.mm DNSSEC Outage: 2015-09-26 to 2015-09-29
Updated: September 29, 2015
Overview
This page gives some details on the .mm TLD DNSSEC outage from September 26-29, 2015. The outage lasted over three days.
DNSViz
- 2015-09-26 07:13:12 UTC — RRSIGs expire
- 2015-09-26 07:41:31 UTC — expired RRSIGs
- 2015-09-26 12:12:15 UTC — expired RRSIGs
- 2015-09-26 14:23:05 UTC — expired RRSIGs
- 2015-09-26 19:32:19 UTC — expired RRSIGs
- 2015-09-26 23:41:10 UTC — expired RRSIGs
- 2015-09-27 03:48:35 UTC — expired RRSIGs
- 2015-09-27 08:08:29 UTC — expired RRSIGs
- 2015-09-27 12:12:58 UTC — expired RRSIGs
- 2015-09-27 17:42:56 UTC — expired RRSIGs
- 2015-09-27 21:48:33 UTC — expired RRSIGs
- 2015-09-28 03:04:58 UTC — expired RRSIGs
- 2015-09-28 08:02:25 UTC — expired RRSIGs
- 2015-09-28 12:14:32 UTC — expired RRSIGs
- 2015-09-28 16:21:08 UTC — expired RRSIGs
- 2015-09-28 20:37:09 UTC — expired RRSIGs
- 2015-09-29 02:50:02 UTC — expired RRSIGs
- 2015-09-29 07:36:35 UTC — expired RRSIGs
- 2015-09-29 08:19:04 UTC — last personally observed .mm DNSSEC failure
- 2015-09-29 12:12:47 UTC — .mm ccTLD DNSSEC outage over
OpenDNS & Google Public DNS
OpenDNS does not support DNSSEC, instead supporting DNSCurve. Google Public DNS currently supports only DNSSEC, and thus, Google's users saw SERVFAIL for queries under .mm during this outage.
With OpenDNS, queries succeed:
$ dig ns mm. @resolver1.opendns.com.
; <<>> DiG 9.4.2-P2 <<>> ns mm. @resolver1.opendns.com.
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19597
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;mm. IN NS
;; ANSWER SECTION:
mm. 3600 IN NS ns2.nic.net.mm.
mm. 3600 IN NS ns1.nic.net.mm.
mm. 3600 IN NS mm.cctld.authdns.ripe.net.
mm. 3600 IN NS ns0.nic.net.mm.
;; Query time: 317 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Sun Sep 27 02:34:13 2015
;; MSG SIZE rcvd: 121
With Google Public DNS, queries fail:
$ dig ns mm. @8.8.8.8
; <<>> DiG 9.4.2-P2 <<>> ns mm. @8.8.8.8
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 39619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;mm. IN NS
;; Query time: 131 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sun Sep 27 02:34:22 2015
;; MSG SIZE rcvd: 20
dnscheck
dnscheck.iis.se shows expired signatures at 2015-09-26 14:19:08. (requires javascript.)
dnscheck.labs.nic.cz shows expired signatures at 2015-09-26 14:19:53. (requires javascript.)
Zonemaster
Zonemaster archived this .mm TLD DNSSEC outage.