mcr.microsoft.com / trafficmanager.net again

Florian Lohoff f at zz.de
Thu Sep 25 08:02:52 UTC 2025


Hola,

On Wed, Sep 24, 2025 at 12:29:28PM +0200, Ondřej Surý wrote:
>I would argue that you didn’t “fix” it. The people that need to fix it sit at Microsoft.
>
>A single domain name that requires 100+ outgoing queries is not only broken, but also nasty to the whole DNS ecosystem. It shoves the complexity and costs to anyone running a recursive resolver.

After looking for more issues concerning microsoft.com i found tons of 
sporadic fails 

I like this one the most:

;; ANSWER SECTION:
api-apac.flightproxy.teams.microsoft.com. 75624	IN CNAME flightproxy-apac-teams.trafficmanager.net.
flightproxy-apac-teams.trafficmanager.net. 20 IN CNAME ep-jpwe-05-prod-aks.flightproxy.teams.microsoft.com.
ep-jpwe-05-prod-aks.flightproxy.teams.microsoft.com. 3937 IN CNAME epx.jpwe-05.ic3-calling-enterpriseproxy.japanwest-prod.cosmic.office.net.
epx.jpwe-05.ic3-calling-enterpriseproxy.japanwest-prod.cosmic.office.net. 10 IN	CNAME cosmic-japanwest-ns-233000c96988.trafficmanager.net.
cosmic-japanwest-ns-233000c96988.trafficmanager.net. 10	IN CNAME epx-enterpriseproxy-1.d03-011.ic3-calling-enterpriseproxy.01-japanwest-prod.cosmic.office.net.
epx-enterpriseproxy-1.d03-011.ic3-calling-enterpriseproxy.01-japanwest-prod.cosmic.office.net. 10 IN A 52.123.170.156

root at svrh1netsup01p:~# grep microsoft named | wc -l
181144
root at svrh1netsup01p:~# grep microsoft named | grep SERVFAIL | wc -l
1414

0.7% SERVFAIL for anything in Microsoft

Guess that would have been fixed if the AD business would be in those domains. Its
just customer experience being affected ;)

Flo
-- 
Florian Lohoff                                                     f at zz.de
  Any sufficiently advanced technology is indistinguishable from magic.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20250925/b7646163/attachment.sig>


More information about the dns-operations mailing list