Categories
Q&A

Where we are with DNSSEC

From time to time we get questions on DNSSEC support. There are many parts to DNSSEC, but here’s we we stand as of this post:

Our Secondary DNS service (which is based on BIND9) has supported DNSSEC for several years and we have received confirmed reports from some of our customers that use the secondary service that it does work. The Primary DNS service does not support it at this time since it’s based on a version of PowerDNS that lacks DNSSEC support. However, the next release version of PowerDNS will have it, at which point we can work on integrating it into our control center.

On the network side we do not employ any type of mechanisims that try to be “smart” with manipulating DNS traffic incorrectly. Further to that, both UDP and TCP are open for DNS traffic. Contrary to popular belief, DNS queries can use TCP for queries other than AXFR if the UDP query failed, so we allow both.

Categories
Announcements

Registry Price Increases: .org and .biz

Due to registry price increases for .org (Public Interest Registry) and .biz (Neustar), our new price for these TLDs will be:

  • .org $11.50
  • .biz $11.60
Categories
Announcements IPv6

IPv6 Dynamic DNS Now Available

We’ve released a minor update to our Dynamic DNS client to support IPv6. We’ve been working on this on and off for the last few months but didn’t really put any kind of rush on it because we didn’t believe that there was any demand for such a service.

Today though a question about IPv6 enabled dynamic DNS services came up on the ipv6-ops list, so we went ahead and finished it up for public consumption. It’s still business as usual for everyone using it for IPv4 dynamic DNS, but now there’s an IPv6 option. See the documentation for details. We have not added an AAAA record to acc.rollernet.us, so while there is auto-detect code for IPv6 clients in our Dynamic DNS client, there’s no way to take advantage of it just yet.

If anyone actually uses it for its IPv6 support we’d be interested in your feedback.

Categories
IPv6 Status

Global Crossing IPv6 Trouble

An issue with a customer’s IPv6 access was brought to our attention this morning. After some basic testing, it was apparent the traceroutes were stopping at our Global Crossing PE router (provider side) and we opened a trouble ticket with them to investigate.

A few hours later we discovered that the RIPE website was unreachable. Although the traceroute out indicated it was leaving our network via Sprint, we suspected the return traffic was trying to reach us via Global Crossing. After withdrawing our route announcements to GC we were able to reach RIPE and the customer who origionally brought the issue to our attention.

As this time we are waiting for a resolution on our trouble ticket with Global Crossing regarding this issue.

UPDATE [2011-03-06]: Global Crossing acknowledges that some recent MPLS changes in their network had caused our IPv6 to be null routed. They reverted the most recent changes and connectivity was restored. We will continue to monitor the situation.

Categories
Changes

Password Change Enhancements (Mail Box and Outbound)

We’ve made some enhancements to the password change pages for both Outbound accounts and hosted mail boxes. The account control center will now look for a matching outbound or mail box account by name and give you the option to apply the new password to both in one step.

The New Password Change Page

Also, we’ve added a random password generator button that will fill in a random 10 character password each time it’s clicked. There is no requirement to use the random passwords it generates and you can still edit it before applying the new password.