Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Scheduled Pinned Locked Moved Uncategorized
infosecdnssecdnsgermany
39 Posts 18 Posters 80 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • rysiek@mstdn.socialR rysiek@mstdn.social

    Here's a thought:

    The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

    #DNS #InfoSec #SysAdmin

    vincent@knuddelweide.deV This user is from outside of this forum
    vincent@knuddelweide.deV This user is from outside of this forum
    vincent@knuddelweide.de
    wrote last edited by
    #22

    @rysiek@mstdn.social True experts questioned their home infra first, because that is obviously the most stable culprit ​​

    emily@mastodon.deE 1 Reply Last reply
    0
    • stekopf@mstdn.socialS stekopf@mstdn.social

      @rysiek

      From a users perspective some .de domains are not available on one connection but on another connection?

      At least that's what I'm experiencing currently.

      rysiek@mstdn.socialR This user is from outside of this forum
      rysiek@mstdn.socialR This user is from outside of this forum
      rysiek@mstdn.social
      wrote last edited by
      #23

      @stekopf read the thread, I explain why this is going to feel intermittent

      1 Reply Last reply
      0
      • rysiek@mstdn.socialR rysiek@mstdn.social

        Here's a thought:

        The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

        #DNS #InfoSec #SysAdmin

        jpmens@mastodon.socialJ This user is from outside of this forum
        jpmens@mastodon.socialJ This user is from outside of this forum
        jpmens@mastodon.social
        wrote last edited by
        #24

        @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

        rysiek@mstdn.socialR 1 Reply Last reply
        0
        • rysiek@mstdn.socialR rysiek@mstdn.social

          At this moment, please send #HugOps to folks at DENIC. They are dealing with a really bad and stressful situation and I am sure they are doing their best to resolve it as soon as possible.

          #DNS #DENIC

          extmind@chaos.socialE This user is from outside of this forum
          extmind@chaos.socialE This user is from outside of this forum
          extmind@chaos.social
          wrote last edited by
          #25

          @rysiek Good pun. 🙂

          rysiek@mstdn.socialR 1 Reply Last reply
          0
          • jpmens@mastodon.socialJ jpmens@mastodon.social

            @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

            rysiek@mstdn.socialR This user is from outside of this forum
            rysiek@mstdn.socialR This user is from outside of this forum
            rysiek@mstdn.social
            wrote last edited by
            #26

            @jpmens any public failure of a TLD, especially a ccTLD, is hugely embarrassing…

            1 Reply Last reply
            0
            • extmind@chaos.socialE extmind@chaos.social

              @rysiek Good pun. 🙂

              rysiek@mstdn.socialR This user is from outside of this forum
              rysiek@mstdn.socialR This user is from outside of this forum
              rysiek@mstdn.social
              wrote last edited by
              #27

              @extmind what pun?

              extmind@chaos.socialE 1 Reply Last reply
              0
              • rysiek@mstdn.socialR rysiek@mstdn.social

                @extmind what pun?

                extmind@chaos.socialE This user is from outside of this forum
                extmind@chaos.socialE This user is from outside of this forum
                extmind@chaos.social
                wrote last edited by
                #28

                @rysiek ...to *resolve* it as soon as possible.

                rysiek@mstdn.socialR 1 Reply Last reply
                0
                • rysiek@mstdn.socialR rysiek@mstdn.social

                  Here's a thought:

                  The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

                  #DNS #InfoSec #SysAdmin

                  yetzt@social.yetzt.meY This user is from outside of this forum
                  yetzt@social.yetzt.meY This user is from outside of this forum
                  yetzt@social.yetzt.me
                  wrote last edited by
                  #29

                  @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                  rysiek@mstdn.socialR dergrobi@nrw.socialD 2 Replies Last reply
                  1
                  0
                  • extmind@chaos.socialE extmind@chaos.social

                    @rysiek ...to *resolve* it as soon as possible.

                    rysiek@mstdn.socialR This user is from outside of this forum
                    rysiek@mstdn.socialR This user is from outside of this forum
                    rysiek@mstdn.social
                    wrote last edited by
                    #30

                    @extmind oh damn! I did not do this on purpose. ha!

                    1 Reply Last reply
                    0
                    • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                      @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.social
                      wrote last edited by
                      #31

                      @yetzt this is… how many nines?

                      yetzt@social.yetzt.meY 1 Reply Last reply
                      1
                      0
                      • rysiek@mstdn.socialR rysiek@mstdn.social

                        @yetzt this is… how many nines?

                        yetzt@social.yetzt.meY This user is from outside of this forum
                        yetzt@social.yetzt.meY This user is from outside of this forum
                        yetzt@social.yetzt.me
                        wrote last edited by
                        #32

                        @rysiek https://youtu.be/v07H0Px_2UM

                        rysiek@mstdn.socialR 1 Reply Last reply
                        1
                        0
                        • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                          @rysiek https://youtu.be/v07H0Px_2UM

                          rysiek@mstdn.socialR This user is from outside of this forum
                          rysiek@mstdn.socialR This user is from outside of this forum
                          rysiek@mstdn.social
                          wrote last edited by
                          #33

                          @yetzt I ded.

                          1 Reply Last reply
                          1
                          0
                          • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                            @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                            dergrobi@nrw.socialD This user is from outside of this forum
                            dergrobi@nrw.socialD This user is from outside of this forum
                            dergrobi@nrw.social
                            wrote last edited by
                            #34

                            @yetzt Since that day, all my domains have name servers assigned, which are under two distinct TLDs. And this is the reason, that all my domains (except for .de) still resolve at the moment.

                            1 Reply Last reply
                            0
                            • rysiek@mstdn.socialR rysiek@mstdn.social

                              DENIC's status page:
                              https://status.denic.de/

                              Screenshot below in case you're not able to load it (as I said, stuff is going to be intermittently failing).

                              #DNS #DENIC #DNSSEC #InfoSec #SysAdmin

                              Link Preview Image
                              tsia_@chaos.socialT This user is from outside of this forum
                              tsia_@chaos.socialT This user is from outside of this forum
                              tsia_@chaos.social
                              wrote last edited by
                              #35

                              @rysiek fortunately the status page can still be accessed via https://denic.status.io

                              1 Reply Last reply
                              0
                              • rysiek@mstdn.socialR rysiek@mstdn.social

                                Here's a thought:

                                The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

                                #DNS #InfoSec #SysAdmin

                                emily@mastodon.deE This user is from outside of this forum
                                emily@mastodon.deE This user is from outside of this forum
                                emily@mastodon.de
                                wrote last edited by
                                #36

                                @rysiek i checked and changed my dns servers three times still believing it was my fault

                                1 Reply Last reply
                                0
                                • vincent@knuddelweide.deV vincent@knuddelweide.de

                                  @rysiek@mstdn.social True experts questioned their home infra first, because that is obviously the most stable culprit ​​

                                  emily@mastodon.deE This user is from outside of this forum
                                  emily@mastodon.deE This user is from outside of this forum
                                  emily@mastodon.de
                                  wrote last edited by
                                  #37

                                  @rysiek @vincent yeah true

                                  1 Reply Last reply
                                  0
                                  • rysiek@mstdn.socialR rysiek@mstdn.social

                                    @packetcat ooof.

                                    There is going to be a lot of stuff to learn from the post-mortem.

                                    dalias@hachyderm.ioD This user is from outside of this forum
                                    dalias@hachyderm.ioD This user is from outside of this forum
                                    dalias@hachyderm.io
                                    wrote last edited by
                                    #38

                                    @rysiek @packetcat It looks like circular dependencies are going to be a big part of this...

                                    1 Reply Last reply
                                    0
                                    • rysiek@mstdn.socialR rysiek@mstdn.social

                                      Looks like DE ccTLD is unresolvable due to DNSSEC issue:
                                      https://dnsviz.net/d/nic.de/dnssec/

                                      😬

                                      #InfoSec #DNSSEC #DNS #Germany

                                      nshr@hhsocial.deN This user is from outside of this forum
                                      nshr@hhsocial.deN This user is from outside of this forum
                                      nshr@hhsocial.de
                                      wrote last edited by
                                      #39

                                      @rysiek Yep. Have had several problems with uncached de-Domains (amongst others hhsocial.de this instance's domain)

                                      1 Reply Last reply
                                      0
                                      Reply
                                      • Reply as topic
                                      Log in to reply
                                      • Oldest to Newest
                                      • Newest to Oldest
                                      • Most Votes


                                      • Login

                                      • Login or register to search.
                                      • First post
                                        Last post
                                      0
                                      • Categories
                                      • Recent
                                      • Tags
                                      • Popular
                                      • World
                                      • Users
                                      • Groups