.xn--6qq986b3xl DNSSEC Outage: 2014-04-08

Updated: October 6, 2014

Overview

This page gives some details on the .xn--6qq986b3xl DNSSEC outage from April 8 to April 11, 2014.

DNSViz

2014-04-08 19:10:22 UTC: Beginning of outage
2014-04-09 21:53:52 UTC: Outage is 1 day in duration
2014-04-10 22:50:54 UTC: Outage is 2 days in duration
2014-04-11 16:15:49 UTC: Botched key rollover
2014-04-12 06:01:38 UTC: Outage fixed after 3 days

Verisign's DNSSEC Debugger

Verisign doesn't archive test results, unlike DNSViz. So here's a screenshot I took on April 8, 2014:

xn--6qq986b3xl dnssec outage

OpenDNS & Google Public DNS

With OpenDNS, queries succeed:

$ dig ns xn--6qq986b3xl @resolver1.opendns.com

; <<>> DiG 9.4.2-P2 <<>> ns xn--6qq986b3xl @resolver1.opendns.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58454
;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;xn--6qq986b3xl. IN NS

;; ANSWER SECTION:
xn--6qq986b3xl. 27417 IN NS e.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS c.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS g.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS d.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS i.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS b.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS j.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS a.zdnscloud.com.
xn--6qq986b3xl. 27417 IN NS f.zdnscloud.com.

;; Query time: 32 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Tue Apr 8 16:47:59 2014
;; MSG SIZE rcvd: 189

With Google Public DNS, queries fail:

$ dig ns xn--6qq986b3xl @8.8.8.8

; <<>> DiG 9.4.2-P2 <<>> ns xn--6qq986b3xl @8.8.8.8
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 40806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;xn--6qq986b3xl. IN NS

;; Query time: 453 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue Apr 8 16:47:31 2014
;; MSG SIZE rcvd: 32