For some time now, SecSpider has been tracking many more stats about zones than the zone drill-down pages show. In particular, we
have been tracking the "availability" of each zone for quite some time. We define availability as a metric that summarizes if
there are any PMTU problems getting DNSKEYs from a zone from any of our pollers. In our recent
IMC paper we formally measured this across all of our
observed production zones, and found that roughly 20% of the observed production zones suffer some degree of availability problems.
This basically means that in some cases, some resolvers simply cannot get the DNSKEY RRsets for a zone!
Now, we list the availability and stale RRset counts for each zone on their zone drill-down page. This means that
zone administrators can now check if their DNSKEY RRsets are exacerbating any PMTU problems.
Please give us any feedback that you have!