Using the local f.root-server.net will cut the domain name trace from around four microseconds to around one microsecond, making the tracing of attacks using false addresses much faster to track.