<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><p lang="es-ES" style="margin-bottom: 0cm">[Português a continuação]</p><p lang="es-ES" style="margin-bottom: 0cm">[English will follow]</p><p lang="es-ES" style="margin-bottom: 0cm">-----------------------------------------</p><p lang="es-ES" style="margin-bottom: 0cm">INFORMACIÓN IMPORTANTE</p><p lang="es-ES" style="margin-bottom: 0cm">El próximo día 5 de mayo
entre las 17:00 - 19:00 UTC el servidor raíz de DNS J comenzará a
servir una "Deliberately Unvalidatable Root Zone (DURZ)"
como parte del proceso de la implementación de DNSSEC en la zona
raíz. Este es el último de los servidores raíz del DNS en hacer la
transición y al igual que con las cambios anteriores no se esperan
efectos negativos al realizarse esta migración.</p><p lang="es-ES" style="margin-bottom: 0cm"><br></p><p lang="es-ES" style="margin-bottom: 0cm">Como parte del proceso de
migración a DNSSEC, los paquetes de DNS transmitidos sobre UDP
podrían ya no ser menores a 512 bytes como tradicionalmente se
manejaba en la zona raíz. En caso de que el mensaje sea rechazado,
es posible que el servidor reintente la petición usando TCP en lugar
de UDP. Este cambio en el tamaño de los paquetes transmitidos por el
sistema de DNS y el uso de TCP puede ocasionar problemas con algunos
equipos de red como firewalls y enrutadores o incluso con algunas
versiones antiguas de servidores recursivos (resolvers) de DNS.</p><p lang="es-ES" style="margin-bottom: 0cm"><br></p><p lang="es-ES" style="margin-bottom: 0cm">Para verificar la correcta
operación de los "resolvers", incluyendo la red sobre la
que están y si estos tienen algún problema con la respuesta
aceptada por los servidores de DNS, los ISPs y operadores de redes
tienen al alcance un par de herramientas:</p><div><br></div><p lang="es-ES" style="margin-bottom: 0cm"><a href="https://www.dns-oarc.net/oarc/services/replysizetest">https://www.dns-oarc.net/oarc/services/replysizetest</a></p><p lang="es-ES" style="margin-bottom: 0cm"><a href="http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues">http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues</a></p><p lang="es-ES" style="margin-bottom: 0cm"><br>
</p><p lang="es-ES" style="margin-bottom: 0cm">Para más información
relacionada con la versiones de software de DNS recursivo que
soportan la Deliberately-Unvalidatable Root Zone (DURZ):</p><p lang="es-ES" style="margin-bottom: 0cm"><a href="http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt">http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt</a></p><p lang="es-ES" style="margin-bottom: 0cm"><br>
</p><p lang="es-ES" style="margin-bottom: 0cm"><br>
</p><p lang="es-ES" style="margin-bottom: 0cm">----------------------------------------</p><p lang="pt-BR" style="margin-bottom: 0cm">INFORMAÇÃO IMPORTANTE</p><p lang="pt-BR" style="margin-bottom: 0cm"><br>
</p><p lang="pt-BR" style="margin-bottom: 0cm">Na próxima quarta-feira 5
de maio das 17:00 às 19:00 UTC o servidor raíz do DNS J vai começar
servir uma "Deliberately Unvalidatable Root Zone (DURZ)"
como parte do processo da implementação do DNSSEC na zona raíz.
Este é o último dos servidores raíz do DNS em fazer a transição
e da mesma forma que com as mudanças anteriores não estão sendo
esperados efeitos negativos quando for realizada essa migração.</p><p lang="pt-BR" style="margin-bottom: 0cm"><br>
</p><p lang="pt-BR" style="margin-bottom: 0cm">Como parte do processo de
migração para DNSSEC, os pacotes de DNS transmitidos sobre UDP
poderiam já não ser menores que 512 bytes como tradicionalmente na
zona raíz. Se a mensagem for rejeitada, é possível que o servidor
reintente o pedido usando TCP no lugar de UDP. Essa mudança no
tamanho dos pacotes transmitidos pelo sistema de DNS e o uso de TCP
pode provocar problemas em alguns equipamentos de rede como firewalls
e routers ou inclusive em algumas versões antigas de servidores
recursivos (resolvers) de DNS.</p><p lang="pt-BR" style="margin-bottom: 0cm"><br>
</p><p lang="pt-BR" style="margin-bottom: 0cm">Para verificar a operação
correta dos “resolvers”, incluindo a rede sobre a que estão, e
no caso desses tiverem algum problema com a resposta aceita pelos
servidores de DNS, os ISPs e operadores de redes terão disponíveis
duas ferramentas:</p><div style="margin-bottom: 0cm; ">
<br class="webkit-block-placeholder"></div><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="https://www.dns-oarc.net/oarc/services/replysizetest"><span lang="pt-BR">https://www.dns-oarc.net/oarc/services/replysizetest</span></a></u></span></font></p><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues"><span lang="pt-BR">http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues</span></a></u></span></font></p><p lang="pt-BR" style="margin-bottom: 0cm"><br>
</p><p lang="pt-BR" style="margin-bottom: 0cm">Para mais informações
relativas às versões de software de DNS recursivo que sustentam a
Deliberately-Unvalidatable Root Zone (DURZ) acesse:</p><p lang="pt-BR" style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt"><span lang="pt-BR">http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt</span></a></u></span></font></p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm"><span lang="es-ES">-------------------------------------</span></p><p style="margin-bottom: 0cm"><span lang="es-ES">RELEVANT INFORMATION</span></p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm">On May 5, between 17:00 and 19:00 UTC,
as part of the process for the implementation of DNSSEC in the root
zone, the “J” DNS root server will begin serving a "Deliberately
Unvalidatable Root Zone (DURZ)". This is the last of the DNS
root servers to make the transition and, as with previous changes, it
is anticipated that the migration will not have any negative effects.</p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm">As part of the process for migrating to
DNSSEC, DNS packets transmitted over UDP may now be larger than 512
bytes (traditionally, in the case in the root zone, packets were
limited to 512 bytes). If a message is rejected, the server may
attempt to comply with the request once again using TCP instead of
UDP. This change in the size of the packets transmitted by the DNS
system and the use of TCP may cause problems with some network
equipment, such as firewalls and routers, or even with some older
version of DNS recursive servers (resolvers).</p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm">In order to test the proper operation
of the resolvers, including the network on which they are installed,
to check whether they have any DNS reply size issues, a couple of
tools are available to ISPs and network operators:</p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="https://www.dns-oarc.net/oarc/services/replysizetest">https://www.dns-oarc.net/oarc/services/replysizetest</a></u></span></font></p><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues">http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues</a></u></span></font></p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm">For further information on which
recursive DNS software versions support the
Deliberately-Unvalidatable Root Zone (DURZ):</p><p style="margin-bottom: 0cm"><br>
</p><p style="margin-bottom: 0cm"><font color="#000080"><span lang="zxx"><u><a href="http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt">http://www.root-dnssec.org/wp-content/uploads/2010/03/draft-icann-dnssec-resolver-testing-00.txt</a></u></span></font></p><p style="margin-bottom: 0cm"><br>
</p>
</body></html>