After DNS problem, Chinese root server is shut down

The server is thought to have extended Chinese filtering technology to Chile and the US

By Robert McMillan, IDG News Service |  Networking Add a new comment

A China-based root DNS server associated with networking problems in Chile and the U.S. has been disconnected from the Internet.

The action by the server's operator, Netnod, appears to have resolved a problem that was causing some Internet sites to be inadvertently censored by a system set up in the People's Republic of China.

On Wednesday, operators at NIC Chile noticed that several ISPs (Internet service providers) were providing faulty DNS information, apparently derived from China. China uses the DNS system to enforce Internet censorship on its so-called Great Firewall of China, and the ISPs were using this incorrect DNS information.

That meant that users of the network trying to visit Facebook, Twitter and YouTube were directed to Chinese computers instead.

In Chile, ISPs VTR, Telmex and several others -- all of them customers of upstream provider Global Crossing -- were affected, NIC Chile said in a statement on Friday. The problem, first publicly reported on Wednesday, appears to have persisted for a few days before it was made public, the statement says.

A NIC Chile server in California was also hit with the problem, NIC Chile said. While it's not clear how this server was getting the bad DNS information, it came via either Network Solutions or Equinix, according to NIC Chile.

Network Solutions wasn't to blame as it does not offer backbone provider services to NIC Chile, said Rick Wilhelm, the company's vice president of engineering. Equinix and Global Crossing could not immediately be reached for comment.

Netnod, which maintains a copy of its root DNS server in China, has now "withdrawn route announcements" made by the server, according to company CEO Kurt Lindqvist. This effectively disconnects the server from the Internet. In an e-mail interview, Lindqvist said he could not recall when his company took this action.

Netnod insists that its server did not contain the bad data that redirected Internet traffic, and security experts agree, saying that its data was probably being altered by the Chinese government somewhere on China's network, in order to enforce the country's Great Firewall.

2 comments

    Anonymous 1 year ago
    Netnod insists that its server did not contain the bad data that redirected Internet traffic, and security experts agree, saying that its data was probably being altered by the Chinese government somewhere on China's network, in order to enforce the country's Great Firewall.Wait, what? Root servers aren't supposed to recurse. So why would this root server be in any way delivering data that it did not "contain" itself, and that had had any kind of opportunity to "be altered" in transit of some sort?And what does it mean to talk about a DNS server that announces BGP routes?I'd like to see a full explanation of this using correct technical terminology, instead of these vague simplified-for-journalists-and-joe-public hand-waving explanations.
    Anonymous 1 year ago in reply to Anonymous
    Wait, what? Root servers aren't supposed to recurse. So why would this root server be in any way delivering data that it did not "contain" itself, and that had had any kind of opportunity to "be altered" in transit of some sort?If the server is in China, it's subject to the IP-based blocking used by the GFC. If you query a blacklisted hostname, the GFC will alter the response such that you don't get the original site.And what does it mean to talk about a DNS server that announces BGP routes?The root servers use anycast. Anycast places instances of the same service at network-topologically-different locations in the service area, each instance announces a route to the established IP address of that service, then normal routing kicks in to get you to the nearest instance. You disable an anycast instance by withdrawing the route to it.

      Add a comment

      Post a comment using one of these accounts
      Or join now
      At least 6 characters

      Note: Comment will appear soon after you have activated your account.
      Obscene/spam comments will be removed and accounts suspended.
      The information you submit is subject to our Privacy Policy and Terms of Service.

      ITworld LIVE

      NetworkingWhite Papers & Webcasts

      White Paper

      The Journey to the Private Cloud

      Both business and IT need the agility enabled by the private cloud. Now you can apply technologies and processes pioneered by public cloud services to your own data center.

      Webcast On Demand

      Navigating the Public Cloud

      InfoWorld contributing editor and consultant David Linthicum offers expert advice about choosing services to outsource to the public cloud providers, cloud data security and identity, integrating public cloud services, and how to avoid provider lock-in.

      Sponsor: Intel

      Webcast On Demand

      Achieving Business Value with Network and Application Visibility

      In this white paper, IDC analyzes the ROI that customers can expect from Riverbed Cascade, based on interviews with Cascade customers. Additionally, IDC lays out the business case for proactively managing network and application performance. Get the visibility you need to achieve your IT objectives. Download this whitepaper today.

      Sponsor: Riverbed

      White Paper

      Network Monitoring and Troubleshooting for Dummies

      The Network Monitoring and Troubleshooting for Dummies Book introduces you to common network performance management (NPM) issues and give you a new way of looking at solving them. This perspective allows you to see your network from your users' point of view, namely, the services and applications they use and their experience with them.

      White Paper

      Achieving Business Value with Network and Application Visibility

      In this white paper, IDC analyzes the ROI that customers can expect from Riverbed Cascade, based on interviews with Cascade customers. Additionally, IDC lays out the business case for proactively managing network and application performance. Get the visibility you need to achieve your IT objectives. Download this whitepaper today.

      See more White Papers | Webcasts

      Ask a question

      Ask a Question