[dns-operations] DNS issues with .MIL

[Jim Popovitch]

On Sun, Jun 7, 2015 at 4:35 PM, Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
> On Sun, Jun 07, 2015 at 03:33:09PM -0400,
>  Jim Popovitch <jimpop at gmail.com> wrote
>  a message of 15 lines which said:
>
>> Is anyone else seeing DNS issues .MIL today?  Specifically with
>> stratcom.mil?
>
> Yes, stratcom.mil has DNS resolution problems. Testing with RIPE Atlas
> probes, I can see that 30 % of the probes cannot get www.stratcom.mil
> (I can resolve it from work but not for home, for instance). The
> percentage is the same in Europe and North America.
>
> The zone has only two name servers, with suspiciously close IP
> addresses. How many times will we have to repeat that two name servers
> in the same rack are not good practice?
>
> Since the BGP route for 143.250.0.0/16 is well announced and seems
> present everywhere, I assume they have a problem on their side.
>
> .mil has less issues. From some places, two of the name servers
> timeout:
>
> % check-soa -i mil
> CON1.NIPR.mil.
>         199.252.157.234: ERROR: Timeout
> CON2.NIPR.mil.
>         199.252.162.234: OK: 2015060504 (171 ms)
> EUR1.NIPR.mil.
>         199.252.154.234: OK: 2015060504 (170 ms)
> EUR2.NIPR.mil.
>         199.252.143.234: OK: 2015060504 (170 ms)
> PAC1.NIPR.mil.
>         199.252.180.234: ERROR: Timeout
> PAC2.NIPR.mil.
>         199.252.155.234: OK: 2015060504 (170 ms)


Very interesting data Stephane, thank you.

-Jim P.