Salut,

J'ai remarqué quelque chose de récurrent sur les NS  Américains chez Gandi .
Il y a très très souvent des timeout, parfois plusieur fois par jour,
j'utilise un resolveur local sans cache pour mon boulot donc je me rends
compte des DNS failure sur Firefox / Chrome.
J'aurai voulu savoir comment les contacter, je trouve ça vraiment dommage
d'avoir autant de problèmes ici. ( Je ne crois pas que ça soit le cas en
France / Europe. )

Un petit exemple des problèmes rencontrés ( j'utilise PowerDNS )

May 22 11:36:34 me pdns_recursor[5938]: 1 [7] question for 'jeuxonline.info.|
A' from 127.0.0.1
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Looking for
CNAME cache hit of 'jeuxonline.info.|CNAME'
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: No CNAME cache
hit of 'jeuxonline.info.|CNAME' found
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: No cache hit for
'jeuxonline.info.|A', trying to find an appropriate NS record
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Checking if we
have NS in cache for 'jeuxonline.info.'
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: NS (with ip, or
non-glue) in cache for 'jeuxonline.info.' -> 'a.dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: within
bailiwick: 0, not in cache / did not look at cache
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: NS (with ip, or
non-glue) in cache for 'jeuxonline.info.' -> 'b.dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: within
bailiwick: 0, not in cache / did not look at cache
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: NS (with ip, or
non-glue) in cache for 'jeuxonline.info.' -> 'c.dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: within
bailiwick: 0, not in cache / did not look at cache
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: We have NS in
cache for 'jeuxonline.info.' (flawedNSSet=0)
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Cache
consultations done, have 3 NS to contact
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Nameservers:
c.dns.gandi.net.(0ms), b.dns.gandi.net.(0ms), a.dns.gandi.net.(0ms)
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying to
resolve NS 'c.dns.gandi.net.' (1/3)
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Looking for
CNAME cache hit of 'c.dns.gandi.net.|CNAME'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: No CNAME cache
hit of 'c.dns.gandi.net.|CNAME' found
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: No cache hit
for 'c.dns.gandi.net.|A', trying to find an appropriate NS record
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Checking if we
have NS in cache for 'c.dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: no valid/
useful NS in cache for 'c.dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Checking if we
have NS in cache for 'dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: no valid/
useful NS in cache for 'dns.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Checking if we
have NS in cache for 'gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns0.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns1.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns2.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns3.gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: We have NS in
cache for 'gandi.net.' (flawedNSSet=0)
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Cache
consultations done, have 4 NS to contact
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Nameservers:
dns2.gandi.net.(0ms), dns3.gandi.net.(0ms), dns0.gandi.net.(0ms),
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.:
dns1.gandi.net.(0ms)
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Trying to
resolve NS 'dns2.gandi.net.' (1/4)
May 22 11:36:34 me pdns_recursor[5938]: [7]     dns2.gandi.net.: Looking for
CNAME cache hit of 'dns2.gandi.net.|CNAME'
May 22 11:36:34 me pdns_recursor[5938]: [7]     dns2.gandi.net.: No CNAME
cache hit of 'dns2.gandi.net.|CNAME' found
May 22 11:36:34 me pdns_recursor[5938]: [7]     dns2.gandi.net.: Found cache
hit for A: 217.70.183.211[ttl=86399]
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Resolved
'gandi.net.' NS dns2.gandi.net. to: 217.70.183.211
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Trying IP
217.70.183.211:53, asking 'c.dns.gandi.net.|A'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: Got 9 answers
from dns2.gandi.net. (217.70.183.211), rcode=0, in 119ms
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'c.dns.gandi.net.|A|217.70.182.20' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'gandi.net.|NS|dns1.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'gandi.net.|NS|dns0.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'gandi.net.|NS|dns2.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'gandi.net.|NS|dns3.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'dns0.gandi.net.|A|217.70.177.39' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'dns1.gandi.net.|A|217.70.177.45' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'dns2.gandi.net.|A|217.70.183.211' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: accept answer
'dns3.gandi.net.|A|217.70.179.36' from 'gandi.net.' nameservers? YES!
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: determining
status after receiving this packet
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: answer is in:
resolved to '217.70.182.20|A'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns1.gandi.net.', had 'gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns0.gandi.net.', had 'gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns2.gandi.net.', had 'gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns3.gandi.net.', had 'gandi.net.'
May 22 11:36:34 me pdns_recursor[5938]: [7]   c.dns.gandi.net.: status=got
results, this level of recursion done
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Resolved
'jeuxonline.info.' NS c.dns.gandi.net. to: 217.70.182.20
May 22 11:36:34 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying IP
217.70.182.20:53, asking 'jeuxonline.info.|A'
May 22 11:36:35 me pdns_recursor[5938]: [7] jeuxonline.info.: timeout
resolving
May 22 11:36:35 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying to
resolve NS 'b.dns.gandi.net.' (2/3)
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Looking for
CNAME cache hit of 'b.dns.gandi.net.|CNAME'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: No CNAME cache
hit of 'b.dns.gandi.net.|CNAME' found
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: No cache hit
for 'b.dns.gandi.net.|A', trying to find an appropriate NS record
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Checking if we
have NS in cache for 'b.dns.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: no valid/
useful NS in cache for 'b.dns.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Checking if we
have NS in cache for 'dns.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: no valid/
useful NS in cache for 'dns.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Checking if we
have NS in cache for 'gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns0.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns1.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns2.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: NS (with ip,
or non-glue) in cache for 'gandi.net.' -> 'dns3.gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: within
bailiwick: 1,  in cache, ttl=86399
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: We have NS in
cache for 'gandi.net.' (flawedNSSet=0)
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Cache
consultations done, have 4 NS to contact
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Nameservers:
dns0.gandi.net.(0ms), dns3.gandi.net.(0ms), dns2.gandi.net.(0ms),
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.:
dns1.gandi.net.(0ms)
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Trying to
resolve NS 'dns0.gandi.net.' (1/4)
May 22 11:36:35 me pdns_recursor[5938]: [7]     dns0.gandi.net.: Looking for
CNAME cache hit of 'dns0.gandi.net.|CNAME'
May 22 11:36:35 me pdns_recursor[5938]: [7]     dns0.gandi.net.: No CNAME
cache hit of 'dns0.gandi.net.|CNAME' found
May 22 11:36:35 me pdns_recursor[5938]: [7]     dns0.gandi.net.: Found cache
hit for A: 217.70.177.39[ttl=86399]
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Resolved
'gandi.net.' NS dns0.gandi.net. to: 217.70.177.39
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Trying IP
217.70.177.39:53, asking 'b.dns.gandi.net.|A'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: Got 9 answers
from dns0.gandi.net. (217.70.177.39), rcode=0, in 118ms
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'b.dns.gandi.net.|A|217.70.184.40' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'gandi.net.|NS|dns1.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'gandi.net.|NS|dns3.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'gandi.net.|NS|dns0.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'gandi.net.|NS|dns2.gandi.net.' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'dns0.gandi.net.|A|217.70.177.39' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'dns1.gandi.net.|A|217.70.177.45' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'dns2.gandi.net.|A|217.70.183.211' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: accept answer
'dns3.gandi.net.|A|217.70.179.36' from 'gandi.net.' nameservers? YES!
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: determining
status after receiving this packet
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: answer is in:
resolved to '217.70.184.40|A'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns1.gandi.net.', had 'gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns3.gandi.net.', had 'gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns0.gandi.net.', had 'gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: got upwards/
level NS record 'gandi.net.' -> 'dns2.gandi.net.', had 'gandi.net.'
May 22 11:36:35 me pdns_recursor[5938]: [7]   b.dns.gandi.net.: status=got
results, this level of recursion done
May 22 11:36:35 me pdns_recursor[5938]: [7] jeuxonline.info.: Resolved
'jeuxonline.info.' NS b.dns.gandi.net. to: 217.70.184.40
May 22 11:36:35 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying IP
217.70.184.40:53, asking 'jeuxonline.info.|A'
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: timeout
resolving
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying to
resolve NS 'a.dns.gandi.net.' (3/3)
May 22 11:36:37 me pdns_recursor[5938]: [7]   a.dns.gandi.net.: Looking for
CNAME cache hit of 'a.dns.gandi.net.|CNAME'
May 22 11:36:37 me pdns_recursor[5938]: [7]   a.dns.gandi.net.: No CNAME cache
hit of 'a.dns.gandi.net.|CNAME' found
May 22 11:36:37 me pdns_recursor[5938]: [7]   a.dns.gandi.net.: Found cache
hit for A: 173.246.97.2[ttl=86396]
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: Resolved
'jeuxonline.info.' NS a.dns.gandi.net. to: 173.246.97.2
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: Trying IP
173.246.97.2:53, asking 'jeuxonline.info.|A'
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: query throttled
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: Failed to
resolve via any of the 3 offered NS at level 'jeuxonline.info.'
May 22 11:36:37 me pdns_recursor[5938]: [7] jeuxonline.info.: failed (res=-1)
May 22 11:36:37 me pdns_recursor[5938]: 1 [7] answer to question
'jeuxonline.info.|A': 0 answers, 0 additional, took 4 packets, 1 throttled, 2
timeouts, 0 tcp connections, rcode=2

