Notifications for root zone KSK roll over

From July 2017, The Internet Corporation for Assigned Names and Numbers (ICANN) has started to roll, or change, cryptographic keys used in the Domain Name System Security Extensions (DNSSEC) protocol, commonly known as the Root Zone KSK.

We have confirmed that there is no impact not only on the DNS services which are providing on the ECL1.0 and ECL2.0, but also on the internal network traffic from temporal size increasing of the DNS query packet point of view.

We recommend to the customer who is operating DNS server on ECL1.0 and ECL2.0 virtual or bare metal server, should collect information and take countermeasures against it appropriately.

Reference Information: