[8941] in athena10
Re: Comcast's DNS servers + Kerberos + dialup.mit.edu = fail
daemon@ATHENA.MIT.EDU (Kevin Chen)
Tue Apr 17 20:30:14 2012
In-Reply-To: <20120418001741.GT11594@multics.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: 8bit
From: Kevin Chen <kchen@MIT.EDU>
Date: Tue, 17 Apr 2012 20:30:17 -0400
To: John Hawkinson <jhawk@MIT.EDU>, Geoffrey Thomas <geofft@MIT.EDU>
CC: debathena@MIT.EDU
Message-ID: <8e59b98e-57b2-4b4f-8a3c-4b3eecb25e38@email.android.com>
John Hawkinson <jhawk@MIT.EDU> wrote:
>This seems a bit weird to me. Anycast addressing shouldn't mean you
>get a different anycast machine for two sucessive queries; is
>that what you're saying is happening?
While I don't know the technical details of how Comcast's servers are set up, it would not surprise me if they have several servers at a single location answering for a single IP.
In any case, if you do something like dig whoami.akamai.net repeatedly to get the machine-specific IP of the DNS server, you will get differing answers, and the TTL will also vary and not just keep decrementing.
--
Kevin Chen
