[DBWG] rdap.afrinic.net connectivity issues

[David Njuki]

Good Day Mark,

I can confirm that it is unrelated. I am also currently unable to reproduce the error from some of my tests. 

From what I know, DNSVIZ provides results from a single vantage point. I’ll reach out to them for traces so that we can narrow down exactly where the issue is. 

Regards,
David 

> On 13 Oct 2023, at 18:25, Mark Elkins <mark at posix.co.za> wrote:
> 
> Don't know if this is the same thing but...
> 
> https://dnsviz.net/d/alt.za/dnssec/  is reporting DNS errors at 196.216.168.21 / ns-za.afrinic.net.
> 
> alt.za zone: The server(s) were not responsive to queries over UDP. (196.216.168.21)
> alt.za/A: No response was received from the server over UDP (tried 12 times). (196.216.168.21, UDP_-_NOEDNS_)
> alt.za/NS: No response was received from the server over UDP (tried 12 times). (196.216.168.21, UDP_-_NOEDNS_)
> UDP packets are being blocked or similar....
> 
> On 2023/10/13 15:08, David Njuki wrote:
>> Hi Job,
>> 
>> Thanks for alerting us about this. 
>> 
>> We’ve isolated and removed from DNS the unresponsive backend servers so as to further investigate the issue. 
>> 
>> Regards,
>> David 
>> 
>>> On 13 Oct 2023, at 15:47, Job Snijders via DBWG <dbwg at afrinic.net> <mailto:dbwg at afrinic.net> wrote:
>>> 
>>> Dear group,
>>> 
>>> I'm seeing high error-rates for RDAP queries. Upon inspection, it turns
>>> out some of the backend servers resolved via 'rdap.afrinic.net' are not
>>> reachable:
>>> 
>>> 	196.192.115.23 (port 443 unreachable)
>>> 	2001:42d0:2:601:0:0:0:23 (port 443 unreachable)
>>> 	196.192.124.137 (certificate expired)
>>> 
>>> See https://www.ssllabs.com/ssltest/analyze.html?d=rdap.afrinic.net
>>> to test & for more information.
>>> 
>>> I'd recommend to either remove the problematic IPs from the round-robin
>>> DNS, or resolve the underlaying issue. Thank you
>>> 
>>> Kind regards,
>>> 
>>> Job
>>> 
>>> _______________________________________________
>>> DBWG mailing list
>>> DBWG at afrinic.net <mailto:DBWG at afrinic.net>
>>> https://lists.afrinic.net/mailman/listinfo/dbwg
>> 
>> _______________________________________________
>> DBWG mailing list
>> DBWG at afrinic.net <mailto:DBWG at afrinic.net>
>> https://lists.afrinic.net/mailman/listinfo/dbwg
> -- 
> Mark James ELKINS  -  Posix Systems - (South) Africa
> mje at posix.co.za <mailto:mje at posix.co.za>       Tel: +27.826010496 <tel:+27826010496>
> For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za <https://ftth.posix.co.za/>
> 
> <abessive_logo.jpg><QR-MJElkins.png>
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/dbwg/attachments/20231016/f2556e34/attachment.html>