RE: ISC BIND 9 breakage?

[Drew Weaver <drew.weaver () thenap com>]

Oh, yes. I am aware.

I am asking if anyone has any info as to why it just randomly stopped running perfectly normally at exactly 1PM EST?

Thanks,
-Drew


-----Original Message-----
From: Nick Hilliard <nick () foobar org> 
Sent: Wednesday, March 25, 2020 1:21 PM
To: Drew Weaver <drew.weaver () thenap com>
Cc: 'nanog () nanog org' <nanog () nanog org>
Subject: Re: ISC BIND 9 breakage?

The fix is either to remove "dnssec-lookaside auto;" from the config or else set "dnssec-lookaside no;" and then reload 
named.

Nick

Drew Weaver wrote on 25/03/2020 17:18:
> Did anyone else on CentOS 6 just have some DNS resolvers totally fall over?
>
> I noticed that this command: dnssec-lookaside auto; was causing the 
> issue. The issue occurred right at about 1PM EST.
>
> I see this note in the ISC key file..
>
> # ISC DLV: See https://www.isc.org/solutions/dlv for details.
>
>          #
>
>          # NOTE: The ISC DLV zone is being phased out as of February 
> 2017;
>
>          # the key will remain in place but the zone will be otherwise 
> empty.
>
>          # Configuring "dnssec-lookaside auto;" to activate this key 
> is
>
>          # harmless, but is no longer useful and is not recommended.
>
> It's not harmless anymore.