[address-policy-wg] Re: Assignments for Critical Infrastruction
-
To: Florian Weimer fweimer@localhost
-
From: Stephane Bortzmeyer bortzmeyer@localhost
-
Date: Thu, 30 Oct 2008 22:50:13 +0400
On Thu, Oct 30, 2008 at 07:36:48PM +0100,
Florian Weimer fweimer@localhost wrote
a message of 16 lines which said:
> And BGP does not optimize for RTT, like some resolvers do, so too
> much anycast will slow things down a bit.
Isn't it a classical case of security/performance trade-off? After the
attack on the root name servers on february 2007, most name servers
operators are ready to worsen a bit the latency, in order to get more
resilience.
And, anyway, we are drifting. The issue is not whether name servers
operators MUST use anycast-with-several-prefixes but if they CAN do it
with the current policy (answer: no, because it is limited to one
prefix).
|