JP DNS Operational Experience
Shinta SatoJapan Registry Service Co., Ltd. (JPRS)
shinta@jprs.jp
March 5, 2002
Copyright © 2002 Japan Registry Service Co., Ltd.

No. 1

Brief Introduction of JPRS
– JP domain registry• The second agreement ICANN has signed with ccTLD• 1st April 2002

– Commercial based company• Spinned off from JPNIC• Many JPNIC engineers and operators changed theirbelongings

For more information see JPRS web page
http://jprs.jp/Copyright © 2002 Japan Registry Service Co., Ltd.

No. 2

Agendaz Introducing JP DNSz Daily Management of JP DNSz BIND 8.3.0 trouble

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 3

What is JP DNSz JP DNS consists of...

– JP Domains (350,000 domains)• General-Use JP Domain Names (2LD)– Alphanumerical characters (EXAMPLE.JP etc.)
126,000 domain names registered– Japanese characters (日本語.JP etc.)
61,000 domain names registered• Organizational Type / Geographical Type JP Domain Names
Organizational: CO.jp, AC.jp, …
Geographical: TOKYO.jp, …
– 280,000 domain names registered– IP Addresses Allocated by APNIC• 260 of /16 IP reverse in-addr.arpa zones(Each zones have about 200 in-addr.arpa sub-domains)

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 4

JP DNS Server Operatorsz One Primary DNS Server– Owned by JP Registry (JPNIC / JPRS)• ns0.nic.ad.jp

z Five Secondary DNS Servers– Owned by JP Registry (JPNIC / JPRS)• ns-jp.nic.ad.jp– Commercial ISPs
• IIJ (ns0.iij.ad.jp)• SPIN (dns0.spin.ad.jp)– Research and Academic Networks• WIDE Project (ns.wide.ad.jp)– M Root Server Operators• SINET (ns-jp.sinet.ad.jp)
Copyright © 2002 Japan Registry Service Co., Ltd.

No. 5

JP DNS System Data FlowRegistry DB

JP Secondaries

ns-jp
Master Data
Serverns0
JP Primary

IIJ
SPIN
WIDE
SINET

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 6

Query Types of JP DNS
query types of ns0.nic.ad.jp(1 Nov. 2001: total 32,189,331)

31,016
7,806,265

59,89724,286
170,168

21,262,224A
ANYMXSOANS
AAAA
PTR
misc

1,550,580
1,284,895

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 7

Weekly Trend of JP DNS Queriesz MRTG Snapshot for ns0.nic.ad.jp– Average queries: 350 queries/sec– High queries in Daytime– Low queries in Weekend

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 8

Peak Queries on ns0.nic.ad.jp
z Heavy queries come from unexpected events– April and May 2001
• Starting of JP 2LD registration– August 2001
• CodeRed or Nimda?
– January and February 2002
• BIND 8.3.0 released

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 9

BIND 8.3.0 Trouble Situationz Lame delegations on sub-domains can cause

DNS storms between upper DNS server andBIND 8.3.0 recursive servers.
DNS

DNS storm

DNS.JPBIND 8.3.0

Lame delegationClient
Copyright © 2002 Japan Registry Service Co., Ltd.

DNSEXAMPLE.JP

No. 10BIND 8.3.0 Trouble Reportz Course of events– 11th Jan 2002:

BIND 8.3.0 released• Queries of ns0 increased rapidly.
• Up to 6700 queries/sec!!

– 27th Jan. 2002:– 2nd Feb. 2002:– 7th Feb. 2002:
Copyright © 2002 Japan Registry Service Co., Ltd.

JPRS reported to ISC
BIND 8.3.1 released (bugfixed version)
JPRS announced about
BIND 8.3.0 problem
No. 11

What to care on DNS Operationz Zone file operation– Check the sub-domains.
• Lame delegations is potential troublez DNS queries– Monitor the DNS traffic• MRTG is good

– Check the ordinary traffic firstz BIND software– Check before install• Stable version need not to upgrade– Security fix must be done.
– Do not use BIND 8.3.0!!
Copyright © 2002 Japan Registry Service Co., Ltd.

No. 12

Acknowledgementz Telecommunications Advancement

Organization of Japan (TAO).
– JPRS’s research activity of investigation ofDNS is a part of TAO’s research.
– http://www.shiba.tao.go.jp/

Copyright © 2002 Japan Registry Service Co., Ltd.

No. 13