[Pdns-users] Recursor can't resolve login.authorize.net.cdn.cloudflare.net

Tue Apr 6 19:12:47 UTC 2021

I'm having an issue where I can't resolve 
login.authorize.net.cdn.cloudflare.net with pdns recursor (latest 
version 4.4.3)

Here's a partial trace (list refused posting the full trace). From my 
eye it looks like I'm just getting ServFail from cloudflare NS, or 
possibly a DNSSEC validation problem.

2021-04-06T12:10:24.434544-07:00 dnscache1 pdns_recursor[25026]: : got 
status Secure for name login.authorize.net.cdn.cloudflare.net (from 
cloudflare.net)
2021-04-06T12:10:24.434865-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: initial validation status for 
login.authorize.net.cdn.cloudflare.net is Secure
2021-04-06T12:10:24.435124-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Cache consultations done, have 5 
NS to contact
2021-04-06T12:10:24.435376-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net.: Nameservers: 
ns4.cloudflare.net(0.38ms), ns5.cloudflare.net(0.40ms), 
ns2.cloudflare.net(0.46ms),
2021-04-06T12:10:24.435629-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net.: 
ns3.cloudflare.net(13.49ms), ns1.cloudflare.net(15.16ms)
2021-04-06T12:10:24.435885-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying to resolve NS 
'ns4.cloudflare.net' (1/5)
2021-04-06T12:10:24.436136-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns4.cloudflare.net.|A child=(empty): doResolve
2021-04-06T12:10:24.436383-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: Wants DNSSEC processing, NO auth data in query for A
2021-04-06T12:10:24.436644-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: Recursion not requested for 'ns4.cloudflare.net|A', 
peeking at auth/forward zones
2021-04-06T12:10:24.436895-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: Looking for CNAME cache hit of 
'ns4.cloudflare.net|CNAME'
2021-04-06T12:10:24.437156-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: Looking for DNAME cache hit of 
'ns4.cloudflare.net|DNAME' or its ancestors
2021-04-06T12:10:24.437416-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: No CNAME or DNAME cache hit of 'ns4.cloudflare.net' 
found
2021-04-06T12:10:24.437701-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: Found cache hit for A: 198.41.223.131[ttl=86148]
2021-04-06T12:10:24.437966-07:00 dnscache1 pdns_recursor[25026]: 
ns4.cloudflare.net: updating validation state with cache content for 
ns4.cloudflare.net to Indeterminate
2021-04-06T12:10:24.438210-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns4.cloudflare.net.|A child=(empty): Step0 Found in cache
2021-04-06T12:10:24.438458-07:00 dnscache1 pdns_recursor[25026]: 
Nameserver ns4.cloudflare.net IPs: 198.41.223.131(0.38ms), 
2400:cb00:2049:1::c629:df83(2.70ms)
2021-04-06T12:10:24.438708-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Resolved 'cloudflare.net' NS 
ns4.cloudflare.net to: 198.41.223.131, 2400:cb00:2049:1::c629:df83
2021-04-06T12:10:24.438946-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 198.41.223.131:53, 
asking 'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.439199-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns4.cloudflare.net 
(198.41.223.131) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.439450-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 
[2400:cb00:2049:1::c629:df83]:53, asking 
'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.439699-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns4.cloudflare.net 
(2400:cb00:2049:1::c629:df83) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.440024-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying to resolve NS 
'ns5.cloudflare.net' (2/5)
2021-04-06T12:10:24.440286-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns5.cloudflare.net.|A child=(empty): doResolve
2021-04-06T12:10:24.440528-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: Wants DNSSEC processing, NO auth data in query for A
2021-04-06T12:10:24.440767-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: Recursion not requested for 'ns5.cloudflare.net|A', 
peeking at auth/forward zones
2021-04-06T12:10:24.441005-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: Looking for CNAME cache hit of 
'ns5.cloudflare.net|CNAME'
2021-04-06T12:10:24.441249-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: Looking for DNAME cache hit of 
'ns5.cloudflare.net|DNAME' or its ancestors
2021-04-06T12:10:24.441503-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: No CNAME or DNAME cache hit of 'ns5.cloudflare.net' 
