Configuration for a very high traffic DNS server

[Stefan Schmidt]

On Mon, Sep 11, 2006 at 08:01:08PM +0530, Ramprasad wrote:
> Thanks for the info
> Do root servers run BIND. Is bind really suited for that kind of
> traffic ? 

Most of em do run BIND, yes.
$ dig ns . +short|xargs fpdns 
fingerprint (l.root-servers.net., 198.32.64.12): ISC BIND 8.3.0-RC1 -- 8.4.4  
fingerprint (a.root-servers.net., 198.41.0.4): ISC BIND 8.3.0-RC1 -- 8.4.4  
fingerprint (m.root-servers.net., 202.12.27.33): ISC BIND 9.2.3rc1 -- 9.4.0a0  
fingerprint (e.root-servers.net., 192.203.230.10): ISC BIND 9.2.3rc1 -- 9.4.0a0  
fingerprint (d.root-servers.net., 128.8.10.90): ISC BIND 8.3.0-RC1 -- 8.4.4  
fingerprint (i.root-servers.net., 192.36.148.17): ISC BIND 9.2.3rc1 -- 9.4.0a0  
fingerprint (j.root-servers.net., 192.58.128.30): ISC BIND 8.3.0-RC1 -- 8.4.4  
fingerprint (f.root-servers.net., 192.5.5.241): ISC BIND 9.2.3rc1 -- 9.4.0a0  
fingerprint (k.root-servers.net., 193.0.14.129): NLnetLabs NSD 1.2.3 [root]  
fingerprint (g.root-servers.net., 192.112.36.4): ISC BIND 9.2.3rc1 -- 9.4.0a0  
fingerprint (c.root-servers.net., 192.33.4.12): ISC BIND 8.3.0-RC1 -- 8.4.4  
fingerprint (h.root-servers.net., 128.63.2.53): NLnetLabs NSD 1.2.3 [root]  
fingerprint (b.root-servers.net., 192.228.79.201): ISC BIND 9.2.3rc1 -- 9.4.0a0 

Please note that almost all root-servers are distributed on several
locations and incorporate some kind of loadbalancing.
-> http://root-servers.org/ 

Some even have some nice graphs on the traffic they handle.
-> http://k.root-servers.org/

Running as authorative only even a single machine running BIND could
handle that load but that is not done for redundancys sake.

>    Can someone tell me why NS queries from Net::DNS are different from
> dig on command line

Meaning they give different answers for the same query or is it just the
output-format that differs?

	Stefan
-- 
- The Borg wouldn't know fun if they assimilated an amusement park!
Torres to Seven, "Tsunkatse.", ST-Voyager