Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On March 31st 2012, Anonymous plan to take down the 13 root DNS servers that power the Internet:

... and I don't want to even notice if it actually happens.

Assuming what they are trying to do is feasable:

  1. Are there any DNS servers that won't be affected that I can use?
  2. If not, is it possible to create a non-expiring cache of all DNS records on a local machine?
  3. If so, how would I go about doing this?

Of course, DNS changes wouldn't be reflected and TTL would have to be ignored; but that is better than all DNS lookups just timing out.

related question: How can I store DNS cache in case the DNS server goes down?

share|improve this question
I wonder how feasible just a DDoS actually is... – Shinrai Feb 15 '12 at 22:12
up vote 7 down vote accepted

Having a cache of all DNS records is not feasible. Setting up your own root server on the other hand is! ICANN provides the root zone file here:

So just set up your own root server, point your DNS servers to it and you should not notice anything.

share|improve this answer
What kind of impact would this have on my bind9 installation? – Captain Giraffe Feb 15 '12 at 23:35

For Windows there was a program called Treewalkdns that acted as a personal caching dns server. It seems to have dropped out of site but it's probably available somewhere on the web.

There is a Linux program called PDNSD that addresses your requirements:

share|improve this answer

I can only answer your second question, sorry. Here goes:

It is possible to create a non-expiring cache of DNS records on a local machine by editing the hosts file. For example, you could add:

# Google

To get the IP address to which a given domain name resolves, you could use ping or nslookup.

share|improve this answer

Rather than trying to set up your own root server, it'd probably be better to rely on Google's DNS servers for this:



It's likely that Google has a lot of DNS entries, and they definitely have enough processing power and bandwidth to have a very large DNS cache and survive constant polling from hundreds or thousands of users. My guess is that Google also isn't silly enough to let all their DNS entries expire if they can't contact the root servers.

You could also try connecting to OpenDNS. Maybe write the Google and OpenDNS IPs down somewhere anyway, so in case the root servers do indeed go down you have a few different options to try.

EDIT: Here is a more complete list of unofficial/alternate DNS root servers (on Wikipedia).

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .