v2.11.0 mailer2.psc.edu vA3FPxGm019373
  • Ironport-phdr: 9a23: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

> On 2 Nov 2017, at 11:00, Steven Wallace
> <>
> wrote:
>
> At some point the resolver is going to want to query the TLD server for
> .com, and ultimately a DNS root server. If the university only has access
> to AWS (remember all Internet access is down), unless the university is
> hosting a local root and .TLD (which is an option), the dedicated
> connection to AWS is going to become useless.

Would it work to have an LTE-attached recursive resolver in a situation like
this? I would imagine it would make sense to have it enabled by hand.

Michael


Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.19.

Top of Page