<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span id="docs-internal-guid-939c14be-7fff-d1f0-7a9d-af37cf979b25" class=""><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">Dear colleagues,</span></div><br class=""><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">Recently, the RPKI team has upgraded the RRDP setup to use two CDNs in an active-passive state. This switch is done automatically and on a fixed schedule. On Thursday, the 24th of March, we switched the CDN over to our second provider for the first time. After the switch, they noticed a peak in DNS requests compared to their regular traffic, triggering query limits that they had not encountered before, causing DNS requests to fail.</span></div><br class=""><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">They have now solved the issue by improving the underlying performance limitations in their DNS-based traffic steering implementation and adding more DNS servers. They have also optimised their setup to speed up the query response time.</span></div><br class=""><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">After multiple rounds of tests, including the provider’s synthetic and real-world tests using Atlas and NLNog-ring, we felt sure that the provider had resolved the issue. This morning at 9 AM UTC, we switched the active CDN for <a href="http://rrdp.ripe.net" class="">rrdp.ripe.net</a> again, with engineers on both sides collectively monitoring the systems. The switch went smoothly.</span></div><br class=""><div style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;" class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">We will switch between the CDN providers regularly, with a fallback option available for operational needs and when we notice issues.</span></div><div class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class=""><br class=""></span></div><div class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">Regards,</span></div><div class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class=""><br class=""></span></div><div class=""><span style="font-size: 11pt; font-family: Arial; font-variant-ligatures: normal; font-variant-east-asian: normal; font-variant-position: normal; vertical-align: baseline; white-space: pre-wrap;" class="">Stella</span></div></span><div><br class=""><blockquote type="cite" class=""><div class="">On 24 Mar 2022, at 18:31, Lukas Tribus <<a href="mailto:lukas@ltri.eu" class="">lukas@ltri.eu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello Stella,<br class=""><br class=""><br class="">On Thu, 24 Mar 2022 at 10:39, Stella Vouteva <<a href="mailto:svouteva@ripe.net" class="">svouteva@ripe.net</a>> wrote:<br class=""><blockquote type="cite" class="">it appears that there were issues in resolving the CDN host<br class=""></blockquote><br class="">Could you elaborate?<br class=""><br class=""><br class="">Lukas<br class=""></div></div></blockquote></div><br class=""></body></html>