[opensuse-buildservice] DNS issues?
Hi, Is opensuse.org experiencing DNS issues? Queries are coming back with SERVFAIL status. $ dig api.opensuse.org @8.8.8.8 ; <<>> DiG 9.11.14-RedHat-9.11.14-2.fc31 <<>> api.opensuse.org @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 30269 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;api.opensuse.org. IN A ;; Query time: 8 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Thu Feb 27 21:51:08 CET 2020 ;; MSG SIZE rcvd: 45 with kind regards, / met vriendelijke groet, Stefan van der Eijk -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
(replies inline) On Thu, 27 Feb 2020, Stefan van der Eijk wrote:
Is opensuse.org experiencing DNS issues? Queries are coming back with SERVFAIL status.
$ dig api.opensuse.org @8.8.8.8
; <<>> DiG 9.11.14-RedHat-9.11.14-2.fc31 <<>> api.opensuse.org @8.8.8.8 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 30269 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;api.opensuse.org. IN A
;; Query time: 8 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Thu Feb 27 21:51:08 CET 2020 ;; MSG SIZE rcvd: 45
Hah! You asked just about the exact same question as I did, except in a different medium :) 13:23 < rtyler> interesting, from a different network I have no problem getting to it 13:25 < rtyler> also very interesting, download.opensuse.org doesn't have an A record when i query 1.1.1.1 or 8.8.8.8 13:29 >> aaronpuchert<< rtyler: We discussed this over at #suse, seems there are DNS problems with all opensuse.org domains. Also mentioned on status.opensuse.org. 13:35 < rtyler> ah, thanks for the update, I hadn't noticed elsewhere I have not seen an ETA anywhere just yet -- GitHub: https://github.com/rtyler GPG Key ID: 0F2298A980EE31ACCA0A7825E5C92681BEF6CEA2
Am 2020-02-27 21:53, schrieb Stefan van der Eijk:
Is opensuse.org experiencing DNS issues? Queries are coming back with SERVFAIL status.
Yes, there is an issue. We switched the DNS servers for opensuse.de today. Not thinking of the following loop: * opensuse.org has ns1.opensuse.de as primary DNS server * opensuse.de has ns1.opensuse.org as primary DNS server ...now guess what happens: to find out the IP of the DNS server for opensuse.de, the resolvers would need to find out the IP of the DNS server for opensuse.org ... I have to admit that I am part of the guys who rolled out the chance and did not notice the obvious problem above. Without a correct glue record at the registrar's side, there is not really a way for the resolvers to get the right answers. There is already a ticket open and we extended the TTL for the zones, so once a resolver got out of the loop, he should work again. There will be a fix deployed tomorrow morning at the registrar's side (glue records, means: the Name *and* IP of the DNS servers are added) - until than, I have to admit that we can only do workarounds for the problem caused. JFYI (for those who run own DNS servers) here are the new official DNS servers (replace opensuse.org with opensuse.de, if needed): ns1.opensuse.org has address 195.135.221.195 ns1.opensuse.org has IPv6 address 2001:67c:2178:8::31 ns2.opensuse.org has address 195.135.221.196 ns2.opensuse.org has IPv6 address 2001:67c:2178:8::30 ns3.opensuse.org has address 62.146.92.204 ns3.opensuse.org has IPv6 address 2a01:138:a004::204 I'm very sorry for the trouble caused! Lars -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Hi Lars,
Thanks for your elaborate answer. No rush from my end to get it fixed,
take your time.
with kind regards, / met vriendelijke groet,
Stefan van der Eijk
On Thu, Feb 27, 2020 at 11:16 PM Lars Vogdt
Am 2020-02-27 21:53, schrieb Stefan van der Eijk:
Is opensuse.org experiencing DNS issues? Queries are coming back with SERVFAIL status.
Yes, there is an issue.
We switched the DNS servers for opensuse.de today. Not thinking of the following loop: * opensuse.org has ns1.opensuse.de as primary DNS server * opensuse.de has ns1.opensuse.org as primary DNS server ...now guess what happens: to find out the IP of the DNS server for opensuse.de, the resolvers would need to find out the IP of the DNS server for opensuse.org ...
I have to admit that I am part of the guys who rolled out the chance and did not notice the obvious problem above. Without a correct glue record at the registrar's side, there is not really a way for the resolvers to get the right answers.
There is already a ticket open and we extended the TTL for the zones, so once a resolver got out of the loop, he should work again. There will be a fix deployed tomorrow morning at the registrar's side (glue records, means: the Name *and* IP of the DNS servers are added) - until than, I have to admit that we can only do workarounds for the problem caused.
JFYI (for those who run own DNS servers) here are the new official DNS servers (replace opensuse.org with opensuse.de, if needed): ns1.opensuse.org has address 195.135.221.195 ns1.opensuse.org has IPv6 address 2001:67c:2178:8::31 ns2.opensuse.org has address 195.135.221.196 ns2.opensuse.org has IPv6 address 2001:67c:2178:8::30 ns3.opensuse.org has address 62.146.92.204 ns3.opensuse.org has IPv6 address 2a01:138:a004::204
I'm very sorry for the trouble caused!
Lars
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (3)
-
Lars Vogdt -
R. Tyler Croy -
Stefan van der Eijk