Hello,<br><br><br>Indeed, I precisely found discrepancies together with their first level redirector (SOA <a href="http://l.google.com" target="_blank">l.google.com</a>) some weeks ago. <br>
<br>dig @<a href="http://ns1.google.com/" target="_blank">ns1.google.com</a> SOA <a href="http://l.google.com/" target="_blank">l.google.com</a><br>
<br>vs<br><br>dig @<a href="http://ns1.google.com/" target="_blank">ns1.google.com</a> SOA <a href="http://xmpp-server.l.google.com/" target="_blank">xmpp-server.l.google.com</a>.<br><br><br>I also happens for RR not found and non-terminal names like the following:<br>
dig @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a> A _xmpp-server._<a href="http://tcp.google.com" target="_blank">tcp.google.com</a><br>dig @<a href="http://ns1.google.com/" target="_blank">ns1.google.com</a> A _<a href="http://tcp.google.com/" target="_blank">tcp.google.com</a><br>
<br><br>So is perhaps some kind of internal caching issue?<br><br><br>
Regards,<br>Carlos<br><br><br><br><div class="gmail_quote">On 13 February 2012 14:33, Stephane Bortzmeyer <span dir="ltr"><<a href="mailto:bortzmeyer@nic.fr" target="_blank">bortzmeyer@nic.fr</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
David Gavarret discovered a strange thing on Google's name<br>
servers. The serial number in the SOA record is not the same when<br>
queried directly than when returned with a NXDOMAIN.<br>
<br>
% dig @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a> SOA <a href="http://google.fr" target="_blank">google.fr</a><br>
<br>
; <<>> DiG 9.7.3 <<>> @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a> SOA <a href="http://google.fr" target="_blank">google.fr</a><br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59682<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;<a href="http://google.fr" target="_blank">google.fr</a>. IN SOA<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 86400 IN SOA <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>. <a href="http://dns-admin.google.com" target="_blank">dns-admin.google.com</a>. <a href="tel:2012010600" value="+12012010600" target="_blank">2012010600</a> 21600 3600 1209600 300<br>
<br>
;; AUTHORITY SECTION:<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 345600 IN NS <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>.<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 345600 IN NS <a href="http://ns4.google.com" target="_blank">ns4.google.com</a>.<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 345600 IN NS <a href="http://ns3.google.com" target="_blank">ns3.google.com</a>.<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 345600 IN NS <a href="http://ns2.google.com" target="_blank">ns2.google.com</a>.<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://ns1.google.com" target="_blank">ns1.google.com</a>. 345600 IN A <a href="tel:216.239.32.10" value="+12162393210" target="_blank">216.239.32.10</a><br>
<a href="http://ns4.google.com" target="_blank">ns4.google.com</a>. 345600 IN A <a href="tel:216.239.38.10" value="+12162393810" target="_blank">216.239.38.10</a><br>
<a href="http://ns3.google.com" target="_blank">ns3.google.com</a>. 345600 IN A <a href="tel:216.239.36.10" value="+12162393610" target="_blank">216.239.36.10</a><br>
<a href="http://ns2.google.com" target="_blank">ns2.google.com</a>. 345600 IN A <a href="tel:216.239.34.10" value="+12162393410" target="_blank">216.239.34.10</a><br>
<br>
;; Query time: 51 msec<br>
;; SERVER: <a href="tel:216.239.32.10%2353" value="+12162393210" target="_blank">216.239.32.10#53</a><a href="tel:%28216.239.32.10" value="+12162393210" target="_blank">(216.239.32.10</a>)<br>
;; WHEN: Thu Feb 9 21:25:01 2012<br>
;; MSG SIZE rcvd: 219<br>
<br>
<br>
% dig @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a> SOA <a href="http://doesnotexistatall.google.fr" target="_blank">doesnotexistatall.google.fr</a><br>
<br>
; <<>> DiG 9.7.3 <<>> @<a href="http://ns1.google.com" target="_blank">ns1.google.com</a> SOA <a href="http://doesnotexistatall.google.fr" target="_blank">doesnotexistatall.google.fr</a><br>
; (1 server found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21855<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;<a href="http://doesnotexistatall.google.fr" target="_blank">doesnotexistatall.google.fr</a>. IN SOA<br>
<br>
;; AUTHORITY SECTION:<br>
<a href="http://google.fr" target="_blank">google.fr</a>. 60 IN SOA <a href="http://ns1.google.com" target="_blank">ns1.google.com</a>. <a href="http://dns-admin.google.com" target="_blank">dns-admin.google.com</a>. 1476465 21600 3600 1209600 300<br>
<br>
;; Query time: 48 msec<br>
;; SERVER: <a href="tel:216.239.32.10%2353" value="+12162393210" target="_blank">216.239.32.10#53</a><a href="tel:%28216.239.32.10" value="+12162393210" target="_blank">(216.239.32.10</a>)<br>
;; WHEN: Thu Feb 9 21:25:53 2012<br>
;; MSG SIZE rcvd: 105<br>
<br>
As a result, some tools which allow to monitor the rejuvenation of<br>
zones fail. For instance, check <a href="http://google.fr" target="_blank">google.fr</a> on<br>
<<a href="http://www.migrationdns.com/?ndd=google.fr" target="_blank">http://www.migrationdns.com/?ndd=google.fr</a>>, the numbers are<br>
different (depending whether the resolver started with a non existing<br>
name or not).<br>
<br>
<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations%0Adns-jobs" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br>
dns-jobs</a> mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a><br>
</blockquote></div><br>