%% You should probably cite rfc8806 instead of this I-D. @techreport{ietf-dnsop-7706bis-05, number = {draft-ietf-dnsop-7706bis-05}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-dnsop-7706bis/05/}, author = {Warren "Ace" Kumari and Paul E. Hoffman}, title = {{Running a Root Server Local to a Resolver}}, pagetotal = 13, year = 2019, month = aug, day = 26, abstract = {Some DNS recursive resolvers have longer-than-desired round-trip times to the closest DNS root server such as during a network attack. Some DNS recursive resolver operators want to prevent snooping by third parties of requests sent to DNS root servers. Such resolvers can greatly decrease the round-trip time and prevent observation of requests by serving a copy of the full root zone on the same server, such as on a loopback address or in the resolver software. This document shows how to start and maintain such a copy of the root zone that does not cause problems for other users of the DNS, at the cost of adding some operational fragility for the operator. {[} This document is being collaborated on in Github at: https://github.com/wkumari/draft-kh-dnsop-7706bis. The most recent version of the document, open issues, and so on should all be available there. The authors gratefully accept pull requests. {]}}, }