September 8, 2021
UTC timezone
OARConline 35a begins 15:00 UTC today 8 September

More Mysterious Root Query Traffic from a Large Recursive Operator

Sep 8, 2021, 3:25 PM
Standard Presentation Online Workshop OARConline 35a


Duane Wessels (Verisign)Mr Christian Huitema


While performing an analysis of query names seen at the ICANN Managed Root Server (IMRS), ICANN staff discovered a significant amount of strange query traffic coming from one of the datacenters of a large, well-known recursive DNS operator. While this traffic was hitting a single IMRS instance, Verisign staff confirmed the odd traffic is observed at some of their root server instances as well. In this joint presentation, we present the findings, hoping to shed some light on its purpose, and eventually understand if it is strictly necessary.

Talk Duration 10 Minutes Lightning Talk (inc Q&A)

Primary author

Duane Wessels (Verisign)


Mr Alain Durand (ICANN) Mr Christian Huitema

Presentation materials