<div><div><div dir="auto">Thanks Bert and Constantinople,</div><div dir="auto"><br></div><div dir="auto">Waking up to this :( . I will get people checking internally.</div><div dir="auto">So this is only affecting v4 right? Do you have specific ISP ASN ? This could help. Any traceroute may help too if you can provide any.</div></div></div><div dir="auto">Tks</div><div dir="auto">Manu</div><div><div><br><div class="gmail_quote"><div>On Thu, Oct 19, 2017 at 7:23 AM Costantino Andrea (Con) <<a href="mailto:andrea.costantino@h3g.it" target="_blank">andrea.costantino@h3g.it</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">South Europe (Italy) seems to work from ISP1, while ISP2 does not:<br>
<br>
(ISP1)<br>
[root@moni ~]# dig -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1<br>
<br>
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4 <<>> -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47281<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;<a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a>. IN A<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a>. 60 IN A 31.13.86.36<br>
<br>
;; AUTHORITY SECTION:<br>
<a href="http://c10r.facebook.com" rel="noreferrer" target="_blank">c10r.facebook.com</a>. 3600 IN NS <a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a>.<br>
<a href="http://c10r.facebook.com" rel="noreferrer" target="_blank">c10r.facebook.com</a>. 3600 IN NS <a href="http://b.ns.c10r.facebook.com" rel="noreferrer" target="_blank">b.ns.c10r.facebook.com</a>.<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a>. 3600 IN AAAA 2a03:2880:fffe:b:face:b00c:0:99<br>
<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a>. 3600 IN A 69.171.239.11<br>
<a href="http://b.ns.c10r.facebook.com" rel="noreferrer" target="_blank">b.ns.c10r.facebook.com</a>. 3600 IN AAAA 2a03:2880:ffff:b:face:b00c:0:99<br>
<a href="http://b.ns.c10r.facebook.com" rel="noreferrer" target="_blank">b.ns.c10r.facebook.com</a>. 3600 IN A 69.171.255.11<br>
<br>
;; Query time: 43 msec<br>
;; SERVER: 69.171.239.11#53(69.171.239.11)<br>
;; WHEN: Thu Oct 19 16:13:29 2017<br>
;; MSG SIZE rcvd: 184<br>
<br>
(ISP2)<br>
[root@moni2 ~]# dig -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1<br>
<br>
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4 <<>> -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1<br>
;; global options: +cmd<br>
;; connection timed out; no servers could be reached<br>
<br>
<br>
-----Messaggio originale-----<br>
Da: dns-operations [mailto:<a href="mailto:dns-operations-bounces@dns-oarc.net" target="_blank">dns-operations-bounces@dns-oarc.net</a>] Per conto di bert hubert<br>
Inviato: giovedì 19 ottobre 2017 15:42<br>
A: <a href="mailto:dns-operations@dns-oarc.net" target="_blank">dns-operations@dns-oarc.net</a><br>
Oggetto: [dns-operations] Facebook DNS down in Europe?<br>
<br>
Hi,<br>
<br>
Is anyone from Facebook here? We have huge issues resolving Facebook domains from some of our customers in The Netherlands and Belgium.<br>
<br>
>From our own networks we note that some Facebook servers are indeed dropping queries over IPv4:<br>
<br>
$ dig -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1<br>
<br>
; <<>> DiG 9.10.3-P4-Ubuntu <<>> -4 <a href="http://star-mini.c10r.facebook.com" rel="noreferrer" target="_blank">star-mini.c10r.facebook.com</a> @<a href="http://a.ns.c10r.facebook.com" rel="noreferrer" target="_blank">a.ns.c10r.facebook.com</a> +tries=1 ;; global options: +cmd ;; connection timed out; no servers could be reached<br>
<br>
We are tempted to deploy workarounds to serve old data.<br>
<br>
<a href="http://downdetector.com/status/facebook/map/" rel="noreferrer" target="_blank">http://downdetector.com/status/facebook/map/</a> actually has a pretty map describing the problem right now.<br>
<br>
If anyone from Facebook wants us to try things, please let us know.<br>
<br>
Bert<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
dns-operations mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
<br>
________________________________<br>
<br>
CONFIDENTIAL: This E-mail and any attachment are confidential and may contain reserved information. If you are not one of the named recipients, please notify the sender immediately. Moreover, you should not disclose the contents to any other person, or should the information contained be used for any purpose or stored or copied in any form.<br>
<br>
_______________________________________________<br>
dns-operations mailing list<br>
<a href="mailto:dns-operations@lists.dns-oarc.net" target="_blank">dns-operations@lists.dns-oarc.net</a><br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
dns-operations mailing list<br>
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br>
</blockquote></div></div></div>