[lacnog] Quad9 --> Servidor DNS
Gael Hernandez
gael en pch.net
Lun Nov 20 21:05:51 BRST 2017
Disculpen por el silencio pero hubo un problema en la entrega del
correo. Vuelvo a reenviar.
Saludos,
Gaël
>>> Gracias por enviar las mediciones! Son muy útiles y las
>>> examinaremos
>>> en detalle.
>>>
>>> Nuestro objetivo a medio plazo es activar instancias de Quad9 en
>>> todos los nodos de PCH en la region, por lo que esperamos que las
>>> latencias mejoren con el tiempo.
>>>
>>> - Luis, necesitamos enviar servidores a Brasil pero resulta
>>> complicado
>>> importarlos, así que cualquier colaboración en ese sentido es
>>> bienvenida (Obrigado!)
>>>
>>> - Alejandro, tenemos nodos en Buenos Aires, Cordoba y Neuquén, y
>>> estamos activando el servicio progresivamente.
>>>
>>> - Jordi, en Madrid todavía no estamos activos, planeado para 2018.
>>>
>>> - Arturo, hay una variante CDN-friendly en desarrollo,
>>> y estará accesible muy pronto en 9.9.9.11. Y para dispositivos IoT,
>>> tendremos una variante que envía NXDOMAIN, accesible en 9.9.9.12.
>>>
>>> Saludos
>>> Gaël
On 17 Nov 2017, at 14:38, Roberto Alvarado wrote:
> Me intriga lo del blocklist o de donde se nutre para realizar los
> bloqueos, por ejemplo para un dominio que es un phishing ya detectado
> a nivel de google safe browsing, no existe diferencia en la respuesta
> del registro A, para 8.8.8.8 o 9.9.9.9:
>
> (Disculpen por mandar un phishing activo a la lista)
>
> http://apple.itunesconnect.su <http://apple.itunesconnect.su/>
>
>
> $ dig apple.itunesconnect.su @8.8.8.8
>
> ; <<>> DiG 9.9.7-P3 <<>> apple.itunesconnect.su @8.8.8.8
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55306
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 512
> ;; QUESTION SECTION:
> ;apple.itunesconnect.su. IN A
>
> ;; ANSWER SECTION:
> apple.itunesconnect.su. 959 IN A 141.255.161.78
>
> ;; Query time: 53 msec
> ;; SERVER: 8.8.8.8#53(8.8.8.8)
> ;; WHEN: Fri Nov 17 11:33:32 -03 2017
> ;; MSG SIZE rcvd: 67
>
> $ dig apple.itunesconnect.su @9.9.9.9
>
> ; <<>> DiG 9.9.7-P3 <<>> apple.itunesconnect.su @9.9.9.9
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60958
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;apple.itunesconnect.su. IN A
>
> ;; ANSWER SECTION:
> apple.itunesconnect.su. 989 IN A 141.255.161.78
>
> ;; Query time: 54 msec
> ;; SERVER: 9.9.9.9#53(9.9.9.9)
> ;; WHEN: Fri Nov 17 11:33:36 -03 2017
> ;; MSG SIZE rcvd: 67
>
> Saludos
> Roberto
>
>
>> On Nov 17, 2017, at 11:23, JORDI PALET MARTINEZ
>> <jordi.palet en consulintel.es> wrote:
>>
>> Desde Madrid a 40 ms., mientras que el DNS de google y el de
>> Telefonica estan a 3 ms.
>>
>> Saludos,
>> Jordi
>>
>>
>> -----Mensaje original-----
>> De: LACNOG <lacnog-bounces en lacnic.net> en nombre de Eduardo Schoedler
>> <listas en esds.com.br>
>> Responder a: Latin America and Caribbean Region Network Operators
>> Group <lacnog en lacnic.net>
>> Fecha: viernes, 17 de noviembre de 2017, 22:08
>> Para: Latin America and Caribbean Region Network Operators Group
>> <lacnog en lacnic.net>
>> Asunto: Re: [lacnog] Quad9 --> Servidor DNS
>>
>> http://www.isptools.com.br/ping#65!0!9.9.9.9
>>
>>
>> 2017-11-17 11:52 GMT-02:00 Jorquera Gaete Jose Ignacio
>> <jjorquera en grupogtd.com>:
>>
>> Estimados,
>>
>> Desde Santiago/Chile efectivamente existen 1-2 ms
>> ya que está conectado a PIT Chile:
>>
>> 4 1 ms 1 ms 1 ms cn2.2-0-0.ro.gtdinternet.com
>> <http://cn2.2-0-0.ro.gtdinternet.com> [190.196.125.9]
>> 5 5 ms 2 ms 2 ms
>> gw-gtdinternet.nacional1.red.movistar.cl
>> <http://gw-gtdinternet.nacional1.red.movistar.cl> [186.148.60.49]
>> 6 2 ms 2 ms 1 ms 10.200.247.197
>> 7 2 ms 2 ms 2 ms
>> packet-clearing-house-AS42.scl.pitchile.cl
>> <http://packet-clearing-house-AS42.scl.pitchile.cl> [200.23.206.220]
>> 8 3 ms 3 ms 3 ms dns.quad9.net
>> <http://dns.quad9.net> [9.9.9.9]
>>
>> Traza completa.
>>
>> Saludos!
>>
>> José Jorquera.
>>
>> De: LACNOG [mailto:lacnog-bounces en lacnic.net]
>> En nombre de Matias Niosi
>> Enviado el: viernes, 17 de noviembre de 2017 10:34
>> Para: Latin America and Caribbean Region Network Operators Group
>> <lacnog en lacnic.net>
>> Asunto: Re: [lacnog] Quad9 --> Servidor DNS
>>
>> En Uruguay:
>>
>> Claro 146ms
>>
>> Dedicado 168ms
>>
>> Antel 166ms
>>
>> Movistar 172ms
>>
>>
>>
>>
>> Matías Niosi
>> Chief Operations Officer
>>
>> Tel: (+598) 2626 2902 <tel:+598%202626%202902>
>> Cel: (+598) 95 064014 <tel:+598%2095%20064%20014>
>>
>>
>> www.latechco.com <http://www.latechco.com>
>>
>> Latin America Technology Company
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> El 17 de noviembre de 2017, 10:30, Raul Alberto Jager Weiler
>> <raul.jager en gmail.com> escribió:
>>
>> Desde Paraguay tengo 184 mili segundos para el ping.
>>
>>
>> 2017-11-17 10:15 GMT-03:00 Santiago Liz <sliz en riu.edu.ar>:
>>
>> Desde Argentina dependiendo del proveedor entre 140 y 290ms
>>
>> Saludos,
>> Santiago.-
>>
>> -----Mensaje original-----
>> De: LACNOG [mailto:lacnog-bounces en lacnic.net] En nombre de Ivan
>> Žilic Schmidt
>> Enviado el: viernes, 17 de noviembre de 2017 09:56 a.m.
>> Para: 'Latin America and Caribbean Region Network Operators Group'
>> Asunto: Re: [lacnog] Quad9 --> Servidor DNS
>>
>> Gael,
>>
>> Muchas gracias por compartir esta información.
>>
>> Felicitaciones por esta incorporación al ya extenso catálogo de
>> servicios que entrega PCH.
>>
>> En Santiago de Chile estamos llegando con 1.5 ms al 9.9.9.9 y al
>> 9.9.9.10.
>>
>> saludos,
>>
>> Ivan Žilić Schmidt
>>
>> -----Original Message-----
>> From: LACNOG [mailto:lacnog-bounces en lacnic.net] On Behalf Of Luis
>> Balbinot
>> Sent: viernes, 17 de noviembre de 2017 9:29
>> To: Latin America and Caribbean Region Network Operators Group
>> <lacnog en lacnic.net>
>> Subject: Re: [lacnog] Quad9 --> Servidor DNS
>>
>> 163ms desde o sul do Brasil, podem enviar um servidor para cá :-)
>>
>> Luis
>>
>> On Fri, Nov 17, 2017 at 9:07 AM, Gaël Hernández <gael en pch.net>
>> wrote:
>>> Hola!
>>>
>>> Después de un año en modo piloto, ayer se anunció el lanzamiento
>>> del servicio! PCH es uno de los socios del proyecto Quad9, además
>>> de IBM y GCA. Quad9 tiene su propia personalidad jurídica sin
>>> ánimo de lucro, y en PCH estamos orgullosos de proporcionar apoyo
>> operacional.
>>>
>>> Están todos bienvenidos a usarlo y a compartir sus experiencias y
>>> dudas con nosotros. Y no duden en contactarme si tienen interés en
>>> alojar uno de nuestros equipos en alguno de los puntos neutros de la
>>> region!
>>>
>>> Un saludo,
>>> Gaël
>>>
>>> Sent from my iPhone
>>>
>>>> On 17 Nov 2017, at 01:57, Carlos M. Martinez
>>>> <carlosm3011 en gmail.com> wrote:
>>>>
>>>> Hola Esteban,
>>>>
>>>> La mejor info que encontré está en el propio sitio del proyecto:
>>>> https://www.quad9.net/
>>>>
>>>> Si lo van a probar, creo que vale la pena tener en cuenta esta
>>>> parte:
>>>>
>>>>
>>>> ———
>>>> Is there a service that Quad9 offers that does not have the
>>>> blocklist or other security?
>>>>
>>>> The primary IP address for Quad9 is 9.9.9.9, which includes the
>>>> blocklist, DNSSEC, and other security features. However, there are
>>>> alternate IP addresses that the service operates which do not have
>>>> these security features. These might be useful for testing
>> validation, or to determine if there are false positives in the
>> Quad9 system.
>>>>
>>>> Secure IP: 9.9.9.9 Blocklist, DNSSEC, No EDNS Client-Subnet
>>>>
>>>> Unsecure IP: 9.9.9.10 No blocklist, no DNSSEC, send EDNS
>>>> Client-Subnet
>>>>
>>>> Note: Use only one of these two addresses. Some networking software
>>>> may include terminology such as “Secondary DNS Server” in
>>>> configuration windows; this can be left blank. Putting both 9.9.9.9
>>>> and 9.9.9.10 into “primary” and “secondary” fields may
>>>> result
>> in unsecure results in rare circumstances.
>>>> ———
>>>>
>>>> s2
>>>>
>>>> Carlos
>>>>
>>>>> On 17 Nov 2017, at 8:37, Esteban Carisimo wrote:
>>>>>
>>>>> Estimados,
>>>>>
>>>>> Hoy se lanzó el 9.9.9.9 como servidor DNS, ¿alguien escucho algo
>>>>> más
>>>>> de este servicio?. Acá les paso la info que leí
>>>>>
>>>>>
>> https://www.cyberscoop.com/quad9-dns-service-global-cyber-alliance/
>> <https://www.cyberscoop.com/quad9-dns-service-global-cyber-alliance/>
>>>>>
>>>>> Saludos
>>>>>
>>>>> --
>>>>> Esteban Carisimo
>>>>> Temporarily Visiting Graduate Student at CAIDA PhD student at
>>>>> CoNexDat (UBA-CONICET)
>> http://cnet.fi.uba.ar/esteban_carisimo/en
>> <http://cnet.fi.uba.ar/esteban_carisimo/en>
>>>>>
>>>>> _______________________________________________
>>>>> LACNOG mailing list
>>>>> LACNOG en lacnic.net
>>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>>> _______________________________________________
>>>> LACNOG mailing list
>>>> LACNOG en lacnic.net
>>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>>
>>>
>>> _______________________________________________
>>> LACNOG mailing list
>>> LACNOG en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>> <https://mail.lacnic.net/mailman/options/lacnog>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>>
>>
>>
>>
>>
>>
>>
>> --
>> Eduardo Schoedler
>>
>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion:
>> https://mail.lacnic.net/mailman/options/lacnog
>>
>>
>>
>>
>> **********************************************
>> IPv4 is over
>> Are you ready for the new Internet ?
>> http://www.consulintel.es
>> The IPv6 Company
>>
>> This electronic message contains information which may be privileged
>> or confidential. The information is intended to be for the exclusive
>> use of the individual(s) named above and further non-explicilty
>> authorized disclosure, copying, distribution or use of the contents
>> of this information, even if partially, including attached files, is
>> strictly prohibited and will be considered a criminal offense. If you
>> are not the intended recipient be aware that any disclosure, copying,
>> distribution or use of the contents of this information, even if
>> partially, including attached files, is strictly prohibited, will be
>> considered a criminal offense, so you must reply to the original
>> sender to inform about this communication and delete it.
>>
>>
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <https://mail.lacnic.net/pipermail/lacnog/attachments/20171120/f6f12acb/attachment-0001.html>
Más información sobre la lista de distribución LACNOG