[sf-lug] Notice: ns1.svlug.org downtime, DNS secondary

[Al]

Hmm, yes, forgot about those.

Probably no one uses those aliases for sf-lug but hey, when you're 
right, you're right.
the glue records are history.


On 11/13/2021 12:16, Michael Paoli wrote:
> http://linuxmafia.com/pipermail/sf-lug/2021q4/015438.html
>
>> From: Al <awsflug at sunnyside.com>
>> Date: Sat Nov 13 08:59:37 PST 2021
>>
>> I don't think I'm directly affected by svlug being down since I don't
>> AXFR from ns1.svlug, and I don't originate any records that define svlug
>> to be a domain server, but good to know what's going on.
>
> Al,
>
> SF-LUG's non-canonical names have NS delegating authority records
> that include ns1.svlug.org.  Perhaps not critical, but would be
> best to remove those records for now - would reduce DNS latency and
> possibly other issues, e.g. lame response before ns1.svlug.org. is
> slave/secondary again but after it's again a DNS server on The Internet.
>
> Those records would be controlled via the registrar, I believe Go Daddy
> in this case, where I believe you have access and I don't.
> Notably these domains:
> sf-lug.com.
> sflug.org.
> sflug.com.
> sflug.net.
> sf-lug.net.
>
> echo 'sf-lug.com.
> sflug.org.
> sflug.com.
> sflug.net.
> sf-lug.net.' | (
>   IFS_=".$IFS";
>   while IFS="$IFS_" read subdomain TLD
>   do
>     Authority_NS="$(dig +short "$TLD". NS | head -n 1)"
>     Authority_NS_IP="$(dig +short "$Authority_NS" A "$Authority_NS" 
> AAAA | head -n 1)"
>     dig @"$Authority_NS_IP" +noall +authority +norecurse 
> "$subdomain.$TLD." | fgrep -i svlug &&
>     whois "$subdomain.$TLD" | sed -e '/^ *Registrar: /!d;s/^ *//;p' | 
> sort -u
>   done
> )
>
> sf-lug.com.             172800  IN      NS      ns1.svlug.org.
> Registrar: Wild West Domains, LLC
> sflug.org.              86400   IN      NS      ns1.svlug.org.
> Registrar: GoDaddy.com, LLC
> sflug.com.              172800  IN      NS      ns1.svlug.org.
> Registrar: GoDaddy.com, LLC
> sflug.net.              172800  IN      NS      ns1.svlug.org.
> Registrar: GoDaddy.com, LLC
> sf-lug.net.             172800  IN      NS      ns1.svlug.org.
> Registrar: GoDaddy.com, LLC
>
> Al - myself, you, and Jim* have access to sf-lug.org. at the registrar.
> * though Jim Stockford's access is a bit limited to avoid possibly
>   irreversable booboos - e.g. can change DNS, but can't transfer away
>   the domain or change its contacts.
>
>> I wasn't monitoring ping status for svlug but I've added it to the
>> list.  Historically I monitor balug and linuxmafia.  (linuxmafia stays
>> up just all the time! :) )
>
> Alas, Comcast Business isn't nearly as rock solid as Raw Bandwidth was.
> I typically get as much outage in 3 months from Comcast Business,
> typically an outage of about 3 hours once a month, plus some quite brief
> outages on a more frequent basis, than I got from Raw Bandwidth in 13
> years - about one outage of about 8 hours, and very rarely any other
> outages, and those others quite rare, generally very short, typically
> well under 15 minutes.
> E.g. latest:
> 2021-11-09
> ISP: Comcast Business Outage, starting around:
> PING: ping 8.8.8.8 FAILED 2021-11-09T05:44:38+00:00
> ...
> connectivity back starting around:
> 2021-11-09T08:35:58+00:00
>
>> I check BIND status every 10 minutes but haven't seen any transfers
>> hung, because of course I'm not transferring from svlug.
>> On my 10 minute checks I haven't been comparing the contents looking for
>> change in zones I was seconding but, since that's a normal function I do
>> for internal zones, it was easy to add that; because I hadn't been
>> checking I didn't see the list of name servers change. Next time I will.
>
> Well, there's lots in/with DNS that can be checked, including,
> e.g. data consistency (like do NS authority and authoritative records
> match) and RFC compliance, much etc.
>
> http://linuxmafia.com/pipermail/sf-lug/2021q4/015437.html
>> On 11/13/2021 01:30, Michael Paoli wrote:
>> >
>> > And delegating authority records ...
>> > removed from:
>> > balug.org.
>> > sf-lug.org.
>> > berkeleylug.com.
>> > e.9.1.0.5.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa.
>> >
>> > And Al, I presume you will likewise handle the needed for:
>> > sf-lug.com.
>> > sflug.org.
>> > sflug.com.
>> > sflug.net.
>> > sf-lug.net.
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/sf-lug/attachments/20211113/2903ac94/attachment.html>