[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dns-operations
Subject:    Re: [dns-operations] Google Resolver Validation
From:       Brett <brettcarr () gmail ! com>
Date:       2015-04-01 16:27:36
Message-ID: CAOSM_tjpAG0oEB=K=kxcy3LrT00F407F-UeJNbB8rWXH6foTPw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Thanks for the update appreciate the rapid response.  The alarms in our
monitoring systems are now subsiding.

Brett
On Apr 1, 2015 5:01 PM, "Yunhong Gu" <guu@google.com> wrote:

> This should be fixed now. Sorry that this was not a April Fools day joke :)
>
> Yunhong
>
> On Wed, Apr 1, 2015 at 11:21 AM, Yunhong Gu <guu@google.com> wrote:
>
>> Thanks, I am investigating.
>>
>> On Wed, Apr 1, 2015 at 11:17 AM, Brett <brettcarr@gmail.com> wrote:
>>
>>> 1  gw-vlan100 (213.248.204.1)  0.512 ms  0.320 ms  0.292 ms
>>>  2  213.248.252.201 (213.248.252.201)  1.242 ms  1.036 ms  0.994 ms
>>>  3  nomfwlp01-reth4-414 (213.248.252.35)  2.731 ms  2.662 ms  2.691 ms
>>>  4  nomfwlp01-ge-0-0-2 (213.248.252.249)  3.559 ms  3.561 ms  3.524 ms
>>>  5  dc2nombgprp01-pc2 (213.248.252.4)  16.188 ms  4.050 ms  3.798 ms
>>>  6  195.66.236.125 (195.66.236.125)  918.570 ms  709.130 ms  656.792 ms
>>>  7  216.239.47.177 (216.239.47.177)  5.653 ms
>>>     216.239.47.179 (216.239.47.179)  5.364 ms
>>>     216.239.47.175 (216.239.47.175)  5.085 ms
>>>  8  72.14.237.41 (72.14.237.41)  5.498 ms
>>>     72.14.239.43 (72.14.239.43)  5.829 ms
>>>     216.239.47.45 (216.239.47.45)  5.689 ms
>>>  9  google-public-dns-a.google.com (8.8.8.8)  5.296 ms  5.345 ms  5.439
>>> ms
>>>
>>> I just sent ten queries for:
>>>
>>> dig @8.8.8.8 verisign.com a +dnssec
>>>
>>> six of them came back with the AD bit set and four answered with no AD
>>> bit.
>>>
>>> Brett
>>>
>>>
>>>
>>>
>>>
>>> On 1 April 2015 at 16:13, Yunhong Gu <guu@google.com> wrote:
>>>
>>>> Hi, Brett,
>>>>
>>>> Can you tell me which Google server responded your requests?
>>>> (traceroute 8.8.8.8 should do).
>>>>
>>>> Yunhong
>>>>
>>>> On Wed, Apr 1, 2015 at 10:57 AM, Brett <brettcarr@gmail.com> wrote:
>>>>
>>>>> I am currently seeing a proportion (about 50%) of queries to 8.8.8.8
>>>>> not returning an AD bit.
>>>>> Anybody else seeing the same?
>>>>> Warren: do you have any ideas what is happening here (Is this a DNSSEC
>>>>> April Fool?)
>>>>>
>>>>> oh and I do like todays com.google :)
>>>>>
>>>>> --
>>>>> Brett
>>>>>
>>>>> _______________________________________________
>>>>> dns-operations mailing list
>>>>> dns-operations@lists.dns-oarc.net
>>>>> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>>>>> dns-jobs
>>>>> <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs>
>>>>> mailing list
>>>>> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> Brett
>>>
>>
>>
>

[Attachment #5 (text/html)]

