.mm DNSSEC Outage: 20150926 - 20150929

Updated: September 29, 2015

Overview

This page gives some details on the .mm TLD DNSSEC outage from September 26-29, 2015. The outage lasted over three days.

DNSViz

OpenDNS & Google Public DNS

OpenDNS does not support DNSSEC, instead supporting DNSCurve. Google Public DNS currently supports only DNSSEC, and thus, Google's users saw SERVFAIL for queries under .mm during this outage.

With OpenDNS, queries succeed:

$ dig ns mm. @resolver1.opendns.com.

; <<>> DiG 9.4.2-P2 <<>> ns mm. @resolver1.opendns.com.
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19597
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mm. IN NS

;; ANSWER SECTION:
mm. 3600 IN NS ns2.nic.net.mm.
mm. 3600 IN NS ns1.nic.net.mm.
mm. 3600 IN NS mm.cctld.authdns.ripe.net.
mm. 3600 IN NS ns0.nic.net.mm.

;; Query time: 317 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Sun Sep 27 02:34:13 2015
;; MSG SIZE rcvd: 121


With Google Public DNS, queries fail:

$ dig ns mm. @8.8.8.8

; <<>> DiG 9.4.2-P2 <<>> ns mm. @8.8.8.8
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mm. IN NS

;; Query time: 131 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Sep 27 02:34:22 2015
;; MSG SIZE rcvd: 20

dnscheck

dnscheck.iis.se shows expired signatures at 2015-09-26 14:19:08. (requires javascript.)

dnscheck.labs.nic.cz shows expired signatures at 2015-09-26 14:19:53. (requires javascript.)

Zonemaster

Zonemaster archived this .mm TLD DNSSEC outage.