[LINK] Attack On Internet Called Largest Ever
Howard Lowndes
lannet@lannet.com.au
Wed, 23 Oct 2002 11:39:54 +1000 (EST)
On Wed, 23 Oct 2002, Roger Clarke wrote:
> I've just yesterday finished a set of slides for a presentation on
> Friday on Internet Governance (trying to convince lawyers to learn
> enough about the Internet before they start discussing how to
> strangle it with laws):
> Internet Architecture and Operation:
> 'Supra-National' Rather Than 'International' Governance
> http://www.anu.edu.au/people/Roger.Clarke/II/IGCLPC02.html
> (Constructively negative comments much appreciated, as always)
>
> The thought struck me during this and other recent discussions re DNS
> that the volume of traffic at the root servers would generally be
> very low. That would be because the relatively small number of
> domains for which the root servers are (equal) authoritative
> name-servers are pretty stable, and hence the entries are cached all
> over the place, and hence there don't need to be many enquiries to
> them. They're effectively the reboot-mechanism of last resort.
I don't think this is true. My understanding (and I would like to be
corrected if this is wrong) is that if a local DNS server is either not
authoratitive for a domain, or does not have the requested address already
cached, then its next place of recourse is directly to a root server and
then steadily back down the chain.
I originally thought that the process was steadily up the chain to a given
point and then back down, but I was corrected on this only the other day.
If my current assumption _is_ correct then the root servers will be
getting a fair pasting and a DDoS would have severe impact.
Please, someone, correct me if I am wrong.
>
> If that analysis is correct (and I certainly don't vouch for it!),
> then, if the DDoS attack was intended to be nasty, it was
> poorly-targetted.
>
> If, on the other hand, the attack was intended to send a fairly
> harmless but highly symbolic warning-signal to the world that
> Internet infrastructure is fragile, then it was extremely
> *well*-targetted.
>
>
--
Howard.
LANNet Computing Associates - Your Linux people
Contact detail at http://www.lannetlinux.com
"Flatter government, not fatter government." - me
Get rid of the Australian states.
------------------------------------------
If electricity comes from electrons, does morality come from morons?
----------
For Link list information see http://sunsite.anu.edu.au/link/