Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Scheduled Pinned Locked Moved Uncategorized
infosecdnssecdnsgermany
39 Posts 18 Posters 80 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • rysiek@mstdn.socialR rysiek@mstdn.social

    Looks like DE ccTLD is unresolvable due to DNSSEC issue:
    https://dnsviz.net/d/nic.de/dnssec/

    😬

    #InfoSec #DNSSEC #DNS #Germany

    stekopf@mstdn.socialS This user is from outside of this forum
    stekopf@mstdn.socialS This user is from outside of this forum
    stekopf@mstdn.social
    wrote last edited by
    #21

    @rysiek

    From a users perspective some .de domains are not available on one connection but on another connection?

    At least that's what I'm experiencing currently.

    rysiek@mstdn.socialR 1 Reply Last reply
    0
    • rysiek@mstdn.socialR rysiek@mstdn.social

      Here's a thought:

      The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

      #DNS #InfoSec #SysAdmin

      vincent@knuddelweide.deV This user is from outside of this forum
      vincent@knuddelweide.deV This user is from outside of this forum
      vincent@knuddelweide.de
      wrote last edited by
      #22

      @rysiek@mstdn.social True experts questioned their home infra first, because that is obviously the most stable culprit ​​

      emily@mastodon.deE 1 Reply Last reply
      0
      • stekopf@mstdn.socialS stekopf@mstdn.social

        @rysiek

        From a users perspective some .de domains are not available on one connection but on another connection?

        At least that's what I'm experiencing currently.

        rysiek@mstdn.socialR This user is from outside of this forum
        rysiek@mstdn.socialR This user is from outside of this forum
        rysiek@mstdn.social
        wrote last edited by
        #23

        @stekopf read the thread, I explain why this is going to feel intermittent

        1 Reply Last reply
        0
        • rysiek@mstdn.socialR rysiek@mstdn.social

          Here's a thought:

          The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

          #DNS #InfoSec #SysAdmin

          jpmens@mastodon.socialJ This user is from outside of this forum
          jpmens@mastodon.socialJ This user is from outside of this forum
          jpmens@mastodon.social
          wrote last edited by
          #24

          @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

          rysiek@mstdn.socialR 1 Reply Last reply
          0
          • rysiek@mstdn.socialR rysiek@mstdn.social

            At this moment, please send #HugOps to folks at DENIC. They are dealing with a really bad and stressful situation and I am sure they are doing their best to resolve it as soon as possible.

            #DNS #DENIC

            extmind@chaos.socialE This user is from outside of this forum
            extmind@chaos.socialE This user is from outside of this forum
            extmind@chaos.social
            wrote last edited by
            #25

            @rysiek Good pun. 🙂

            rysiek@mstdn.socialR 1 Reply Last reply
            0
            • jpmens@mastodon.socialJ jpmens@mastodon.social

              @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

              rysiek@mstdn.socialR This user is from outside of this forum
              rysiek@mstdn.socialR This user is from outside of this forum
              rysiek@mstdn.social
              wrote last edited by
              #26

              @jpmens any public failure of a TLD, especially a ccTLD, is hugely embarrassing…

              1 Reply Last reply
              0
              • extmind@chaos.socialE extmind@chaos.social

                @rysiek Good pun. 🙂

                rysiek@mstdn.socialR This user is from outside of this forum
                rysiek@mstdn.socialR This user is from outside of this forum
                rysiek@mstdn.social
                wrote last edited by
                #27

                @extmind what pun?

                extmind@chaos.socialE 1 Reply Last reply
                0
                • rysiek@mstdn.socialR rysiek@mstdn.social

                  @extmind what pun?

                  extmind@chaos.socialE This user is from outside of this forum
                  extmind@chaos.socialE This user is from outside of this forum
                  extmind@chaos.social
                  wrote last edited by
                  #28

                  @rysiek ...to *resolve* it as soon as possible.

                  rysiek@mstdn.socialR 1 Reply Last reply
                  0
                  • rysiek@mstdn.socialR rysiek@mstdn.social

                    Here's a thought:

                    The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

                    #DNS #InfoSec #SysAdmin

                    yetzt@social.yetzt.meY This user is from outside of this forum
                    yetzt@social.yetzt.meY This user is from outside of this forum
                    yetzt@social.yetzt.me
                    wrote last edited by
                    #29

                    @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                    rysiek@mstdn.socialR dergrobi@nrw.socialD 2 Replies Last reply
                    1
                    0
                    • extmind@chaos.socialE extmind@chaos.social

                      @rysiek ...to *resolve* it as soon as possible.

                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.social
                      wrote last edited by
                      #30

                      @extmind oh damn! I did not do this on purpose. ha!

