Notifications for root zone KSK roll over

From July 2017, The Internet Corporation for Assigned Names and Numbers (ICANN) has started to roll, or change, cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK.

We have confirmed that there is no impact not only the DNS services which are providing on the ECL1.0 and ECL2.0, but also the internal network traffic from temporally size increasing of the DNS query packet point of view.

We recommend to the customer who is operating DNS server on ECL1.0 and ECL2.0 virtual or bare metal server, should collect information and take countermeasures against it appropriately.

Reference Information: