[Pdns-users] Recursor can't resolve login.authorize.net.cdn.cloudflare.net

Seth Mattinen sethm at rollernet.us
Tue Apr 6 19:32:26 UTC 2021 

On 4/6/21 12:12 PM, Seth Mattinen via Pdns-users wrote:
> 
> I'm having an issue where I can't resolve 
> login.authorize.net.cdn.cloudflare.net with pdns recursor (latest 
> version 4.4.3)
> 
> Here's a partial trace (list refused posting the full trace). From my 
> eye it looks like I'm just getting ServFail from cloudflare NS, or 
> possibly a DNSSEC validation problem.


Looking at more of the trace, it appears the closest DS record is for 
cloudflare.net and maybe the recursor is not referencing that by the 
time it gets all the way down to login.authorize.net.cdn.cloudflare.net ?




2021-04-06T12:12:48.002285-07:00 dnscache1 pdns_recursor[25026]: : got 
TA for '.'
2021-04-06T12:12:48.002461-07:00 dnscache1 pdns_recursor[25026]: : 
setting cut state for . to Secure
2021-04-06T12:12:48.002639-07:00 dnscache1 pdns_recursor[25026]: : - 
Looking for a cut at net
2021-04-06T12:12:48.002820-07:00 dnscache1 pdns_recursor[25026]: : no TA 
found for 'net' among 1
2021-04-06T12:12:48.003006-07:00 dnscache1 pdns_recursor[25026]:  QM 
net.|DS child=(empty): doResolve
2021-04-06T12:12:48.003182-07:00 dnscache1 pdns_recursor[25026]:  net: 
Wants DNSSEC processing, auth data in query for DS
2021-04-06T12:12:48.003358-07:00 dnscache1 pdns_recursor[25026]:  net: 
Recursion not requested for 'net|DS', peeking at auth/forward zones
2021-04-06T12:12:48.003536-07:00 dnscache1 pdns_recursor[25026]:  net: 
Found cache hit for DS: 35886 8 2 
7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee[ttl=86123]
2021-04-06T12:12:48.003722-07:00 dnscache1 pdns_recursor[25026]:  net: 
updating validation state with cache content for net to Secure
2021-04-06T12:12:48.003898-07:00 dnscache1 pdns_recursor[25026]:  QM 
net.|DS child=(empty): Step0 Found in cache
2021-04-06T12:12:48.004074-07:00 dnscache1 pdns_recursor[25026]: : - 
Found cut at net
2021-04-06T12:12:48.004250-07:00 dnscache1 pdns_recursor[25026]: : New 
state for net is Secure
2021-04-06T12:12:48.004426-07:00 dnscache1 pdns_recursor[25026]: : - 
Looking for a cut at cloudflare.net
2021-04-06T12:12:48.004602-07:00 dnscache1 pdns_recursor[25026]: : no TA 
found for 'cloudflare.net' among 1
2021-04-06T12:12:48.004788-07:00 dnscache1 pdns_recursor[25026]:  QM 
cloudflare.net.|DS child=(empty): doResolve
2021-04-06T12:12:48.004965-07:00 dnscache1 pdns_recursor[25026]: 
cloudflare.net: Wants DNSSEC processing, auth data in query for DS
2021-04-06T12:12:48.005142-07:00 dnscache1 pdns_recursor[25026]: 
cloudflare.net: Recursion not requested for 'cloudflare.net|DS', peeking 
at auth/forward zones
2021-04-06T12:12:48.005319-07:00 dnscache1 pdns_recursor[25026]: 
cloudflare.net: Found cache hit for DS: 2371 13 2 
90f710a107da51ed78125d30a68704cf3c0308afd01bfcd7057d4bd03b62c68b[ttl=86005]
2021-04-06T12:12:48.005504-07:00 dnscache1 pdns_recursor[25026]: 
cloudflare.net: updating validation state with cache content for 
cloudflare.net to Secure
2021-04-06T12:12:48.005701-07:00 dnscache1 pdns_recursor[25026]:  QM 
cloudflare.net.|DS child=(empty): Step0 Found in cache
2021-04-06T12:12:48.005878-07:00 dnscache1 pdns_recursor[25026]: : - 
Found cut at cloudflare.net
2021-04-06T12:12:48.006053-07:00 dnscache1 pdns_recursor[25026]: : New 
state for cloudflare.net is Secure
2021-04-06T12:12:48.006239-07:00 dnscache1 pdns_recursor[25026]: : - 
Looking for a cut at cdn.cloudflare.net
2021-04-06T12:12:48.006510-07:00 dnscache1 pdns_recursor[25026]: : no TA 
found for 'cdn.cloudflare.net' among 1
2021-04-06T12:12:48.006698-07:00 dnscache1 pdns_recursor[25026]:  QM 
cdn.cloudflare.net.|DS child=(empty): doResolve
2021-04-06T12:12:48.006873-07:00 dnscache1 pdns_recursor[25026]: 
cdn.cloudflare.net: Wants DNSSEC processing, auth data in query for DS
