[dns-operations] Fun with DNAME and DNSSEC

[Casey Deccio]

On Wed, Jan 29, 2014 at 10:15 AM, Tony Finch <dot at dotat.at> wrote:

> Well, mostly. It's complaining about being unable to get the
> in-addr.arpa.cam.ac.uk DNSKEY RRset from 129.169.8.8, which I thought my
> colleagues fixed yesterday - it works when I try the query from a couple
> of off-campus locations.
>
>
The analysis link I posted was a snapshot from hours ago.  The newest
DNSViz analysis doesn't show any issues, and I confirmed that from command
line.

This is ns.ripe.net which appears to be load-balancing across multiple
> name server implementations, on IPv4 and IPv6 - that is, the difference
> you saw was due to the load balancing not the different IP version. I can
> see three distinct behaviours when I repeat the following queries:
>
>
I wondered if that might be the case, but I hadn't "dug" in as far as you
did :)

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20140129/47b53900/attachment.html>