[dns-operations] Google Resolver Validation
Brett
brettcarr at gmail.com
Wed Apr 1 15:17:34 UTC 2015
1 gw-vlan100 (213.248.204.1) 0.512 ms 0.320 ms 0.292 ms
2 213.248.252.201 (213.248.252.201) 1.242 ms 1.036 ms 0.994 ms
3 nomfwlp01-reth4-414 (213.248.252.35) 2.731 ms 2.662 ms 2.691 ms
4 nomfwlp01-ge-0-0-2 (213.248.252.249) 3.559 ms 3.561 ms 3.524 ms
5 dc2nombgprp01-pc2 (213.248.252.4) 16.188 ms 4.050 ms 3.798 ms
6 195.66.236.125 (195.66.236.125) 918.570 ms 709.130 ms 656.792 ms
7 216.239.47.177 (216.239.47.177) 5.653 ms
216.239.47.179 (216.239.47.179) 5.364 ms
216.239.47.175 (216.239.47.175) 5.085 ms
8 72.14.237.41 (72.14.237.41) 5.498 ms
72.14.239.43 (72.14.239.43) 5.829 ms
216.239.47.45 (216.239.47.45) 5.689 ms
9 google-public-dns-a.google.com (8.8.8.8) 5.296 ms 5.345 ms 5.439 ms
I just sent ten queries for:
dig @8.8.8.8 verisign.com a +dnssec
six of them came back with the AD bit set and four answered with no AD bit.
Brett
On 1 April 2015 at 16:13, Yunhong Gu <guu at google.com> wrote:
> Hi, Brett,
>
> Can you tell me which Google server responded your requests? (traceroute
> 8.8.8.8 should do).
>
> Yunhong
>
> On Wed, Apr 1, 2015 at 10:57 AM, Brett <brettcarr at gmail.com> wrote:
>
>> I am currently seeing a proportion (about 50%) of queries to 8.8.8.8 not
>> returning an AD bit.
>> Anybody else seeing the same?
>> Warren: do you have any ideas what is happening here (Is this a DNSSEC
>> April Fool?)
>>
>> oh and I do like todays com.google :)
>>
>> --
>> Brett
>>
>> _______________________________________________
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>> dns-jobs
>> <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs>
>> mailing list
>> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>>
>
>
--
Brett
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150401/04ad8c6e/attachment.html>
More information about the dns-operations
mailing list