[dns-operations] [Dnssec-deployment] .uk validation failure

[Tony Finch]

On Mon, 13 Sep 2010, Sue True wrote:
>
> We have 9.7.0-P2 with DNSSEC validation enabled and several of our internal
> named died Saturday during the time  they had ZSK problem.

My 9.7.1p2 resolvers didn't die, and didn't log any deadlock warnings.
(Perhaps you should upgrade!) The MTAs using the resolvers had problems
with .uk addresses between about 16:00 and 22:00 and seemed to recover OK
after that. There were some lingering problems with cron jobs which did
DNS lookups until I flushed the cache. I don't have an explanation for the
difference in recovery times.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
HUMBER THAMES DOVER WIGHT PORTLAND: NORTH BACKING WEST OR NORTHWEST, 5 TO 7,
DECREASING 4 OR 5, OCCASIONALLY 6 LATER IN HUMBER AND THAMES. MODERATE OR
ROUGH. RAIN THEN FAIR. GOOD.