[8940] in athena10
Re: Comcast's DNS servers + Kerberos + dialup.mit.edu = fail
daemon@ATHENA.MIT.EDU (John Hawkinson)
Tue Apr 17 20:17:46 2012
Date: Tue, 17 Apr 2012 20:17:41 -0400
From: John Hawkinson <jhawk@MIT.EDU>
To: Geoffrey Thomas <geofft@MIT.EDU>
Cc: debathena@MIT.EDU
Message-ID: <20120418001741.GT11594@multics.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <alpine.DEB.2.00.1204170214400.8722@dr-wily.mit.edu>
Geoffrey Thomas <geofft@MIT.EDU> wrote on Tue, 17 Apr 2012
at 02:37:30 -0400 in <alpine.DEB.2.00.1204170214400.8722@dr-wily.mit.edu>:
> Comcast's residential DNS IPs (75.75.75.75 and 75.75.76.76) are
> anycast addresses for muliple machines, which means that when
> looking up *.dialup.mit.edu, which is load-balanced at the DNS
> level, there's no guarantee that two successive client lookups
> (from a stub resolver) will hit the same server, and thus are more
This seems a bit weird to me. Anycast addressing shouldn't mean you
get a different anycast machine for two sucessive queries; is
that what you're saying is happening?
Somehow I thought the proper plan was to query once, resolve, and then
reverse-resolve that IP address. How did that fall by the wayside?
--jhawk