found
2021-04-06T12:10:24.441767-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: Found cache hit for A: 198.41.223.31[ttl=900]
2021-04-06T12:10:24.442021-07:00 dnscache1 pdns_recursor[25026]: 
ns5.cloudflare.net: updating validation state with cache content for 
ns5.cloudflare.net to Secure
2021-04-06T12:10:24.442264-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns5.cloudflare.net.|A child=(empty): Step0 Found in cache
2021-04-06T12:10:24.442504-07:00 dnscache1 pdns_recursor[25026]: 
Nameserver ns5.cloudflare.net IPs: 198.41.223.31(14.97ms), 
2400:cb00:2049:1::c629:df1f(16.48ms)
2021-04-06T12:10:24.442754-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Resolved 'cloudflare.net' NS 
ns5.cloudflare.net to: 198.41.223.31, 2400:cb00:2049:1::c629:df1f
2021-04-06T12:10:24.442996-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 198.41.223.31:53, 
asking 'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.443245-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns5.cloudflare.net 
(198.41.223.31) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.443494-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 
[2400:cb00:2049:1::c629:df1f]:53, asking 
'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.443761-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns5.cloudflare.net 
(2400:cb00:2049:1::c629:df1f) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.444026-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying to resolve NS 
'ns2.cloudflare.net' (3/5)
2021-04-06T12:10:24.444268-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns2.cloudflare.net.|A child=(empty): doResolve
2021-04-06T12:10:24.444508-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: Wants DNSSEC processing, NO auth data in query for A
2021-04-06T12:10:24.444756-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: Recursion not requested for 'ns2.cloudflare.net|A', 
peeking at auth/forward zones
2021-04-06T12:10:24.445001-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: Looking for CNAME cache hit of 
'ns2.cloudflare.net|CNAME'
2021-04-06T12:10:24.445318-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: Looking for DNAME cache hit of 
'ns2.cloudflare.net|DNAME' or its ancestors
2021-04-06T12:10:24.445561-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: No CNAME or DNAME cache hit of 'ns2.cloudflare.net' 
found
2021-04-06T12:10:24.445833-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: Found cache hit for A: 198.41.222.131[ttl=86148]
2021-04-06T12:10:24.446089-07:00 dnscache1 pdns_recursor[25026]: 
ns2.cloudflare.net: updating validation state with cache content for 
ns2.cloudflare.net to Indeterminate
2021-04-06T12:10:24.446341-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns2.cloudflare.net.|A child=(empty): Step0 Found in cache
2021-04-06T12:10:24.446588-07:00 dnscache1 pdns_recursor[25026]: 
Nameserver ns2.cloudflare.net IPs: 2400:cb00:2049:1::c629:de83(0.46ms), 
198.41.222.131(14.58ms)
2021-04-06T12:10:24.446833-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Resolved 'cloudflare.net' NS 
ns2.cloudflare.net to: 2400:cb00:2049:1::c629:de83, 198.41.222.131
2021-04-06T12:10:24.447083-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 
[2400:cb00:2049:1::c629:de83]:53, asking 
'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.447332-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns2.cloudflare.net 
(2400:cb00:2049:1::c629:de83) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.447596-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 198.41.222.131:53, 
asking 'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.447848-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns2.cloudflare.net 
(198.41.222.131) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.448095-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying to resolve NS 
'ns3.cloudflare.net' (4/5)
2021-04-06T12:10:24.448353-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns3.cloudflare.net.|A child=(empty): doResolve
2021-04-06T12:10:24.448626-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: Wants DNSSEC processing, NO auth data in query for A
2021-04-06T12:10:24.448893-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: Recursion not requested for 'ns3.cloudflare.net|A', 
peeking at auth/forward zones
2021-04-06T12:10:24.449136-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: Looking for CNAME cache hit of 
'ns3.cloudflare.net|CNAME'
