Re: [dns-operations] g.root-servers.net not reachable over IPv6 from AS3320

2020-02-14 Thread Viktor Dukhovni 
On Fri, Feb 14, 2020 at 02:19:11PM +0100, Winfried Angele wrote:

> g.root-servers.net cannot be reached from AS3320 over IPv6. Is anyone 
> else affected?
> 
> dig @2001:500:12::d0d

Looks good from here via HE (2001:470::/32)

$ dig +nsid +noall +ans +comment +norecur -t soa . @2001:500:12::d0d
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28844
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 27

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; NSID: 6f 6b 6f 31 2e 67 72 6f 6f 74 ("oko1.groot")
; COOKIE: ... (good)
;; ANSWER SECTION:
.   86400   IN  SOA a.root-servers.net.
nstld.verisign-grs.com. 2020021400 1800 900 604800 86400

-- 
Viktor.
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] g.root-servers.net not reachable over IPv6 from AS3320

2020-02-14 Thread Shane Kerr 

Winfried,

On 14/02/2020 14.19, Winfried Angele wrote:


g.root-servers.net cannot be reached from AS3320 over IPv6. Is anyone 
else affected?


dig @2001:500:12::d0d

; <<>> DiG 9.14.9 <<>> @2001:500:12::d0d
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached


It works from here:

$ dig -6 @2001:500:12::d0d +short
l.root-servers.net.
i.root-servers.net.
c.root-servers.net.
g.root-servers.net.
d.root-servers.net.
k.root-servers.net.
b.root-servers.net.
e.root-servers.net.
f.root-servers.net.
a.root-servers.net.
j.root-servers.net.
m.root-servers.net.
h.root-servers.net.

Note that the RIPE NCC has a running measurement against all kinds of 
"important" DNS servers called DNSMON, which includes the root servers:


https://atlas.ripe.net/dnsmon/group/g-root

You can check that at any time.

Cheers,

--
Shane
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations