Resolution of `supercore.s3.amazonaws.com.` fails with SERVFAIL
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 supercore.s3.amazonaws.com.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 39486
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; supercore.s3.amazonaws.com. IN A
;; Received 44 B
;; Time 2017-01-24 13:36:20 CET
;; From ::1@38267(UDP) in 580.0 ms
Clear cache log:
[ 0][plan] plan 'supercore.s3.amazonaws.com.' type 'A'
[48058][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[48058][resl] => using root hints
[13001][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13001][plan] plan '.' type 'DNSKEY'
[12426][iter] '.' type 'DNSKEY' id was assigned, parent id 13001
[12426][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[12426][iter] <= rcode: NOERROR
[12426][vldr] <= parent: updating DNSKEY
[12426][vldr] <= answer valid, OK
[12426][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19666][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19666][resl] => querying: '2001:dc3::35' score: 19 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[19666][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[19666][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[19666][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[19666][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[19666][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[19666][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[19666][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[19666][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[19666][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[19666][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[19666][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[19666][iter] <= referral response, follow
[19666][vldr] <= DS: OK
[19666][vldr] <= answer valid, OK
[19666][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19695][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19695][plan] plan 'com.' type 'DNSKEY'
[39453][iter] 'com.' type 'DNSKEY' id was assigned, parent id 19695
[39453][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'com.' type: 'DNSKEY' proto: 'udp'
[39453][iter] <= rcode: NOERROR
[39453][vldr] <= parent: updating DNSKEY
[39453][vldr] <= answer valid, OK
[39453][resl] <= server: '192.55.83.30' rtt: 35 ms
[ 5358][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5358][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'AmAzOnaWS.COM.' type: 'NS' proto: 'udp'
[ 5358][iter] <= using glue for 'u1.amazonaws.com.': '156.154.64.10'
[ 5358][iter] <= using glue for 'u2.amazonaws.com.': '156.154.65.10'
[ 5358][iter] <= using glue for 'r1.amazonaws.com.': '205.251.192.27'
[ 5358][iter] <= using glue for 'r2.amazonaws.com.': '205.251.195.199'
[ 5358][iter] <= referral response, follow
[ 5358][vldr] <= DS doesn't exist, going insecure
[ 5358][vldr] <= answer valid, OK
[ 5358][resl] <= server: '192.41.162.30' rtt: 115 ms
[17677][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[17677][resl] => querying: '156.154.65.10' score: 10 zone cut: 'amazonaws.com.' m12n: 's3.aMAZONAwS.Com.' type: 'NS' proto: 'udp'
[17677][iter] <= referral response, follow
[17677][resl] <= server: '156.154.65.10' rtt: 16 ms
[60967][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[60967][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'AAAA'
[ 9404][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 9404][resl] => using root hints
[27743][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[27743][resl] >< TA: '.'
[27743][plan] plan '.' type 'DNSKEY'
[38153][iter] '.' type 'DNSKEY' id was assigned, parent id 27743
[38153][ rc ] => satisfied from cache
[38153][iter] <= rcode: NOERROR
[38153][vldr] <= parent: updating DNSKEY
[38153][vldr] <= answer valid, OK
[43424][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[43424][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'UK.' type: 'NS' proto: 'udp'
[43424][iter] <= using glue for 'nsa.nic.uk.': '156.154.100.3'
[43424][iter] <= using glue for 'nsa.nic.uk.': '2001:502:ad09::3'
[43424][iter] <= using glue for 'nsb.nic.uk.': '156.154.101.3'
[43424][iter] <= using glue for 'nsc.nic.uk.': '156.154.102.3'
[43424][iter] <= using glue for 'nsd.nic.uk.': '156.154.103.3'
[43424][iter] <= using glue for 'dns1.nic.uk.': '213.248.216.1'
[43424][iter] <= using glue for 'dns1.nic.uk.': '2a01:618:400::1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '103.49.80.1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '2401:fd80:400::1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '213.248.220.1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '2a01:618:404::1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '43.230.48.1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '2401:fd80:404::1'
[43424][iter] <= referral response, follow
[43424][vldr] <= DS: OK
[43424][vldr] <= answer valid, OK
[43424][resl] <= server: '2001:500:9f::42' rtt: 2 ms
[32969][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32969][plan] plan 'uk.' type 'DNSKEY'
[11309][iter] 'uk.' type 'DNSKEY' id was assigned, parent id 32969
[11309][resl] => querying: '2401:fd80:404::1' score: 10 zone cut: 'uk.' m12n: 'uk.' type: 'DNSKEY' proto: 'udp'
[11309][iter] <= rcode: NOERROR
[11309][vldr] <= parent: updating DNSKEY
[11309][vldr] <= answer valid, OK
[11309][resl] <= server: '2401:fd80:404::1' rtt: 19 ms
[17293][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[17293][resl] => querying: '2a01:618:404::1' score: 10 zone cut: 'uk.' m12n: 'co.uK.' type: 'NS' proto: 'udp'
[17293][iter] <= rcode: NOERROR
[17293][iter] <= found cut, retrying with non-minimized name
[17293][resl] <= server: '2a01:618:404::1' rtt: 18 ms
[56151][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[56151][resl] => querying: '2401:fd80:400::1' score: 10 zone cut: 'uk.' m12n: 'Ns-1726.AWsDNs-23.Co.uK.' type: 'AAAA' proto: 'udp'
[56151][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[56151][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[56151][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[56151][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[56151][iter] <= referral response, follow
[56151][vldr] >< cut changed (new signer), needs revalidation
[56151][resl] <= server: '2401:fd80:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[23696][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][resl] => querying: '2a01:618:400::1' score: 10 zone cut: 'uk.' m12n: 'cO.uK.' type: 'DS' proto: 'udp'
[24246][iter] <= rcode: NOERROR
[24246][resl] <= server: '2a01:618:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[54876][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[54876][ rc ] => satisfied from cache
[54876][iter] <= rcode: NOERROR
[54876][vldr] <= cached insecure response, going insecure
[56151][resl] => resuming yielded answer
[32610][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32610][resl] => querying: '156.154.103.3' score: 10 zone cut: 'co.uk.' m12n: 'nS-1726.awsdnS-23.co.uk.' type: 'AAAA' proto: 'udp'
[32610][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[32610][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[32610][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[32610][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[32610][iter] <= referral response, follow
[32610][resl] <= server: '156.154.103.3' rtt: 21 ms
[ 7507][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 7507][resl] => querying: '205.251.199.27' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'ns-1726.AWSDns-23.CO.UK.' type: 'AAAA' proto: 'udp'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[ 7507][iter] <= rcode: NOERROR
[ 7507][resl] <= server: '205.251.199.27' rtt: 38 ms
[33647][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[33647][resl] => querying: '2600:9000:5306:be00::1' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'SuPErCore.S3.AMaZonAws.cOm.' type: 'A' proto: 'udp'
[33647][iter] <= rcode: REFUSED
[33647][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[ 1013][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 1013][resl] => querying: '2600:9000:5306:be00::1' score: 114 zone cut: 's3-1.amazonaws.com.' m12n: 'suPercORE.S3.AmAzOnAws.coM.' type: 'A' proto: 'udp'
[ 1013][iter] <= rcode: REFUSED
[ 1013][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[57855][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[57855][resl] => querying: '2600:9000:5306:be00::1' score: 164 zone cut: 's3-1.amazonaws.com.' m12n: 'supErcOre.s3.AmazoNaWS.coM.' type: 'A' proto: 'udp'
[57855][iter] <= rcode: REFUSED
[57855][resl] <= server: '2600:9000:5306:be00::1' rtt: 13 ms
[27306][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[27306][resl] => querying: '2600:9000:5306:be00::1' score: 188 zone cut: 's3-1.amazonaws.com.' m12n: 'SupeRcOre.s3.AmAzOnaWs.COM.' type: 'A' proto: 'udp'
[27306][iter] <= rcode: REFUSED
[27306][resl] => server: '2600:9000:5306:be00::1' flagged as 'bad'
[45229][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[45229][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'A'
[ 1731][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][resl] => querying: '2600:9000:5307:1b00::1' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'nS-1726.AWsdnS-23.cO.Uk.' type: 'A' proto: 'udp'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[49901][iter] <= rcode: NOERROR
[49901][resl] <= server: '2600:9000:5307:1b00::1' rtt: 15 ms
[ 5832][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5832][resl] => querying: '205.251.198.190' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'suPERcORE.s3.AmAzonAws.coM.' type: 'A' proto: 'udp'
[ 5832][iter] <= rcode: REFUSED
[ 5832][resl] <= server: '205.251.198.190' rtt: 32 ms
[61034][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[61034][resl] => querying: '205.251.198.190' score: 132 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPercorE.S3.AmAZOnAws.Com.' type: 'A' proto: 'udp'
[61034][iter] <= rcode: REFUSED
[61034][resl] <= server: '205.251.198.190' rtt: 31 ms
[59107][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[59107][resl] => querying: '205.251.198.190' score: 181 zone cut: 's3-1.amazonaws.com.' m12n: 'SUPERcoRe.s3.AMazonAWS.Com.' type: 'A' proto: 'udp'
[59107][iter] <= rcode: REFUSED
[59107][resl] <= server: '205.251.198.190' rtt: 37 ms
[46872][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[46872][resl] => querying: '205.251.198.190' score: 209 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPERCoRe.S3.amAZonaWs.coM.' type: 'A' proto: 'udp'
[46872][iter] <= rcode: REFUSED
[46872][resl] => server: '205.251.198.190' flagged as 'bad'
[13397][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13397][resl] => unresolvable NS address, bailing out
[13397][plan] plan 'ns-1084.awsdns-07.org.' type 'AAAA'
[18528][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[18528][resl] => using root hints
[ 4069][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[ 4069][resl] >< TA: '.'
[ 4069][plan] plan '.' type 'DNSKEY'
[59431][iter] '.' type 'DNSKEY' id was assigned, parent id 4069
[59431][ rc ] => satisfied from cache
[59431][iter] <= rcode: NOERROR
[59431][vldr] <= parent: updating DNSKEY
[59431][vldr] <= answer valid, OK
[51048][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[51048][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'oRg.' type: 'NS' proto: 'udp'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '199.19.56.1'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '2001:500:e::1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '199.249.112.1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '2001:500:40::1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '199.19.54.1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '2001:500:c::1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '199.249.120.1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '2001:500:48::1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '199.19.53.1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '2001:500:b::1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '199.19.57.1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '2001:500:f::1'
[51048][iter] <= referral response, follow
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B