Hi,
I reported an issue in Knot Resolver 6.20 that is causing some problems for me.
After a short outage of authoritative servers, the resolver returns SERVFAIL + EDE 22 (No Reachable Authority) and keeps this state for a few minutes even after connectivity is restored.
Also, after switching to TCP, it does not go back to UDP.
You can find the full description and steps to reproduce here:
→ https://gitlab.nic.cz/knot/knot-resolver/-/issues/949
Has anyone else seen this issue ?
Do you have any better workaround than clearing the cache ?
Hi,
I am trying to make a small tutorial for different resolvers on how to
check that the Root KSK is updated.
How can I check that for Knot resolver?
Kind regards from sunny Stockholm
Ulrich
Hi,
I am testing new version of knot-resolver - 6.2.0 and it seem that log-bogus option is not working.
When I set:
logging:
level: info
dnssec:
# Log DNSSEC failures
log-bogus: true
And issue query to www.dnssec-failed.org it does not log error.
On old recursor where I have 6.0.15 it does log:
Mar 16 14:37:02 resolver1 kresd[3453]: [dnssec] validation failure: dnssec-failed.org. DNSKEY
Is there somethink I missed? Or it is a bug?
If I get it, only thing changed should be this (in 6.0.17):
/logging/dnssec-bogus -> /dnssec/log-bogus
Regards,
Jiri Masek