[dns-operations] Missing NSEC3 in DOE responses from the "a" and "c" nic.cl nameservers

Anand Buddhdev anandb at ripe.net
Thu Sep 21 19:31:54 UTC 2017


On 21/09/2017 20:28, Gonzalo Muñoz wrote:

Hi Gonzalo,

Did you switch from NSD to Knot DNS after this? I queried both a.nic.cl
and c.nic.cl for ch/txt/version.bind, and they claim they are running
Knot. However, I may just be hitting a nearby anycast instance running
on a different platform.

Regards,
Anand

> We're still investigating what caused these issues, but the bogus
> responses were coming from our NSD instances. They started replying
> correctly after restarting the NSD process. Thank you for the heads up.
> 
> Best regards,
> 
> Gonzalo Muñoz
> DNS Administration
> NIC Chile



More information about the dns-operations mailing list