<p dir="ltr">Thanks for the update appreciate the rapid response.   The alarms in our \
monitoring systems are now subsiding. </p> <p dir="ltr">Brett</p>
<div class="gmail_quote">On Apr 1, 2015 5:01 PM, &quot;Yunhong Gu&quot; &lt;<a \
href="mailto:guu@google.com">guu@google.com</a>&gt; wrote:<br \
type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">This should be fixed \
now. Sorry that this was not a April Fools day joke \
:)<div><br></div><div>Yunhong</div></div><div class="gmail_extra"><br><div \
class="gmail_quote">On Wed, Apr 1, 2015 at 11:21 AM, Yunhong Gu <span \
dir="ltr">&lt;<a href="mailto:guu@google.com" \
target="_blank">guu@google.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr">Thanks, I am \
investigating.</div><div><div><div class="gmail_extra"><br><div \
class="gmail_quote">On Wed, Apr 1, 2015 at 11:17 AM, Brett <span dir="ltr">&lt;<a \
href="mailto:brettcarr@gmail.com" target="_blank">brettcarr@gmail.com</a>&gt;</span> \
wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex"><div dir="ltr"><div>1   gw-vlan100 (213.248.204.1)   \
0.512 ms   0.320 ms   0.292 ms</div><div>  2   213.248.252.201 (213.248.252.201)   \
1.242 ms   1.036 ms   0.994 ms</div><div>  3   nomfwlp01-reth4-414 (213.248.252.35)   \
2.731 ms   2.662 ms   2.691 ms</div><div>  4   nomfwlp01-ge-0-0-2 (213.248.252.249)   \
3.559 ms   3.561 ms   3.524 ms</div><div>  5   dc2nombgprp01-pc2 (213.248.252.4)   \
16.188 ms   4.050 ms   3.798 ms</div><div>  6   195.66.236.125 (195.66.236.125)   \
918.570 ms   709.130 ms   656.792 ms</div><div>  7   216.239.47.177 (216.239.47.177)  \
5.653 ms</div><div>      216.239.47.179 (216.239.47.179)   5.364 ms</div><div>      \
216.239.47.175 (216.239.47.175)   5.085 ms</div><div>  8   72.14.237.41 \
(72.14.237.41)   5.498 ms</div><div>      72.14.239.43 (72.14.239.43)   5.829 \
ms</div><div>      216.239.47.45 (216.239.47.45)   5.689 ms</div><div>  9   <a \
href="http://google-public-dns-a.google.com" \
target="_blank">google-public-dns-a.google.com</a> (8.8.8.8)   5.296 ms   5.345 ms   \
5.439 ms</div><div><br></div><div>I just sent ten queries \
for:</div><div><br></div><div>dig @<a href="http://8.8.8.8" \
target="_blank">8.8.8.8</a> <a href="http://verisign.com" \
target="_blank">verisign.com</a> a +dnssec<br></div><div><br></div><div>six of them \
came back with the AD bit set and four answered with no AD \
bit.</div><div><br></div><div>Brett</div><div><br></div><div><br></div><div><br></div><div><br></div></div><div \
class="gmail_extra"><div><div><br><div class="gmail_quote">On 1 April 2015 at 16:13, \
Yunhong Gu <span dir="ltr">&lt;<a href="mailto:guu@google.com" \
target="_blank">guu@google.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr">Hi, Brett,<div><br></div><div>Can you tell me \
which Google server responded your requests? (traceroute 8.8.8.8 should \
do).</div><div><br></div><div>Yunhong</div></div><div class="gmail_extra"><br><div \
class="gmail_quote"><div><div>On Wed, Apr 1, 2015 at 10:57 AM, Brett <span \
dir="ltr">&lt;<a href="mailto:brettcarr@gmail.com" \
target="_blank">brettcarr@gmail.com</a>&gt;</span> wrote:<br></div></div><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div><div><div dir="ltr">I am currently seeing a proportion \
(about 50%) of queries to 8.8.8.8 not returning an AD bit.<div>Anybody else seeing \
the same?</div><div>Warren: do you have any ideas what is happening here (Is this a \
DNSSEC April Fool?)</div><div><br></div><div>oh and I do like todays com.google \
:)<span><font color="#888888"><br clear="all"><div><br></div>-- <br><div>Brett</div> \
</font></span></div></div> \
<br></div></div>_______________________________________________<br> dns-operations \
mailing list<br> <a href="mailto:dns-operations@lists.dns-oarc.net" \
target="_blank">dns-operations@lists.dns-oarc.net</a><br> <a \
href="https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-jobs" \
target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br> \
dns-jobs</a> mailing list<br> <a \
href="https://lists.dns-oarc.net/mailman/listinfo/dns-jobs" \
target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dns-jobs</a><br></blockquote></div><br></div>
 </blockquote></div><br><br clear="all"><div><br></div></div></div><span><font \
color="#888888">-- <br><div>Brett</div> </font></span></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</blockquote></div>



_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic