[dns-operations] Google Resolver Validation

Brett brettcarr at gmail.com
Wed Apr 1 16:27:36 UTC 2015


Thanks for the update appreciate the rapid response.  The alarms in our
monitoring systems are now subsiding.

Brett
On Apr 1, 2015 5:01 PM, "Yunhong Gu" <guu at google.com> wrote:

> This should be fixed now. Sorry that this was not a April Fools day joke :)
>
> Yunhong
>
> On Wed, Apr 1, 2015 at 11:21 AM, Yunhong Gu <guu at google.com> wrote:
>
>> Thanks, I am investigating.
>>
>> On Wed, Apr 1, 2015 at 11:17 AM, Brett <brettcarr at gmail.com> wrote:
>>
>>> 1  gw-vlan100 (213.248.204.1)  0.512 ms  0.320 ms  0.292 ms
>>>  2  213.248.252.201 (213.248.252.201)  1.242 ms  1.036 ms  0.994 ms
>>>  3  nomfwlp01-reth4-414 (213.248.252.35)  2.731 ms  2.662 ms  2.691 ms
>>>  4  nomfwlp01-ge-0-0-2 (213.248.252.249)  3.559 ms  3.561 ms  3.524 ms
>>>  5  dc2nombgprp01-pc2 (213.248.252.4)  16.188 ms  4.050 ms  3.798 ms
>>>  6  195.66.236.125 (195.66.236.125)  918.570 ms  709.130 ms  656.792 ms
>>>  7  216.239.47.177 (216.239.47.177)  5.653 ms
>>>     216.239.47.179 (216.239.47.179)  5.364 ms
>>>     216.239.47.175 (216.239.47.175)  5.085 ms
>>>  8  72.14.237.41 (72.14.237.41)  5.498 ms
>>>     72.14.239.43 (72.14.239.43)  5.829 ms
>>>     216.239.47.45 (216.239.47.45)  5.689 ms
>>>  9  google-public-dns-a.google.com (8.8.8.8)  5.296 ms  5.345 ms  5.439
>>> ms
>>>
>>> I just sent ten queries for:
>>>
>>> dig @8.8.8.8 verisign.com a +dnssec
>>>
>>> six of them came back with the AD bit set and four answered with no AD
>>> bit.
>>>
>>> Brett
>>>
>>>
>>>
>>>
>>>
>>> On 1 April 2015 at 16:13, Yunhong Gu <guu at google.com> wrote:
>>>
>>>> Hi, Brett,
>>>>
>>>> Can you tell me which Google server responded your requests?
>>>> (traceroute 8.8.8.8 should do).
>>>>
>>>> Yunhong
>>>>
>>>> On Wed, Apr 1, 2015 at 10:57 AM, Brett <brettcarr at gmail.com> wrote:
>>>>
>>>>> I am currently seeing a proportion (about 50%) of queries to 8.8.8.8
>>>>> not returning an AD bit.
>>>>> Anybody else seeing the same?
>>>>> Warren: do you have any ideas what is happening here (Is this a DNSSEC
>>>>> April Fool?)
>>>>>
>>>>> oh and I do like todays com.google :)
>>>>>
>>>>> --
>>>>> Brett
>>>>>
>>>>> _______________________________________________
>>>>> dns-operations mailing list
>>>>> dns-operations at lists.dns-oarc.net
>>>>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>>>>> dns-jobs
>>>>> <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs>
>>>>> mailing list
>>>>> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> Brett
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150401/7bf9ce00/attachment.html>


More information about the dns-operations mailing list