lacnic.net DNSSEC Outage: 2016-03-14

Updated: March 15, 2016

Overview

This page gives some details on the lacnic.net DNSSEC outage on March 14, 2016.

Timeline / DNSViz

• 2016-03-14 18:29:58 UTC — bogus DNSSEC delegation
• 2016-03-14 18:40:33 UTC — bogus DNSSEC delegation
• 2016-03-14 18:47:02 UTC — bogus DNSSEC delegation
• 2016-03-14 18:54:08 UTC — bogus DNSSEC delegation
• 2016-03-14 19:48:52 UTC — first personally observed DNSSEC failure
• 2016-03-14 20:01:14 UTC — bogus DNSSEC delegation
• 2016-03-14 20:20:15 UTC — bogus DNSSEC delegation
• 2016-03-14 20:31:00 UTC — bogus DNSSEC delegation
• 2016-03-14 20:41:37 UTC — bogus DNSSEC delegation
• 2016-03-14 21:12:50 UTC — DNSSEC outage over
• 2016-03-15 09:45:47 UTC — last personally observed DNSSEC failure (due to caching)

Logfile example

• [1457984932] unbound[16038:0] info: validation failure <lacnic.net. A IN>: no keys have a DS with algorithm RSASHA1 from 200.3.13.10 for key lacnic.net. while building chain of trust
• [1457990708] unbound[16038:0] info: validation failure <lacnic.net. A IN>: no keys have a DS with algorithm RSASHA1 from 200.3.13.10 for key lacnic.net. while building chain of trust
• [1458035147] unbound[16038:0] info: validation failure <lacnic.net. A IN>: no keys have a DS with algorithm RSASHA1 from 199.212.0.53 for key lacnic.net. while building chain of trust