₦airaland Forum

I do not see them making any impact,

The 13 root servers uses anycast addresses to hundred of physical DNS servers, DDoS works by rapidly opening a lot of TCP sessions or half open TCP sessions on a physical server that, the server is overruled and not able to process legitimate incoming TCP sessions, it is basically a law of numbers, Sophisticated firewalls are programmed to rapidly close half open TCP sessions to mitigate DDoS attacks.

So if a single root server is tied to multiple back-end physical servers, their DDoS traffic will be routed to one of the back end servers, they will be lucky if they are able to take down one root server, and they make any impact, you must take out majority of the root servers,

Also note that, PC does not send traffic to the root server all the time, you PC have a cache of DNS entries it uses to fetch web pages, that is the first point of contact, most of the sites you go to have already been cached in your PC, so even if all the 13 root servers goes down you will not be affected, If you PC does not have that domain, most likely you are visiting the domain for the first time or had not visited it for a long time, your PC will contact your ISP or Company's DNS server, if other people using that ISP or in your company have visited that website, the DNS will have a cache of it and your traffic will not be sent to the root servers, Also Most ISPs to speed up internet speed install cache engines that caches DNS to IP mappings in their networks, so if your DNS server does not have a cache entry for that domain, the ISP or companies cache engine might have it, alot of ISPs also have a mirror image of the root server.

Taking down even one root server is more difficult than taking down a mutlihomed facebook website,

Conclusion? They might be able to take down one or two root servers, the effect would be the same as taking out one Boko's fighters, it does nothing to the BH mayhem in 9ja.