[AusNOG] AU DNS - Something happening?

[Andrew Radke]

Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven’t dug as to why but disabling it until sorted.
Regards,

Andrew Radke

Open Spaces Internet Pty Ltd
Ph: 0412 798 593 <tel:0412798593>
Web: osi.com.au <https://osi.com.au/>

> On 18 Sep 2023, at 10:26 am, Luke Thompson <luke.t at tncrew.com.au> wrote:
> 
> Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears.
> 
> On 18/9/2023 10:23 am, Ted Cooper wrote:
>> The DNS signatures just expired. Everything just went boom.
>> 
>> RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past.
>> 
>> https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/
>> 
>> 
>> On 18/9/23 10:20, Luke Thompson wrote:
>>> We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS.
>>> 
>>> Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down".
>>> 
>>> 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate.
>>> 
>>> Cheers,
>>> Luke
>>> 
>>> _______________________________________________
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
>>> https://lists.ausnog.net/mailman/listinfo/ausnog
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> https://lists.ausnog.net/mailman/listinfo/ausnog
>> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> https://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ausnog.net/pipermail/ausnog/attachments/20230918/5a43f55d/attachment.htm>