Resolution of `p7677.cdngc.net.` fails with SERVFAIL
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 54558
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; Received 44 B
;; Time 2017-01-24 13:45:33 CET
;; From ::1@38267(UDP) in 687.3 ms
vs
$ dig +dnssec +multi +time=60 +retry=1 @8.8.8.8 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 20458
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; AUTHORITY SECTION:
cdngc.net. 119 IN SOA ns1.cdngc.net. noc.pantherexpress.net. (
2016021700 ; serial
1200 ; refresh
120 ; retry
86400 ; expire
120 ; minimum
)
;; Received 103 B
;; Time 2017-01-24 13:46:05 CET
;; From 8.8.8.8@53(UDP) in 28.8 ms
clear cache log:
[ 0][plan] plan 'p7677.cdngc.net.' type 'A'
[52139][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[52139][resl] => using root hints
[21123][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[21123][plan] plan '.' type 'DNSKEY'
[63279][iter] '.' type 'DNSKEY' id was assigned, parent id 21123
[63279][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[63279][iter] <= rcode: NOERROR
[63279][vldr] <= parent: updating DNSKEY
[63279][vldr] <= answer valid, OK
[63279][resl] <= server: '2001:dc3::35' rtt: 18 ms
[59716][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[59716][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'net.' type: 'NS' proto: 'udp'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[59716][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[59716][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[59716][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[59716][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[59716][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[59716][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[59716][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[59716][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[59716][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[59716][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[59716][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[59716][iter] <= referral response, follow
[59716][vldr] <= DS: OK
[59716][vldr] <= answer valid, OK
[59716][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[12204][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[12204][plan] plan 'net.' type 'DNSKEY'
[43582][iter] 'net.' type 'DNSKEY' id was assigned, parent id 12204
[43582][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'nET.' type: 'DNSKEY' proto: 'udp'
[43582][iter] <= rcode: NOERROR
[43582][vldr] <= parent: updating DNSKEY
[43582][vldr] <= answer valid, OK
[43582][resl] <= server: '192.55.83.30' rtt: 34 ms
[38328][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38328][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'cdngC.Net.' type: 'NS' proto: 'udp'
[38328][iter] <= referral response, follow
[38328][vldr] <= DS doesn't exist, going insecure
[38328][vldr] <= answer valid, OK
[38328][resl] <= server: '192.41.162.30' rtt: 113 ms
[57075][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[57075][plan] plan 'ns4.panthercdn.com.' type 'AAAA'
[46349][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[46349][resl] => using root hints
[42721][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[42721][resl] >< TA: '.'
[42721][plan] plan '.' type 'DNSKEY'
[54368][iter] '.' type 'DNSKEY' id was assigned, parent id 42721
[54368][ rc ] => satisfied from cache
[54368][iter] <= rcode: NOERROR
[54368][vldr] <= parent: updating DNSKEY
[54368][vldr] <= answer valid, OK
[61820][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[61820][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'CoM.' type: 'NS' proto: 'udp'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[61820][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[61820][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[61820][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[61820][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[61820][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[61820][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[61820][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[61820][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[61820][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[61820][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[61820][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[61820][iter] <= referral response, follow
[61820][vldr] <= DS: OK
[61820][vldr] <= answer valid, OK
[61820][resl] <= server: '2001:7fd::1' rtt: 2 ms
[43817][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[43817][plan] plan 'com.' type 'DNSKEY'
[57985][iter] 'com.' type 'DNSKEY' id was assigned, parent id 43817