Et le traceroute habituel:

root@me:~# paris-traceroute -p icmp 217.70.184.40
traceroute [(192.168.0.206:33456) -> (217.70.184.40:33457)], protocol icmp,
algo hopbyhop, duration 2 s
 1  192.168.0.1 (192.168.0.1)  0.423 ms   0.354 ms   0.347 ms
 2  xxx
 3  te4-1.crt01.mtlcx03.fibrenoire.ca (68.67.63.213)  1.001 ms   0.911 ms
1.019 ms    MPLS Label 499 TTL=1
 4  ge-6-7.car1.Montreal2.Level3.net (4.59.177.41)  0.763 ms   0.822 ms
0.886 ms
 5  ae-5-5.ebr2.NewYork1.Level3.net (4.69.141.6)  8.336 ms !T2   8.373 ms !T2
8.515 ms !T2 MPLS Label 1134 TTL=1
 6  ae-62-62.csw1.NewYork1.Level3.net (4.69.148.34)  14.616 ms !T3   13.848
ms !T3   14.030 ms !T3    MPLS Label 1110 TTL=1
 7  ae-61-61.ebr1.NewYork1.Level3.net (4.69.134.65)  8.375 ms !T4   8.415 ms !
T4   8.336 ms !T4    MPLS Label 1493 TTL=1
 8  ae-2-2.ebr1.Newark1.Level3.net (4.69.132.98)  8.705 ms !T5   8.862 ms !T5
8.772 ms !T5    MPLS Label 1161 TTL=1
 9  ae-1-100.ebr2.Newark1.Level3.net (4.69.132.6)  9.116 ms !T6   8.812 ms !T6
8.742 ms !T6   MPLS Label 1402 TTL=1
10  ae-5-5.car1.Baltimore1.Level3.net (4.69.134.102)  12.473 ms   12.412 ms
12.368 ms
11  GANDI-SAS.car1.Baltimore1.Level3.net (4.59.244.66)  12.900 ms   12.758 ms
21.360 ms
12  4xe-pc400.vdist1-dc1.balt.gandi.net (173.246.96.34)  12.910 ms   12.973 ms
12.880 ms    MPLS Label 176 TTL=1
13  b.dns.gandi.net (217.70.184.40)  13.879 ms   14.038 ms   12.986 ms

---------------------------
Liste de diffusion du FRnOG
http://www.frnog.org/

Répondre à