                      1 Reply Last reply
                      0
                      • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                        @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                        rysiek@mstdn.socialR This user is from outside of this forum
                        rysiek@mstdn.socialR This user is from outside of this forum
                        rysiek@mstdn.social
                        wrote last edited by
                        #31

                        @yetzt this is… how many nines?

                        yetzt@social.yetzt.meY 1 Reply Last reply
                        1
                        0
                        • rysiek@mstdn.socialR rysiek@mstdn.social

                          @yetzt this is… how many nines?

                          yetzt@social.yetzt.meY This user is from outside of this forum
                          yetzt@social.yetzt.meY This user is from outside of this forum
                          yetzt@social.yetzt.me
                          wrote last edited by
                          #32

                          @rysiek https://youtu.be/v07H0Px_2UM

                          rysiek@mstdn.socialR 1 Reply Last reply
                          1
                          0
                          • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                            @rysiek https://youtu.be/v07H0Px_2UM

                            rysiek@mstdn.socialR This user is from outside of this forum
                            rysiek@mstdn.socialR This user is from outside of this forum
                            rysiek@mstdn.social
                            wrote last edited by
                            #33

                            @yetzt I ded.

                            1 Reply Last reply
                            1
                            0
                            • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                              @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                              dergrobi@nrw.socialD This user is from outside of this forum
                              dergrobi@nrw.socialD This user is from outside of this forum
                              dergrobi@nrw.social
                              wrote last edited by
                              #34

                              @yetzt Since that day, all my domains have name servers assigned, which are under two distinct TLDs. And this is the reason, that all my domains (except for .de) still resolve at the moment.

                              1 Reply Last reply
                              0
                              • rysiek@mstdn.socialR rysiek@mstdn.social

                                DENIC's status page:
                                https://status.denic.de/

                                Screenshot below in case you're not able to load it (as I said, stuff is going to be intermittently failing).

                                #DNS #DENIC #DNSSEC #InfoSec #SysAdmin

                                Link Preview Image
                                tsia_@chaos.socialT This user is from outside of this forum
                                tsia_@chaos.socialT This user is from outside of this forum
                                tsia_@chaos.social
                                wrote last edited by
                                #35

                                @rysiek fortunately the status page can still be accessed via https://denic.status.io

                                1 Reply Last reply
                                0
                                • rysiek@mstdn.socialR rysiek@mstdn.social

                                  Here's a thought:

                                  The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

                                  #DNS #InfoSec #SysAdmin

                                  emily@mastodon.deE This user is from outside of this forum
                                  emily@mastodon.deE This user is from outside of this forum
                                  emily@mastodon.de
                                  wrote last edited by
                                  #36

                                  @rysiek i checked and changed my dns servers three times still believing it was my fault

                                  1 Reply Last reply
                                  0
                                  • vincent@knuddelweide.deV vincent@knuddelweide.de

                                    @rysiek@mstdn.social True experts questioned their home infra first, because that is obviously the most stable culprit ​​

                                    emily@mastodon.deE This user is from outside of this forum
                                    emily@mastodon.deE This user is from outside of this forum
                                    emily@mastodon.de
                                    wrote last edited by
                                    #37

                                    @rysiek @vincent yeah true

                                    1 Reply Last reply
                                    0
                                    • rysiek@mstdn.socialR rysiek@mstdn.social

                                      @packetcat ooof.

                                      There is going to be a lot of stuff to learn from the post-mortem.

                                      dalias@hachyderm.ioD This user is from outside of this forum
                                      dalias@hachyderm.ioD This user is from outside of this forum
                                      dalias@hachyderm.io
                                      wrote last edited by
                                      #38

                                      @rysiek @packetcat It looks like circular dependencies are going to be a big part of this...

                                      1 Reply Last reply
                                      0
                                      • rysiek@mstdn.socialR rysiek@mstdn.social

                                        Looks like DE ccTLD is unresolvable due to DNSSEC issue:
                                        https://dnsviz.net/d/nic.de/dnssec/

                                        😬

                                        #InfoSec #DNSSEC #DNS #Germany

                                        nshr@hhsocial.deN This user is from outside of this forum
                                        nshr@hhsocial.deN This user is from outside of this forum
                                        nshr@hhsocial.de
                                        wrote last edited by
                                        #39

                                        @rysiek Yep. Have had several problems with uncached de-Domains (amongst others hhsocial.de this instance's domain)

                                        1 Reply Last reply
                                        0
                                        Reply
                                        • Reply as topic
                                        Log in to reply
                                        • Oldest to Newest
                                        • Newest to Oldest
                                        • Most Votes


                                        • Login

                                        • Login or register to search.
                                        • First post
                                          Last post
                                        0
                                        • Categories
                                        • Recent
                                        • Tags
                                        • Popular
                                        • World
                                        • Users
                                        • Groups