View All Alerts & Outages

Planned: PennNet: NN&N campus SafeDNS resolver replacement on May 31, 2022

 

On Tuesday, May 31, between 5:00 AM and 7:00 AM, ISC is planning to transition the campus SafeDNS resolver service to the new, SOLIDserver appliances. DNS resolver service on IPv4 will transition fully during this window. The transition of DNS resolver service on IPv6 will begin during this window, and conclude on Thursday, June 2, between 5:00 AM and 7:00 AM.

This change will only affect the security-enhanced DNS resolver service that uses response policy zones (RPZs). The standard resolver service ("RDNS") was migrated in late-March and continues to perform well.

Due to the high-availability benefits of Penn's anycast implementation, we expect no user-visible disruption, and no action is required on the part of IT Service Providers and their users to take advantage of the new DNS resolver nodes.

For reference, the DNS server addresses that will be transitioning are:

Primary: 128.91.18.2 2607:f470:1001:1001::2
Secondary:  128.91.49.2  2607:f470:1002:1002::2

ISC recommends these DNS servers for any host that runs a web browser, including typical desktops, laptops, tablets, and smartphones. The IPv4 server addresses should be configured via DHCP when possible, and statically when necessary. The IPv6 server addresses should be configured via Router Advertisement options when possible, and statically when necessary. When configuring DNS servers statically, list them in the same order shown above to achieve the best performance

For more information about SafeDNS, please visit:

https://www.isc.upenn.edu/how-to/safedns