ISC Blogs

New Opportunities for Criminal Growth - Forecasting Cyber-Crime during the IPv6 Transition

27 Apr 2011
Barry Greene

 I had the fortunate opportunity to present the Wednesday Keynote at the Rocky Mountain 2011 IPv6 Summit.  The session was a slightly different angle to the normal "IPv6" presentations.

ISC DHCP and IPv6 - the DHCPv6 story

21 Apr 2011
Shane Kerr, Tomasz Mrugalski

Numbering Computers in IPv6

Computers and other IPv6-enabled devices need a way to select which IP address they are using, just like in IPv4. IPv6 provides several ways to do this:

Sign up now to learn how Security Information Exchange (SIE) & Passive DNS are changing the way investigators are effectively collaborating.

17 Mar 2011
Robert Edmonds, Eric Ziegast, Barry Greene

The Security Information Exchange (SIE) and ISC’s Passive DNS System (DNSDB) are public benefit projects that are contributing to a shift in the way security companies work with each other.

Please sign up now for one of two webinars on March 29th, 2011 (click here). 

In this webinar, we will:

Blocking DNS

17 Mar 2011
by Paul Vixie

COICA and Secure DNS

RTT Banding Removal From BIND 9

18 Feb 2011
Michael Graff

In response to our customers and colleagues, ISC has chosen to remove the RTT Banding feature from BIND 9, starting with BIND 9.8.0. Other supported versions will have RTT Banding removed in their next releases.

BIND 9.8.0 is scheduled to go out on March 1st, 2011. 9.8.1 will follow around a month later.

But Open Source Software is unsupported. Isn't it?

16 Feb 2011
by Paul Ebersman

 

Open Source is not unsupported

It's a common misconception that open source software means it's unsupported, that if you want to have 7x24 support you have to buy commercial software. Nothing could be further from the truth.

The reality is that open source software is written by professional coders, is fully production quality and support is available. The major difference between commercial software and open source software is this:

An Ending and An Opportunity

04 Feb 2011
Suzanne Woolf

A new milestone in the history and evolution of the Internet has passed: On Thursday, February 3, 2011, it was announced that the Internet Assigned Numbers Authority (IANA), steward of the Internet's reserves of unassigned IP addresses, has distributed the final blocks of IPv4 addresses to the Regional Internet Registries (RIRs). The RIRs, based in North America, Europe, Asia, South America, and Africa, will now allocate them, according to rules developed in each region, to service providers and enterprises worldwide. And then all of the IPv4 addresses will be in use.

DNSSEC and "lazy delegation"

27 Jan 2011
Michael Graff

Prior to deploying DNSSEC it has been possible to perform something I'm calling "lazy delegation." This is when a parent and direct child are served from the same name servers, so NS records in the parent are unnecessary in practice.

While consulting with various clients about how to best deploy their DNSSEC, this is a common discovery. Often times someone just forgot to add NS records, or their tools do not add them. No one notices because their DNS worked.

Preparing for a world consisting of larger DNS responses.

20 Jan 2011
Peter Losher

While many of you know ISC as the maintainer of the BIND DNS server software, we have always had our hand in the DNS operations field, including operating one of the 13 DNS root servers (F.ROOT-SERVERS.NET), as well as secondaring many ccTLD and non-commercial zones for over a decade. ISC has also been at the forefront of designing and implementing DNS Security Extensions (DNSSEC) which is a mechanism to cryptographically verify that the response given to a DNS request is correct.

How to connect to a multi-homed server over TCP.

19 Jan 2011
Mark Andrews

With the world wide deployment of IPv6 in parallel with IPv4, it has become apparent that a traditional connection loop is no longer good enough.

In fact, this is a large part of the reason why Google is white listing resolvers and Yahoo only wants to return to AAAA records to DNS queries made over IPv6.  The traditional connection loop does not behave well in the presence of some network errors.  It introduces excessive delays when there are good alternate addresses to use.

blog topics

monthly archive

Share this