[55664] in North American Network Operators' Group
RE: Odd DNS responses for www.neopets.com
daemon@ATHENA.MIT.EDU (Deepak Jain)
Wed Feb 5 22:41:35 2003
Reply-To: <deepak@ai.net>
From: "Deepak Jain" <deepak@ai.net>
To: "Alex Lambert" <alambert@quickfire.org>,
"Stephen Milton" <milton@isomedia.com>, <nanog@merit.edu>
Date: Wed, 5 Feb 2003 22:40:55 -0500
In-Reply-To: <169c01c2cd7b$da373d80$0700010a@quickfire.org>
Errors-To: owner-nanog-outgoing@merit.edu
>
> > Maybe it's just me, but isn't there something odd about a DNS query
> > coming back with 78 entries for the same host? It sends back an UDP
> > packet that gets truncated and the DNS resolver reverts to TCP to get
> > the full list.
>
> This is often used for server pools (as I'm guessing you know).
>
> > It seems to cause problems with Windows clients and/or Windows DNS
> > servers. Seems like overkill.
>
> The 78 addresses listed here are all in one bit of a /24. In the
> cases I've
> seen, there are a few servers listed in several different locations,
> network- (and location-) wise. I agree that this looks really
> weird. Perhaps
> they use it as a cheap load balancer?
>
Perhaps they use it to pad their IP allocations??
DJ
