Home / server / Questions / 1045551
In Process
11lll
Asked: 2020-12-10 02:58:40 +0800 CST

8.8.8.8 returns NXDOMAIN randomly for all our subdomains

  • 772

Our customers make quite a few domain checks towards Google public DNS with the following domains <userid>.sip.teltel.io, but they often fail. To others, like Cloudflare it is always successful.

When we run nslookup in a loop towards 8.8.8.8, about 80% of the time Google fails to resolve. To 1.1.1.1 it is always successful. See below a failed example:

Request:

while :
do
    nslookup 7157599388.sip.teltel.io 8.8.8.8
done

Response:

Server:     8.8.8.8
Address:    8.8.8.8#53

** server can't find 7157599388.sip.teltel.io: NXDOMAIN

Additionally, when doing a dig towards 8.8.8.8 sometimes it fails, sometimes not: enter image description here Does anyone have an idea why?

Thank you in advance!

domain-name-system google nslookup resolve dnscmd

1 Answers

  1. From a dig +trace 7157599388.sip.teltel.io query:

    teltel.io.      86400   IN  NS  dina.ns.cloudflare.com.
teltel.io.      86400   IN  NS  kanye.ns.cloudflare.com.


sip.teltel.io.      1800    IN  NS  ns1.teltel.io.
sip.teltel.io.      1800    IN  NS  ns2.teltel.io.


ns1.teltel.io.      1800    IN  A   3.9.142.25
ns2.teltel.io.      1800    IN  A   3.9.142.25

7157599388.sip.teltel.io. 300   IN  A   104.248.101.248

    We can see that the sip.teltel.io subdomain is delegated from the CloudFlare DNS servers to the ns1.teltel.io and ns2.teltel.io nameservers.

    For starters those two nameservers records both resolve to 3.9.142.25. When you don't have redundant DNS servers you might as well only use a single NS record and live with that single point of failure.

    Also the zone for the sip.teltel.io subdomain currently still does not contain any NS records and the query dig -t NS sip.teltel.io @ns1.teltel.io still fails. See Why do DNS zone files require NS records? and Clarification of why DNS zone files require NS records for more detailed reasoning of why that is bad.

    I don't know if either of those is the reason resolving fails intermittently though.

    • 3