[dns-operations] DNS issues with .MIL

[Stephane Bortzmeyer]

On Sun, Jun 07, 2015 at 03:33:09PM -0400,
 Jim Popovitch <jimpop at gmail.com> wrote 
 a message of 15 lines which said:

> Is anyone else seeing DNS issues .MIL today?  Specifically with
> stratcom.mil?

Yes, stratcom.mil has DNS resolution problems. Testing with RIPE Atlas
probes, I can see that 30 % of the probes cannot get www.stratcom.mil
(I can resolve it from work but not for home, for instance). The
percentage is the same in Europe and North America.

The zone has only two name servers, with suspiciously close IP
addresses. How many times will we have to repeat that two name servers
in the same rack are not good practice?

Since the BGP route for 143.250.0.0/16 is well announced and seems
present everywhere, I assume they have a problem on their side.

.mil has less issues. From some places, two of the name servers
timeout:

% check-soa -i mil
CON1.NIPR.mil.
	199.252.157.234: ERROR: Timeout
CON2.NIPR.mil.
	199.252.162.234: OK: 2015060504 (171 ms)
EUR1.NIPR.mil.
	199.252.154.234: OK: 2015060504 (170 ms)
EUR2.NIPR.mil.
	199.252.143.234: OK: 2015060504 (170 ms)
PAC1.NIPR.mil.
	199.252.180.234: ERROR: Timeout
PAC2.NIPR.mil.
	199.252.155.234: OK: 2015060504 (170 ms)