Root Server Operators
July 2024 Meeting Report
On July 21, 2024, the root server operators met in Vancouver, BC prior to the IETF mee@ng.
Representa@ves from all 12 organiza@ons were present, with 23 aHendees in person and 18
aHendees remote.

Personnel Changes
The mee@ng opened with introduc@ons and no@ce of any personnel changes since the last
mee@ng. Personnel changes at IMRS were noted.

Alert System Test
A regularly scheduled test of the alert system was conducted. Everyone reported receiving theexpected alert no@ﬁca@ons via at least one method (SMS, voice, email). A few individuals
reported not receiving the alert via either voice or SMS.

TSIG KeyAs part of the procedure for genera@ng a new zone transfer TSIG key, all par@cipants chose andspoke a word or phrase. The words will be collated and provided as a source of randomness
when genera@ng the key, which will be distributed aVer the mee@ng.

Incidents
Cogent provided an account of C-root serving stale data in May 2024. The public statement forthis incident is available at hHps://c.root-servers.org/ under the News heading.
Verisign reported a brief DDoS aHack to A-root in July. The aHack lasted only a few minutes but
reached 45 Gbps spread among numerous anycast sites.
WIDE/JPRS reported one of their M-root sites being disconnected from the internet for
approximately 12 days due to local civil unrest.

Architecture Presenta:onThe team from WIDE/JPRS gave a presenta@on on the architecture of opera@ons for M-root andanswered ques@ons from the other RSOs.

RSSAC047 Study
A consor@um of researchers from NLNet Labs and SIDN has been studying the ini@al
implementa@on of RSSAC047 metrics. Consor@um representa@ves presented their ﬁndings todate and answered ques@ons from RSOs.

DITL Data Collec:onDNS-OARC has made the DITL-2024 data available to members. Root server operators in general
would like to know if the data provided by them is useful to researchers and DNS-OARC
members. Verisign is sponsoring a DNS-OARC project to make DITL data easier to analyze.
Many RSOs now anonymize source addresses when contribu@ng to DITL. Three use the sameanonymiza@on key. It was noted that it would be nice to know if any data consumers ﬁnd thishelpful.

Root KSK Rollovers
ICANN is proceeding with the next KSK rollover. KSK-2024 was replicated last week and is
expected to appear in the root zone in January 2025.

RPKI StatusServiceA
BCDEFGH
IJKL
M
SNS

IPv4 ROAs
PlannedYes

IPv6 ROAs
Planned
Yes

Yes

Yes

Yes

Yes

Yes
PlannedYes

Yes
Planned
Yes

PlannedPlanned

Yes
PlannedCollabora:on Systems
The sysadmin group is close to migra@ng collabora@on systems to new hardware and plans tomeet later in the week.

External Communica:ons
Since the previous mee@ng, a few representa@ves have begun working on a shared document
to gather diversity data. This document is to be shared among RSOs internally. Once all RSOs
have contributed the necessary informa@on, the RSOs will publish a high-level, aggregateddiversity report.

Root Server System Governance Working Group Update
A brief update on the RSS GWG was given for any RSO par@cipants that are not alreadypar@cipa@ng in the GWG. A discussion took place on what the RSOs might be able to do in thenear future do demonstrate their commitment to principles developed by the GWG.

Root Server System Advisory CommiIee Update
Representa@ves from RSSAC provided updates on the commiHee’s recent ac@vi@es, including
RSSAC messaging, the work party on security incident repor@ng, and the work party onchanging root server IP addresses.

Root Zone Evolu:on Review CommiIee Update
RZERC has not been mee@ng recently. The RSSAC has appointed a new person as their liaison toRZERC.

Legal or Regulatory impacts on RSO Opera:onsAn RSO observed aHempts or desires by some countries to restrict which opera@ng systems
may be used within their jurisdic@on.

Mee:ng Sponsors
The three RSOs that previously volunteered to sponsor the July mee@ng were reminded toexpect invoices. For the upcoming mee@ng in November, three RSOs have already volunteered
to cover the costs.