4 ms·
Whatever is going on seems to be intermittent from querying my ISP's DNS. Successive queries using dig have given me: - No answer but no error for initial A r
by mariojv 4y ago
Whatever is going on seems to be intermittent from querying my ISP's DNS.
Successive queries using dig have given me:
- No answer but no error for initial A record query
- SERVFAIL for ANY record query
- Valid A record response for A record query, then no answer, then a response
- Query for ANY shows some DNSSEC related records, TXT, NS, but no A record
It's weird because I wouldn't think whatever caching my ISP is doing would refresh that fast. What is the evidence this is an attack vs. a misconfiguration?
Also, would an outage like this have any impact on US flights or flights in US airspace?
- AdamJacobMuller 4y agoKeep in mind when you query your ISPs DNS server you're probably hitting one of dozens (or more) actual servers semi-randomly. Some of them have the record cached, some don't.
- mariojv 4y agoThe response showed the same server for at least two of the responses I described, but that's a good point. The edge server may have been querying different servers with different cached values or uncached values.
- AdamJacobMuller 4y agoEven if you see the same response IP from your ISPs DNS server, you're still (almost definitely) hitting one of many load balanced (in some way) servers on your ISPs side.