[57985][resl] => querying: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][resl] => querying: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][iter] <= rcode: NOERROR
[57985][vldr] <= parent: updating DNSKEY
[57985][vldr] <= answer valid, OK
[57985][resl] <= server: '192.52.178.30' rtt: 267 ms
[57985][resl] <= server: '192.48.79.30' rtt: >=17 ms
[48815][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[48815][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'PANTheRCDn.cOM.' type: 'NS' proto: 'udp'
[48815][iter] <= using glue for 'ns3.panthercdn.com.': '174.35.89.33'
[48815][iter] <= using glue for 'ns4.panthercdn.com.': '174.35.49.33'
[48815][iter] <= referral response, follow
[48815][vldr] <= DS doesn't exist, going insecure
[48815][vldr] <= parent: updating DS
[48815][vldr] <= answer valid, OK
[48815][resl] <= server: '192.55.83.30' rtt: 34 ms
[26282][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[26282][resl] => querying: '174.35.49.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'Ns4.PANtheRCDn.COm.' type: 'AAAA' proto: 'udp'
[26282][iter] <= rcode: NOERROR
[26282][ pc ] => answer cached for TTL=5
[26282][resl] <= server: '174.35.49.33' rtt: 21 ms
[49339][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[49339][plan] plan 'ns4.panthercdn.com.' type 'A'
[51066][iter] 'ns4.panthercdn.com.' type 'A' id was assigned, parent id 49339
[51066][ rc ] => satisfied from cache
[51066][iter] <= rcode: NOERROR
[51066][vldr] <= cached insecure response, going insecure
[24570][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24570][resl] => querying: '174.35.49.33' score: 21 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgc.net.' type: 'A' proto: 'udp'
[24570][iter] <= rcode: REFUSED
[24570][resl] <= server: '174.35.49.33' rtt: 21 ms
[ 9998][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[ 9998][resl] => querying: '174.35.49.33' score: 121 zone cut: 'cdngc.net.' m12n: 'P7677.CDngC.NEt.' type: 'A' proto: 'udp'
[ 9998][iter] <= rcode: REFUSED
[ 9998][resl] <= server: '174.35.49.33' rtt: 21 ms
[40285][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[40285][resl] => querying: '174.35.49.33' score: 171 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgC.neT.' type: 'A' proto: 'udp'
[40285][iter] <= rcode: REFUSED
[40285][resl] <= server: '174.35.49.33' rtt: 20 ms
[56211][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[56211][resl] => querying: '174.35.49.33' score: 195 zone cut: 'cdngc.net.' m12n: 'P7677.CdNGc.NEt.' type: 'A' proto: 'udp'
[56211][iter] <= rcode: REFUSED
[56211][resl] => server: '174.35.49.33' flagged as 'bad'
[23576][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[23576][resl] => unresolvable NS address, bailing out
[23576][plan] plan 'ns3.panthercdn.com.' type 'AAAA'
[29290][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][resl] => querying: '174.35.89.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'nS3.PaNtherCdn.Com.' type: 'AAAA' proto: 'udp'
[48411][iter] <= rcode: NOERROR
[48411][ pc ] => answer cached for TTL=5
[48411][resl] <= server: '174.35.89.33' rtt: 21 ms
[38390][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38390][plan] plan 'ns3.panthercdn.com.' type 'A'
[19349][iter] 'ns3.panthercdn.com.' type 'A' id was assigned, parent id 38390
[19349][ rc ] => satisfied from cache
[19349][iter] <= rcode: NOERROR
[19349][vldr] <= cached insecure response, going insecure
[24405][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24405][resl] => querying: '174.35.89.33' score: 21 zone cut: 'cdngc.net.' m12n: 'p7677.CDnGC.neT.' type: 'A' proto: 'udp'
[24405][iter] <= rcode: REFUSED
[24405][resl] <= server: '174.35.89.33' rtt: 21 ms
[42424][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[42424][resl] => querying: '174.35.89.33' score: 121 zone cut: 'cdngc.net.' m12n: 'p7677.CdNgc.net.' type: 'A' proto: 'udp'
[42424][iter] <= rcode: REFUSED
[42424][resl] <= server: '174.35.89.33' rtt: 20 ms
[33417][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[33417][resl] => querying: '174.35.89.33' score: 170 zone cut: 'cdngc.net.' m12n: 'p7677.CdNGc.net.' type: 'A' proto: 'udp'
[33417][iter] <= rcode: REFUSED
[33417][resl] <= server: '174.35.89.33' rtt: 21 ms
[53032][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[53032][resl] => querying: '174.35.89.33' score: 195 zone cut: 'cdngc.net.' m12n: 'p7677.CDNgC.NeT.' type: 'A' proto: 'udp'
[53032][iter] <= rcode: REFUSED
[53032][resl] => server: '174.35.89.33' flagged as 'bad'
[11267][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[11267][resl] => unresolvable NS address, bailing out
[11267][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B