USA and DNS

philb19
philb19 used Ask the Experts™
on
Can ICANN of USA who controll the "." root of DNS bring the entire internet down by pulling down these DNS servers. - ie can the USA bring the internet down if it chooses by turning root DNS off all together if they choose to?


- Or could countries ISP's be able to continue to keep the internet running in their local counties?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Well for starters, there are 13 root DNS servers. So to disable root DNS availability you would need to dismantle all 13 of those, which are, needless to say, heavily secured by incredibly fancy firewalls, redundancy, clustering, high availability, fail over, load balancing, multiple locations, tons of up-to-the-minute backups, walls, weapons, Chuck Norris himself, etc.

Now, if you want to fantasize about them 13 root servers going down at the same time, well, there are still hundreds if not thousands of DNS servers with nearly identical information, a lot of which are available to everyone looking to use them (some good examples are Google or OpenDNS). So even if all 13 root servers and their backups and mirrors and Chuck Norris were all destroyed forever, it would simply lead ISPs, web hosting companies, data centers and Network Admins to change their DNS preferences to any of these left over server, some of which would quickly become (whether officially or unofficially) the new root DNS servers.

As to bringing down the whole internet, well, I think as long as there is a man standing with the will, knowledge and resources to perpetuate it, it will never happen.

Author

Commented:
Thanks - However Im asking if the USA "intentionally" wanted the internet down. - THe Government directed the DNS to be brought down. - Could it do this via DNS pull down? - thanks again. - Could  other Countries overcome this?
Commented:
Well they are not all in the U.S. nor are they all controlled by the U.S. and in reality these 13 "servers" are enormous clusters with mirrors around the world. As long as one of these hundreds of pieces remains up, everything works the same as if they were all up. Here's a map of the most important few hundred pieces that would need to be brought down:

http://blog.icann.org/2007/11/there-are-not-13-root-servers/

But the remainder of my first answer remains true:

Now, if you want to fantasize about them 13 root servers going down at the same time, well, there are still hundreds if not thousands of DNS servers with nearly identical information, a lot of which are available to everyone looking to use them (some good examples are Google or OpenDNS). So even if all 13 root servers and their backups and mirrors and Chuck Norris were all destroyed forever, it would simply lead ISPs, web hosting companies, data centers and Network Admins to change their DNS preferences to any of these left over server, some of which would quickly become (whether officially or unofficially) the new root DNS servers.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial