Recursive DNS in AMS returning SERVFAIL for some zones

时间线

1. 已解决2025年7月28日 04:13 UTC

   Both resolvers in AMS have answered every query cleanly for 8 minutes. Duration: 29 minutes.

2. 观察中2025年7月28日 04:05 UTC

   The anchor has been restored from the signed root and the resolver is back in rotation. Watching query error rates.

3. 已确定原因2025年7月28日 03:54 UTC

   One of the two resolvers has a corrupted DNSSEC trust anchor after an automatic update. We have taken it out of rotation; the second resolver is handling all queries.

4. 调查中2025年7月28日 03:49 UTC

   The recursive resolvers we provide to machines in AMS are returning SERVFAIL for a subset of zones since 03:44 UTC. Machines configured with their own resolvers are not affected.