APNIC Open Address Policy Meeting APNIC Reverse DNS February 27th, Kuala Lumpur, Bruce Campbell [email protected] ASIA PACIFIC NETWORK INFORMATION CENTRE.
Download
Report
Transcript APNIC Open Address Policy Meeting APNIC Reverse DNS February 27th, Kuala Lumpur, Bruce Campbell [email protected] ASIA PACIFIC NETWORK INFORMATION CENTRE.
APNIC Open Address Policy
Meeting
APNIC Reverse DNS
February 27th, Kuala Lumpur,
Bruce Campbell
[email protected]
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Purpose of APNIC Reverse DNS
Delegation of IP space from APNIC to
ISPs etc. (in-addr.arpa / ip6.int )
Not automatically set up as part of an IP
allocation from APNIC.
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Reverse Delegations
Stored in APNIC WHOIS database as
domain objects.
Automatic form checks domain and
nameserver configuration for sanity
‘Sanity’ is at least two nameservers, and
information consistent across nameservers and
form (ie, SOA same, NS list same, authority set)
Assumes knowledge of Reverse DNS
ASIA PACIFIC NETWORK
INFORMATION CENTRE
What is a Domain Object?
Domain: 63.62.61.in-addr.arpa
Descr: Server and Office Subnet
Country: AU
Admin-c: (APNIC) NIC-HDL
Tech-c: (APNIC) NIC-HDL
Zone-c: (APNIC) NIC-HDL
nserver: ns1.my.forward.domain
nserver: ns.some.faraway.site
ASIA PACIFIC NETWORK
INFORMATION CENTRE
What is a Domain Object (2) ?
Remarks: free text
notify: Database emails this address
mnt-by: MAINT-My-Maintainer-Object
mnt-lower: MAINT-My-Maintainer-Object
changed: email@address YYYYMMDD
source: APNIC
Standard APNIC database object.
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Limitations
Classful delegations (limited to the ‘.’
boundaries). (/19 allocation must delegate
32 /24s)
Not telepathic, must request (re)delegation.
Must have nameservers set up before
requesting delegation.
Changes made public (officially) only once
per business day (10am, UTC+1000) on
ns.apnic.net .
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Via Email
Standard APNIC database object, can be
updated via email.
Nameserver/domain set up verified before
being submitted to the database.
Protection by maintainer object (current
auths of NONE, Email address, password
or PGP).
No zone file rebuilds occur on weekends.
ASIA PACIFIC NETWORK
INFORMATION CENTRE
On the Web and Interactive
Http://www.apnic.net/db/domain.html
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Online Errors (also via Email)
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Request Sent to APNIC
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Successful Update
ASIA PACIFIC NETWORK
INFORMATION CENTRE
Questions?
[email protected]
ASIA PACIFIC NETWORK
INFORMATION CENTRE