Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Looks like DE ccTLD is unresolvable due to DNSSEC issue:https://dnsviz.net/d/nic.de/dnssec/

Scheduled Pinned Locked Moved Uncategorized
infosecdnssecdnsgermany
39 Posts 18 Posters 80 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • rysiek@mstdn.socialR rysiek@mstdn.social

    Here's a thought:

    The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

    #DNS #InfoSec #SysAdmin

    jpmens@mastodon.socialJ This user is from outside of this forum
    jpmens@mastodon.socialJ This user is from outside of this forum
    jpmens@mastodon.social
    wrote last edited by
    #24

    @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

    rysiek@mstdn.socialR 1 Reply Last reply
    0
    • rysiek@mstdn.socialR rysiek@mstdn.social

      At this moment, please send #HugOps to folks at DENIC. They are dealing with a really bad and stressful situation and I am sure they are doing their best to resolve it as soon as possible.

      #DNS #DENIC

      extmind@chaos.socialE This user is from outside of this forum
      extmind@chaos.socialE This user is from outside of this forum
      extmind@chaos.social
      wrote last edited by
      #25

      @rysiek Good pun. 🙂

      rysiek@mstdn.socialR 1 Reply Last reply
      0
      • jpmens@mastodon.socialJ jpmens@mastodon.social

        @rysiek the last failure of DE I recall was in May (hmm) 2010 (or 2012) when the zone exporter failed because of a file-system full error which wasn’t caught before the zone was shipped out to DE’s secondaries. That caused (alphabetically) all zones > a certain letter (ISTR it was ‘m’) to fail. Quite funny on one hand, sad on another, and hugely embarrassing to the DENIC people 🙂

        rysiek@mstdn.socialR This user is from outside of this forum
        rysiek@mstdn.socialR This user is from outside of this forum
        rysiek@mstdn.social
        wrote last edited by
        #26

        @jpmens any public failure of a TLD, especially a ccTLD, is hugely embarrassing…

        1 Reply Last reply
        0
        • extmind@chaos.socialE extmind@chaos.social

          @rysiek Good pun. 🙂

          rysiek@mstdn.socialR This user is from outside of this forum
          rysiek@mstdn.socialR This user is from outside of this forum
          rysiek@mstdn.social
          wrote last edited by
          #27

          @extmind what pun?

          extmind@chaos.socialE 1 Reply Last reply
          0
          • rysiek@mstdn.socialR rysiek@mstdn.social

            @extmind what pun?

            extmind@chaos.socialE This user is from outside of this forum
            extmind@chaos.socialE This user is from outside of this forum
            extmind@chaos.social
            wrote last edited by
            #28

            @rysiek ...to *resolve* it as soon as possible.

            rysiek@mstdn.socialR 1 Reply Last reply
            0
            • rysiek@mstdn.socialR rysiek@mstdn.social

              Here's a thought:

              The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

              #DNS #InfoSec #SysAdmin

              yetzt@social.yetzt.meY This user is from outside of this forum
              yetzt@social.yetzt.meY This user is from outside of this forum
              yetzt@social.yetzt.me
              wrote last edited by
              #29

              @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

              rysiek@mstdn.socialR dergrobi@nrw.socialD 2 Replies Last reply
              1
              0
              • extmind@chaos.socialE extmind@chaos.social

                @rysiek ...to *resolve* it as soon as possible.

                rysiek@mstdn.socialR This user is from outside of this forum
                rysiek@mstdn.socialR This user is from outside of this forum
                rysiek@mstdn.social
                wrote last edited by
                #30

                @extmind oh damn! I did not do this on purpose. ha!

                1 Reply Last reply
                0
                • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                  @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                  rysiek@mstdn.socialR This user is from outside of this forum
                  rysiek@mstdn.socialR This user is from outside of this forum
                  rysiek@mstdn.social
                  wrote last edited by
                  #31

                  @yetzt this is… how many nines?

                  yetzt@social.yetzt.meY 1 Reply Last reply
                  1
                  0
                  • rysiek@mstdn.socialR rysiek@mstdn.social

                    @yetzt this is… how many nines?

                    yetzt@social.yetzt.meY This user is from outside of this forum
                    yetzt@social.yetzt.meY This user is from outside of this forum
                    yetzt@social.yetzt.me
                    wrote last edited by
                    #32

                    @rysiek https://youtu.be/v07H0Px_2UM

                    rysiek@mstdn.socialR 1 Reply Last reply
                    1
                    0
                    • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                      @rysiek https://youtu.be/v07H0Px_2UM

                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.socialR This user is from outside of this forum
                      rysiek@mstdn.social
                      wrote last edited by
                      #33

                      @yetzt I ded.

                      1 Reply Last reply
                      1
                      0
                      • yetzt@social.yetzt.meY yetzt@social.yetzt.me

                        @rysiek last notable outage at denic was almost 16 years ago, when they moved servers from amsterdam to frankfurt.

                        dergrobi@nrw.socialD This user is from outside of this forum
                        dergrobi@nrw.socialD This user is from outside of this forum
                        dergrobi@nrw.social
                        wrote last edited by
                        #34

                        @yetzt Since that day, all my domains have name servers assigned, which are under two distinct TLDs. And this is the reason, that all my domains (except for .de) still resolve at the moment.

                        1 Reply Last reply
                        0
                        • rysiek@mstdn.socialR rysiek@mstdn.social

                          DENIC's status page:
                          https://status.denic.de/

                          Screenshot below in case you're not able to load it (as I said, stuff is going to be intermittently failing).

                          #DNS #DENIC #DNSSEC #InfoSec #SysAdmin

                          Link Preview Image
                          tsia_@chaos.socialT This user is from outside of this forum
                          tsia_@chaos.socialT This user is from outside of this forum
                          tsia_@chaos.social
                          wrote last edited by
                          #35

                          @rysiek fortunately the status page can still be accessed via https://denic.status.io

                          1 Reply Last reply
                          0
                          • rysiek@mstdn.socialR rysiek@mstdn.social

                            Here's a thought:

                            The fact that people are experiencing issues with DE sites and asking if CloudFlare is down speaks volumes about the stability of DE ccTLD and the broader DNS compared to big cloud providers.

                            #DNS #InfoSec #SysAdmin

                            emily@mastodon.deE This user is from outside of this forum
                            emily@mastodon.deE This user is from outside of this forum
                            emily@mastodon.de
                            wrote last edited by
                            #36

                            @rysiek i checked and changed my dns servers three times still believing it was my fault

                            1 Reply Last reply
                            0
                            • vincent@knuddelweide.deV vincent@knuddelweide.de

                              @rysiek@mstdn.social True experts questioned their home infra first, because that is obviously the most stable culprit ​​

                              emily@mastodon.deE This user is from outside of this forum
                              emily@mastodon.deE This user is from outside of this forum
                              emily@mastodon.de
                              wrote last edited by
                              #37

                              @rysiek @vincent yeah true

                              1 Reply Last reply
                              0
                              • rysiek@mstdn.socialR rysiek@mstdn.social

                                @packetcat ooof.

                                There is going to be a lot of stuff to learn from the post-mortem.

                                dalias@hachyderm.ioD This user is from outside of this forum
                                dalias@hachyderm.ioD This user is from outside of this forum
                                dalias@hachyderm.io
                                wrote last edited by
                                #38

                                @rysiek @packetcat It looks like circular dependencies are going to be a big part of this...

                                1 Reply Last reply
                                0
                                • rysiek@mstdn.socialR rysiek@mstdn.social

                                  Looks like DE ccTLD is unresolvable due to DNSSEC issue:
                                  https://dnsviz.net/d/nic.de/dnssec/

                                  😬

                                  #InfoSec #DNSSEC #DNS #Germany

                                  nshr@hhsocial.deN This user is from outside of this forum
                                  nshr@hhsocial.deN This user is from outside of this forum
                                  nshr@hhsocial.de
                                  wrote last edited by
                                  #39

                                  @rysiek Yep. Have had several problems with uncached de-Domains (amongst others hhsocial.de this instance's domain)

                                  1 Reply Last reply
                                  0
                                  Reply
                                  • Reply as topic
                                  Log in to reply
                                  • Oldest to Newest
                                  • Newest to Oldest
                                  • Most Votes


                                  • Login

                                  • Login or register to search.
                                  • First post
                                    Last post
                                  0
                                  • Categories
                                  • Recent
                                  • Tags
                                  • Popular
                                  • World
                                  • Users
                                  • Groups