Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Mark Andrews
This isn’t key renewal. This is signature regeneration. net.au. 900 IN DS 40165 8 2 E1EF24B9E822E574D996E6B03F438B78E5F5914E47D0C0151A21B114 CEE45A26 net.au. 900 IN RRSIG DS 8 2 900 20231030004937 20230917231937 62233 au. L446gkKJ2PaxX+6QbcfDJMmV7a9Ho2E9wDctqtixeX90O0fGxOtENcyM 28nmJPhGN+RYY

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Two Fat Monkeys - Dirk Bermingham
Isn’t PKI fun? I’d not like to be the person in charge of key renewal today… From: AusNOG On Behalf Of Nathan Brookfield Sent: Monday, September 18, 2023 10:58 AM To: Andrew Radke ; Luke Thompson Cc: ausnog@lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Appears that the RR

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Nathan Brookfield
Appears that the RRSIG expired at 00:05:29 UTC Nathan Brookfield | VK2NAB General Manager p: 1300 592 330 | m: 0412 266 008 e: nathan.brookfi...@iperium.com.au | w: iperium.com.au Suite 4.02, 189 Kent Street Sydney NSW 2000 [cid:image001.png@01D9EA1F.09B

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Nathan Brookfield
This is now resolved, 49 minutes downtime. From: AusNOG On Behalf Of Andrew Radke Sent: Monday, September 18, 2023 10:56 AM To: Luke Thompson Cc: ausnog@lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Yeah, we are seeing dnssec failing on some of our resolvers but not other

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Andrew Radke
Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven’t dug as to why but disabling it until sorted. Regards, Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 Web: osi.com.au > On 18 Sep 2023, at 10:26 am, Luke Thompson wrote: > > A

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Luke Thompson
Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. On 18/9/2023 10:23 am, Ted Cooper wrote: The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00)

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Nathan Brookfield
Yep especially from ASIA, it appears all of our network monitoring there believes our DNS is down when it's not. -Original Message- From: AusNOG On Behalf Of Luke Thompson Sent: Monday, September 18, 2023 10:21 AM To: ausnog@lists.ausnog.net Subject: [AusNOG] AU DNS - Something happening

Re: [AusNOG] AU DNS - Something happening?

2023-09-17 Thread Ted Cooper
The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ On 18/9/23 10:20, Luke Thompson wrote: We've got m

[AusNOG] AU DNS - Something happening?

2023-09-17 Thread Luke Thompson
We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing