[Pdns-users] TLSA problemns

[Brian Candler]

On 13/12/2019 14:04, steffannoord at gmail.com wrote:
> Yes it is my own.
> I use mysql replication
> If i test the dns servers it works.
>
> I also see the difference in the TTL, but the settings are in my dns for several months.
>
> The reasen why i test 8.8.8.8 is that SIDN uses them to test for tlsa/dane
> And my domains are failing for there test.

When you say intermittent NOERROR and NXDOMAIN, does the NOERROR 
response include the expected RRs, or is it empty?

What does the SOA record in the NXDOMAIN response show?