2021-04-06T12:12:48.007061-07:00 dnscache1 pdns_recursor[25026]: 
cdn.cloudflare.net: Recursion not requested for 'cdn.cloudflare.net|DS', 
peeking at auth/forward zones
2021-04-06T12:12:48.007241-07:00 dnscache1 pdns_recursor[25026]: 
cdn.cloudflare.net: DS is negatively cached via 'cloudflare.net' for 
another 3212 seconds
2021-04-06T12:12:48.007428-07:00 dnscache1 pdns_recursor[25026]: 
cdn.cloudflare.net: updating validation state with negative cache 
content for cdn.cloudflare.net to Secure
2021-04-06T12:12:48.007608-07:00 dnscache1 pdns_recursor[25026]:  QM 
cdn.cloudflare.net.|DS child=(empty): Step0 Found in cache
2021-04-06T12:12:48.007794-07:00 dnscache1 pdns_recursor[25026]: 
cdn.cloudflare.net: removing cut state for cdn.cloudflare.net
2021-04-06T12:12:48.007974-07:00 dnscache1 pdns_recursor[25026]: : - 
Looking for a cut at net.cdn.cloudflare.net
2021-04-06T12:12:48.008151-07:00 dnscache1 pdns_recursor[25026]: : no TA 
found for 'net.cdn.cloudflare.net' among 1
2021-04-06T12:12:48.008340-07:00 dnscache1 pdns_recursor[25026]:  QM 
net.cdn.cloudflare.net.|DS child=(empty): doResolve
2021-04-06T12:12:48.008518-07:00 dnscache1 pdns_recursor[25026]: 
net.cdn.cloudflare.net: Wants DNSSEC processing, auth data in query for DS
2021-04-06T12:12:48.008702-07:00 dnscache1 pdns_recursor[25026]: 
net.cdn.cloudflare.net: Recursion not requested for 
'net.cdn.cloudflare.net|DS', peeking at auth/forward zones
2021-04-06T12:12:48.008880-07:00 dnscache1 pdns_recursor[25026]: 
net.cdn.cloudflare.net: DS is negatively cached via 'cloudflare.net' for 
another 3212 seconds
2021-04-06T12:12:48.009066-07:00 dnscache1 pdns_recursor[25026]: 
net.cdn.cloudflare.net: updating validation state with negative cache 
content for net.cdn.cloudflare.net to Secure
2021-04-06T12:12:48.009245-07:00 dnscache1 pdns_recursor[25026]:  QM 
net.cdn.cloudflare.net.|DS child=(empty): Step0 Found in cache
2021-04-06T12:12:48.009428-07:00 dnscache1 pdns_recursor[25026]: 
net.cdn.cloudflare.net: removing cut state for net.cdn.cloudflare.net
2021-04-06T12:12:48.009621-07:00 dnscache1 pdns_recursor[25026]: : - 
Looking for a cut at authorize.net.cdn.cloudflare.net
2021-04-06T12:12:48.009804-07:00 dnscache1 pdns_recursor[25026]: : no TA 
found for 'authorize.net.cdn.cloudflare.net' among 1
2021-04-06T12:12:48.009995-07:00 dnscache1 pdns_recursor[25026]:  QM 
authorize.net.cdn.cloudflare.net.|DS child=(empty): doResolve
2021-04-06T12:12:48.010171-07:00 dnscache1 pdns_recursor[25026]: 
authorize.net.cdn.cloudflare.net: Wants DNSSEC processing, auth data in 
query for DS
2021-04-06T12:12:48.010351-07:00 dnscache1 pdns_recursor[25026]: 
authorize.net.cdn.cloudflare.net: Recursion not requested for 
'authorize.net.cdn.cloudflare.net|DS', peeking at auth/forward zones
2021-04-06T12:12:48.010529-07:00 dnscache1 pdns_recursor[25026]: 
authorize.net.cdn.cloudflare.net: DS is negatively cached via 
'cloudflare.net' for another 3212 seconds
2021-04-06T12:12:48.010715-07:00 dnscache1 pdns_recursor[25026]: 
authorize.net.cdn.cloudflare.net: updating validation state with 
negative cache content for authorize.net.cdn.cloudflare.net to Secure
2021-04-06T12:12:48.010892-07:00 dnscache1 pdns_recursor[25026]:  QM 
authorize.net.cdn.cloudflare.net.|DS child=(empty): Step0 Found in cache
2021-04-06T12:12:48.011151-07:00 dnscache1 pdns_recursor[25026]: 
authorize.net.cdn.cloudflare.net: removing cut state for 
authorize.net.cdn.cloudflare.net
2021-04-06T12:12:48.011330-07:00 dnscache1 pdns_recursor[25026]: : list 
of cuts from authorize.net.cdn.cloudflare.net to .
2021-04-06T12:12:48.011507-07:00 dnscache1 pdns_recursor[25026]:  - .: 
Secure
2021-04-06T12:12:48.011682-07:00 dnscache1 pdns_recursor[25026]:  - net: 
Secure
2021-04-06T12:12:48.011865-07:00 dnscache1 pdns_recursor[25026]:  - 
cloudflare.net: Secure

More information about the Pdns-users mailing list