- NZNOG - lists.nznog.org

Spoofer Report for NZNOG for Aug 2026
by CAIDA Spoofer Project 08 Sep '26

08 Sep '26

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2026: none inferred Source Address Validation issues inferred during Aug 2026: ASN Name First-Spoofed Last-Spoofed 133878 UNICOM1 2026-08-26 2026-08-26 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 02 Sep '26

02 Sep '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/9x32mx45cqq7 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 12 Aug '26

12 Aug '26

Hi all, InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be: https://status.internetnz.nz/incidents/snb0q788nr26 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 2

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 28 Jul '26

28 Jul '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/jr1n74552pzn For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Help us identify community-driven sessions for the day after OARC 47
by Felipe Barbosa 20 Jul '26

20 Jul '26

FYI, on behalf of the DNS-OARC team: DNS-OARC and OARC, Inc. are planning to offer a full day of community-driven sessions on Wednesday, 11 November, immediately following the main OARC 47 workshop. We'd like to hear from the broader DNS and Internet operations community. What topics or activities would you like to see happen, and what could be realistically organized—or that you would be interested in helping organize? Recent workshop feedback included interest in tutorials and short training sessions, working group and interest group side meetings, BOFs, hackathons, tool demos, and operator round-tables. To make this useful, we need more than topic suggestions: we are especially looking for people who are willing to host a session, help organize one, or point us toward someone who has already expressed interest in leading a specific project, topic, or discussion. This additional day will not require a separate registration fee for OARC 47 attendees. We have conference rooms available from 08:00–17:00 on the 11 November. Each room can accommodate up to 15 participants and includes basic boardroom AV. The day is currently planned around the following schedule: * 08:30–10:00 session block * 10:00–10:30 morning coffee break * 10:30–12:00 session block * 12:00–13:00 lunch * 13:00–14:30 session block * 14:30–15:00 afternoon coffee break * 15:00–16:30 session block Sessions may use one or more blocks depending on the format, organizer availability, and room scheduling. Possible formats include: * hands-on tutorials * OARC tools training or demos * software demos * BOFs * hackathons * focused working group or interest group meetings (for instance standards or BCP discussions) * operator round-tables * “help me brainstorm this problem” sessions If you are willing to host something, help organize something, or connect us with someone who may be a good lead for a specific session, please complete the following form by [DATE]: 24 August 2026 23:59 UTC. > Form Link <[ https://zfrmz.com/arOnEOkvgGa9UoqvwOGn](https://zfrmz.com/arOnEOkvgGa9Uoqvw…> The form also includes a small section for attendee interest, but our immediate priority is identifying sessions with a potential host, organizer, or named point of contact. NOTE: Submitting a proposal does not guarantee a confirmed room or time slot. OARC staff will review responses and follow up to confirm session details, timing, room fit, and any support needed. We hope this additional day can create space for practical work, smaller-group discussions, and hands-on knowledge sharing that can be difficult to fit into the regular workshop agenda. Best, DNS-OARC -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

Fwd: OARC 47 Call for Contributions
by Felipe Barbosa 25 Jun '26

25 Jun '26

FYI, on behalf of Cathy Almond/OARC -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580 ---------- Forwarded message --------- The OARC 47 Call for Contributions is open! This workshop will be a hybrid event. Date - 09-10 November 2026 Location - Vancouver, British Columbia Times - approximately 10:00-17:00 PDT (Local time PDT is UTC -7) * note that British Columbia has opted to remain on PDT all year round Deadline for Submissions - 2026-08-24 23:59 UTC https://indico.dns-oarc.net/event/58/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. You can also contact us directly at submissions(a)dns-oarc.net if you would like to ask about the suitability of a potential presentation submission topic. The OARC 47 Call for Contributions is open! If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. Operations & Deployment - Configuration management, deployment processes, and interoperability expeiences. - Tools, tips, and making effective use of DNS software features. 2. Performance, Resilience & Scaling - Provisioning, load-balancing, and planning for resilience. - DNS performance management, efficiency improvements, and metrics. - Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. Security, Privacy & Policy - DoS attacks, DNS abuse, DNSSEC signing and validation. - Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. - Relevant global and regional policies, legislation, and compliance. 4. Research & Innovation - Data-driven testing, measurement, and analysis. - New protocols, protocol extensions, and next-generation namespace management. 5. Lessons & Learnings - Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc47 Cathy Almond, for the DNS-OARC Programme Committee

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 17 Jun '26

17 Jun '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/jmk548059pwv For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Spoofer Report for NZNOG for May 2026
by CAIDA Spoofer Project 08 Jun '26

08 Jun '26

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2026: none inferred Source Address Validation issues inferred during May 2026: ASN Name First-Spoofed Last-Spoofed 45177 DEVOLI 2025-08-23 2026-05-21 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 05 May '26

05 May '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/2f6mf7q6nh1w For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 11 Mar '26

11 Mar '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/k9w616p9fjlf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1