Advisory — “L Root” changing IP address on 1st November

by Kim Davies on October 24, 2007

This is advance notice that there is a scheduled change to the IP address for one of the authorities listed for the DNS root zone. The change is to L.ROOT-SERVERS.NET, which is administered by ICANN.

The new IPv4 address for this authority is 199.7.83.42.

This change is anticipated to be implemented in the root zone on 1 November 2007, however the new address is operational now. It will replace the previous IP address of 198.32.64.12.

We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root “hints” file. This should be updated with the new IP address.

New hints files will be available at the following URLs once the change has been formally executed:

  • ftp://rs.internic.net/domain/db.cache
  • ftp://rs.internic.net/domain/named.cache
  • ftp://rs.internic.net/domain/named.root
  • ftp://ftp.internic.net/domain/db.cache
  • ftp://ftp.internic.net/domain/named.cache
  • ftp://ftp.internic.net/domain/named.root

It is expected that the old address will continue to work for at least six months after the transition, but will ultimately be retired from service.

{ 3 comments }

Jay Westerdal 11.11.07 at 5:16 pm

Why is 198.32.64.12 going away? Are you giving it back to ARIN? Seems strange to retire a IP address that is so embedded.

I would love to know the story behind the new allocation rather then just the technical details because of it.

Matthew, SF, CA 11.21.07 at 10:02 am

Jay wrote:
> I would love to know the story behind the new allocation rather then just the technical details because of it.
See
http://www.theregister.co.uk/2007/11/06/icann_rolls_out_new_root_name_server_address/
(short answer: anycasting)
Tips/links on how to check/update various systems/a list of those that do/don’t need manual attention would be useful. (Well, none NEED it; which would benefit from it, which will auto-fix themselves?) ISC’s http://www.isc.org/sw/bind/index.php has no info; I had to search for a while to find this answer for BIND: http://marc.info/?l=bind-announce&m=119404092426633&w=2 . It’s unclear whether keeping up with OS security updates will get the problem corrected the next time one’s DNS software gets updated. :( It is clear that any new BIND installs will have the new IP.

Note: adding comments to this page REQUIRES javascript. :(

Eugene 02.01.08 at 2:56 am

Why did you change the address?

Comments on this entry are closed.