Oh, yes. I am aware. I am asking if anyone has any info as to why it just randomly stopped running perfectly normally at exactly 1PM EST?
Thanks, -Drew -----Original Message----- From: Nick Hilliard <n...@foobar.org> Sent: Wednesday, March 25, 2020 1:21 PM To: Drew Weaver <drew.wea...@thenap.com> Cc: 'nanog@nanog.org' <nanog@nanog.org> Subject: Re: ISC BIND 9 breakage? The fix is either to remove "dnssec-lookaside auto;" from the config or else set "dnssec-lookaside no;" and then reload named. Nick Drew Weaver wrote on 25/03/2020 17:18: > Did anyone else on CentOS 6 just have some DNS resolvers totally fall over? > > I noticed that this command: dnssec-lookaside auto; was causing the > issue. The issue occurred right at about 1PM EST. > > I see this note in the ISC key file.. > > # ISC DLV: See https://www.isc.org/solutions/dlv for details. > > # > > # NOTE: The ISC DLV zone is being phased out as of February > 2017; > > # the key will remain in place but the zone will be otherwise > empty. > > # Configuring "dnssec-lookaside auto;" to activate this key > is > > # harmless, but is no longer useful and is not recommended. > > It's not harmless anymore. >
