Microsoft shorten www.microsoft.com TTL in anticipation of MyDoom.B payload
2nd February, 2004
Essentially, Microsoft is accepting the significantly higher load on its name servers [outsourced to Akamai] as the premium of an insurance policy in the event that it wants to move www.microsoft.com very quickly.
In this regard Microsoft is being very circumspect towards the potential payload of MyDoom B virus, which anti-virus companies have tended to belittle. Of course, this may simply reflect the fact that Microsoft is directly at risk from the payload, while the anti-virus companies are merely informed bystanders, rather than Microsoft's view of the likely traffic levels being significantly different to the anti-virus companies' expectations.
Our expectation is that Microsoft will defend the payload from its own network, at least initially. If Microsoft does decide to deploy Akamai's http caching, this should not necessarily be read as an admission that its in-house infrastructure could not cope; it is more likely to be motivated by a public spirited desire to keep the traffic off the Internet's main arteries by absorbing the payload as close to the sources of the attacks as possible.
www.microsoft.com. 2993 IN CNAME www.microsoft.akadns.net. www.microsoft.akadns.net. 18 IN CNAME www2.microsoft.akadns.net. www2.microsoft.akadns.net. 300 IN A 207.46.134.221 www2.microsoft.akadns.net. 300 IN A 207.46.156.252 www2.microsoft.akadns.net. 300 IN A 207.46.250.252 www2.microsoft.akadns.net. 300 IN A 207.46.144.188 www2.microsoft.akadns.net. 300 IN A 207.46.134.157 www2.microsoft.akadns.net. 300 IN A 207.46.245.156 www2.microsoft.akadns.net. 300 IN A 207.46.245.92 www2.microsoft.akadns.net. 300 IN A 207.46.250.222 % date Mon Feb 2 20:56:09 GMT 2004