[dns-wg] dnsmon / .org

    
        Joerg> Having only two nameservers for a tld and
        Joerg> both of them in a single AS makes me kind of nervous.
    
    Indeed. However, don't assume that the number of NS records for a zone
    is the same as the number (and physical locations) of its name servers.
    There's a fair amount of anycasting going on. What is curious is ICANN
    allowing a TLD to put all its name servers in a single AS. They made
    the new gTLDs use at least 2. So I would have expected ICANN to apply
    the same requirement for .org when it was moved from Verisign/NSI.
    
Note, org isn't the only gtld announced by a single AS. You wouldn't
be suprised to hear that that info as well.  The other one has
another problem: The tld[12] nameserver don't give authorative
answers about nameservers for info.

	jaap

 dig @tld1.ultradns.net info ns

 ; <<>> DiG 9.2.2 <<>> @tld1.ultradns.net info ns
 ;; global options:  printcmd
 ;; Got answer:
 ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38910
 ;; flags: qr rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2

 ;; QUESTION SECTION:
 ;info.                          IN      NS

 ;; ANSWER SECTION:
 info.                   86400   IN      NS      tld2.ultradns.net.
 info.                   86400   IN      NS      tld1.ultradns.net.

 ;; ADDITIONAL SECTION:
 tld2.ultradns.net.      86400   IN      A       204.74.113.1
 tld1.ultradns.net.      86400   IN      A       204.74.112.1