Decreasing Access Time to Root Servers by Running One on Loopback

Document Type Replaced Internet-Draft (dnsop WG)
Authors Warren Kumari  , Paul Hoffman 
Last updated 2015-10-14 (latest revision 2014-11-26)
Replaced by RFC 7706
Stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Expired & archived
plain text pdf htmlized bibtex
Stream WG state Candidate for WG Adoption
Document shepherd No shepherd assigned
IESG IESG state Replaced by draft-ietf-dnsop-root-loopback
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


Some DNS recursive resolvers have longer-than-desired round trip times to the closest DNS root server. Such resolvers can greatly decrease the round trip time by running a copy of the full root zone on a loopback address (such as Typically, the vast majority of queries going to the root are for names that do not exist in the root zone, and the negative answers are cached for a much shorter period of time. This document shows how to start and maintain such a copy of the root zone in a manner that is secure for the operator of the recursive resolver and does not pose a threat to other users of the DNS.


Warren Kumari (
Paul Hoffman (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)