2021-04-06T12:10:24.449377-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: Looking for DNAME cache hit of 
'ns3.cloudflare.net|DNAME' or its ancestors
2021-04-06T12:10:24.449672-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: No CNAME or DNAME cache hit of 'ns3.cloudflare.net' 
found
2021-04-06T12:10:24.449923-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: Found cache hit for A: 198.41.222.31[ttl=900]
2021-04-06T12:10:24.450185-07:00 dnscache1 pdns_recursor[25026]: 
ns3.cloudflare.net: updating validation state with cache content for 
ns3.cloudflare.net to Indeterminate
2021-04-06T12:10:24.450436-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns3.cloudflare.net.|A child=(empty): Step0 Found in cache
2021-04-06T12:10:24.450760-07:00 dnscache1 pdns_recursor[25026]: 
Nameserver ns3.cloudflare.net IPs: 198.41.222.31(13.47ms), 
2400:cb00:2049:1::c629:de1f(13.50ms)
2021-04-06T12:10:24.451023-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Resolved 'cloudflare.net' NS 
ns3.cloudflare.net to: 198.41.222.31, 2400:cb00:2049:1::c629:de1f
2021-04-06T12:10:24.451267-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 198.41.222.31:53, 
asking 'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.451513-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns3.cloudflare.net 
(198.41.222.31) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.451762-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 
[2400:cb00:2049:1::c629:de1f]:53, asking 
'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.452016-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns3.cloudflare.net 
(2400:cb00:2049:1::c629:de1f) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.452262-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying to resolve NS 
'ns1.cloudflare.net' (5/5)
2021-04-06T12:10:24.452516-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns1.cloudflare.net.|A child=(empty): doResolve
2021-04-06T12:10:24.452752-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: Wants DNSSEC processing, NO auth data in query for A
2021-04-06T12:10:24.452988-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: Recursion not requested for 'ns1.cloudflare.net|A', 
peeking at auth/forward zones
2021-04-06T12:10:24.453233-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: Looking for CNAME cache hit of 
'ns1.cloudflare.net|CNAME'
2021-04-06T12:10:24.453477-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: Looking for DNAME cache hit of 
'ns1.cloudflare.net|DNAME' or its ancestors
2021-04-06T12:10:24.453748-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: No CNAME or DNAME cache hit of 'ns1.cloudflare.net' 
found
2021-04-06T12:10:24.454003-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: Found cache hit for A: 173.245.59.31[ttl=900]
2021-04-06T12:10:24.454252-07:00 dnscache1 pdns_recursor[25026]: 
ns1.cloudflare.net: updating validation state with cache content for 
ns1.cloudflare.net to Indeterminate
2021-04-06T12:10:24.454515-07:00 dnscache1 pdns_recursor[25026]:   QM 
ns1.cloudflare.net.|A child=(empty): Step0 Found in cache
2021-04-06T12:10:24.454758-07:00 dnscache1 pdns_recursor[25026]: 
Nameserver ns1.cloudflare.net IPs: 173.245.59.31(15.13ms), 
2400:cb00:2049:1::adf5:3b1f(15.43ms)
2021-04-06T12:10:24.455009-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Resolved 'cloudflare.net' NS 
ns1.cloudflare.net to: 173.245.59.31, 2400:cb00:2049:1::adf5:3b1f
2021-04-06T12:10:24.455250-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 173.245.59.31:53, 
asking 'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.455498-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns1.cloudflare.net 
(173.245.59.31) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.455815-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Trying IP 
[2400:cb00:2049:1::adf5:3b1f]:53, asking 
'login.authorize.net.cdn.cloudflare.net|DS'
2021-04-06T12:10:24.456072-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: ns1.cloudflare.net 
(2400:cb00:2049:1::adf5:3b1f) returned a ServFail, trying sibling IP or NS
2021-04-06T12:10:24.456325-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: Failed to resolve via any of the 
5 offered NS at level 'cloudflare.net'
2021-04-06T12:10:24.456583-07:00 dnscache1 pdns_recursor[25026]: 
login.authorize.net.cdn.cloudflare.net: failed (res=-1)
2021-04-06T12:10:24.456841-07:00 dnscache1 pdns_recursor[25026]:  QM 
login.authorize.net.cdn.cloudflare.net.|DS 
child=login.authorize.net.cdn.cloudflare.net: Step3 Final resolve: 
Server Failure/0