Re: [EXT] ISC BIND 9 breakage?

2020-03-26 Thread Ray Bellis



On 25/03/2020 18:28, Drew Weaver wrote:

> Normally when there is an impending doom moment with BIND or another
> software release there is at least some amount of coverage of it.
> 
> Was this not announced or known in advance?

It was accidental breakage of the RRSIGs on the dlv.isc.org zone.

More detail to follow tomorrow once I've had some sleep...

Ray Bellis
Director of DNS Operations, ISC.


RE: [EXT] ISC BIND 9 breakage?

2020-03-25 Thread Drew Weaver
Normally when there is an impending doom moment with BIND or another software 
release there is at least some amount of coverage of it.

Was this not announced or known in advance?

Thanks,
-Drew

-Original Message-
From: NANOG  On Behalf Of Chuck Anderson
Sent: Wednesday, March 25, 2020 2:10 PM
To: nanog@nanog.org
Subject: Re: [EXT] ISC BIND 9 breakage?

On the BIND Users list:

https://lists.isc.org/pipermail/bind-users/2020-March/102820.html

On Wed, Mar 25, 2020 at 05:18:49PM +, Drew Weaver wrote:
> Did anyone else on CentOS 6 just have some DNS resolvers totally fall over?
> 
> I noticed that this command: dnssec-lookaside auto; was causing the issue. 
> The issue occurred right at about 1PM EST.


Re: [EXT] ISC BIND 9 breakage?

2020-03-25 Thread Chuck Anderson
On the BIND Users list:

https://lists.isc.org/pipermail/bind-users/2020-March/102820.html

On Wed, Mar 25, 2020 at 05:18:49PM +, Drew Weaver wrote:
> Did anyone else on CentOS 6 just have some DNS resolvers totally fall over?
> 
> I noticed that this command: dnssec-lookaside auto; was causing the issue. 
> The issue occurred right at about 1PM EST.