For some time now, SecSpider has been tracking many more stats about zones than the zone drill-down pages show. In particular, we
have been tracking the "availability" of each zone for quite some time. We define availability as a metric that summarizes if
there are any PMTU problems getting DNSKEYs from a zone from any of our pollers. In our recent
IMC paper we formally measured this across all of our
observed production zones, and found that roughly 20% of the observed production zones suffer some degree of availability problems.
This basically means that in some cases, some resolvers simply cannot get the DNSKEY RRsets for a zone!
Now, we list the availability and stale RRset counts for each zone on their zone drill-down page. This means that
zone administrators can now check if their DNSKEY RRsets are exacerbating any PMTU problems.
Please give us any feedback that you have!
SecSpider the DNSSEC Monitoring Project
Check YOUR Zone's Status!
