[dns-operations] Google Resolver Validation

Brett brettcarr at gmail.com
Wed Apr 1 15:17:34 UTC 2015


1  gw-vlan100 (213.248.204.1)  0.512 ms  0.320 ms  0.292 ms
 2  213.248.252.201 (213.248.252.201)  1.242 ms  1.036 ms  0.994 ms
 3  nomfwlp01-reth4-414 (213.248.252.35)  2.731 ms  2.662 ms  2.691 ms
 4  nomfwlp01-ge-0-0-2 (213.248.252.249)  3.559 ms  3.561 ms  3.524 ms
 5  dc2nombgprp01-pc2 (213.248.252.4)  16.188 ms  4.050 ms  3.798 ms
 6  195.66.236.125 (195.66.236.125)  918.570 ms  709.130 ms  656.792 ms
 7  216.239.47.177 (216.239.47.177)  5.653 ms
    216.239.47.179 (216.239.47.179)  5.364 ms
    216.239.47.175 (216.239.47.175)  5.085 ms
 8  72.14.237.41 (72.14.237.41)  5.498 ms
    72.14.239.43 (72.14.239.43)  5.829 ms
    216.239.47.45 (216.239.47.45)  5.689 ms
 9  google-public-dns-a.google.com (8.8.8.8)  5.296 ms  5.345 ms  5.439 ms

I just sent ten queries for:

dig @8.8.8.8 verisign.com a +dnssec

six of them came back with the AD bit set and four answered with no AD bit.

Brett





On 1 April 2015 at 16:13, Yunhong Gu <guu at google.com> wrote:

> Hi, Brett,
>
> Can you tell me which Google server responded your requests? (traceroute
> 8.8.8.8 should do).
>
> Yunhong
>
> On Wed, Apr 1, 2015 at 10:57 AM, Brett <brettcarr at gmail.com> wrote:
>
>> I am currently seeing a proportion (about 50%) of queries to 8.8.8.8 not
>> returning an AD bit.
>> Anybody else seeing the same?
>> Warren: do you have any ideas what is happening here (Is this a DNSSEC
>> April Fool?)
>>
>> oh and I do like todays com.google :)
>>
>> --
>> Brett
>>
>> _______________________________________________
>> dns-operations mailing list
>> dns-operations at lists.dns-oarc.net
>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>> dns-jobs
>> <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs>
>> mailing list
>> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>>
>
>


-- 
Brett
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150401/04ad8c6e/attachment.html>


More information about the dns-operations mailing list