Skip to content

Instantly share code, notes, and snippets.

@jamesarosen
Created August 24, 2012 19:25
Show Gist options
  • Select an option

  • Save jamesarosen/3454730 to your computer and use it in GitHub Desktop.

Select an option

Save jamesarosen/3454730 to your computer and use it in GitHub Desktop.
int.tangocard.com DNS problems
# from our office
$ dig int.tangocard.com
; <<>> DiG 9.7.3-P3 <<>> int.tangocard.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14686
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 13, ADDITIONAL: 7
;; QUESTION SECTION:
;int.tangocard.com. IN A
;; ANSWER SECTION:
int.tangocard.com. 29120 IN CNAME integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com.
integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com. 60 IN A 107.22.197.157
integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com. 60 IN A 174.129.208.83
;; AUTHORITY SECTION:
com. 162322 IN NS a.gtld-servers.net.
com. 162322 IN NS k.gtld-servers.net.
com. 162322 IN NS j.gtld-servers.net.
com. 162322 IN NS d.gtld-servers.net.
com. 162322 IN NS l.gtld-servers.net.
com. 162322 IN NS c.gtld-servers.net.
com. 162322 IN NS m.gtld-servers.net.
com. 162322 IN NS i.gtld-servers.net.
com. 162322 IN NS e.gtld-servers.net.
com. 162322 IN NS b.gtld-servers.net.
com. 162322 IN NS h.gtld-servers.net.
com. 162322 IN NS g.gtld-servers.net.
com. 162322 IN NS f.gtld-servers.net.
;; ADDITIONAL SECTION:
a.gtld-servers.net. 73833 IN A 192.5.6.30
a.gtld-servers.net. 73833 IN AAAA 2001:503:a83e::2:30
b.gtld-servers.net. 73833 IN A 192.33.14.30
b.gtld-servers.net. 73832 IN AAAA 2001:503:231d::2:30
c.gtld-servers.net. 73833 IN A 192.26.92.30
d.gtld-servers.net. 73833 IN A 192.31.80.30
e.gtld-servers.net. 73833 IN A 192.12.94.30
;; Query time: 165 msec
;; SERVER: 10.10.1.10#53(10.10.1.10)
;; WHEN: Fri Aug 24 12:23:25 2012
;; MSG SIZE rcvd: 497
# from one of our data centers:
$ dig int.tangocard.com
; <<>> DiG 9.7.0-P1 <<>> int.tangocard.com
;; global options: +cmd
;; connection timed out; no servers could be reached
# from our office:
$ traceroute int.tangocard.com
traceroute: Warning: int.tangocard.com has multiple addresses; using 107.22.197.157
traceroute to integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com (107.22.197.157), 64 hops max, 52 byte packets
1 10.10.3.1 (10.10.3.1) 2.862 ms 3.257 ms 2.914 ms
2 terminator.sf.zendesk.com (10.10.1.1) 0.409 ms 0.359 ms 0.321 ms
3 207.239.82.217 (207.239.82.217) 3.222 ms 3.522 ms 3.246 ms
4 vb1500.rar3.sanjose-ca.us.xo.net (216.156.0.137) 9.876 ms 12.396 ms 12.137 ms
5 * 207.88.13.234.ptr.us.xo.net (207.88.13.234) 3.555 ms 3.684 ms
6 pax-brdr-01.inet.qwest.net (63.146.26.25) 4.229 ms 3.671 ms 3.549 ms
7 dca2-edge-01.inet.qwest.net (67.14.28.110) 78.651 ms 78.239 ms *
8 65.120.78.82 (65.120.78.82) 77.696 ms 78.505 ms 78.658 ms
9 72.21.220.121 (72.21.220.121) 78.748 ms
72.21.220.127 (72.21.220.127) 79.237 ms 78.988 ms
10 72.21.222.139 (72.21.222.139) 79.234 ms
72.21.222.143 (72.21.222.143) 80.653 ms
72.21.222.147 (72.21.222.147) 78.646 ms
11 216.182.232.53 (216.182.232.53) 87.945 ms
216.182.224.15 (216.182.224.15) 80.580 ms
216.182.224.87 (216.182.224.87) 81.040 ms
12 * * *
# from the same data center:
$ traceroute int.tangocard.com
int.tangocard.com: Name or service not known
Cannot handle "host" cmdline arg `int.tangocard.com' on position 1 (argc 1)
@mfischer-zd

Copy link
Copy Markdown

ns query

From one of our dnscache servers in production:

[xxx@xxx]:~ $ dig ns tangocard.com

; <<>> DiG 9.7.0-P1 <<>> ns tangocard.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39851
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;tangocard.com.         IN  NS

;; ANSWER SECTION:
tangocard.com.      164399  IN  NS  ns1.mediatemple.net.
tangocard.com.      164399  IN  NS  ns2.mediatemple.net.

;; Query time: 1 msec
;; SERVER: 192.168.100.5#53(192.168.100.5)
;; WHEN: Fri Aug 24 19:52:16 2012
;; MSG SIZE  rcvd: 82

Periodic failure of A query from authoritative NS

[xxx@xxx]:~ $ dig @ns2.mediatemple.net a int.tangocard.com
; <<>> DiG 9.7.0-P1 <<>> @ns2.mediatemple.net a int.tangocard.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

When it works, there's an improper SERVFAIL in the response

[xxx@xxx]:~ $ dig @ns1.mediatemple.net a int.tangocard.com

; <<>> DiG 9.7.0-P1 <<>> @ns1.mediatemple.net a int.tangocard.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 11075
;; flags: qr rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;int.tangocard.com.     IN  A

;; ANSWER SECTION:
int.tangocard.com.  43200   IN  CNAME   integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com.

;; Query time: 63 msec
;; SERVER: 64.207.128.246#53(64.207.128.246)
;; WHEN: Fri Aug 24 19:55:31 2012
;; MSG SIZE  rcvd: 105
[xxx@xxx]:~ $ dig @ns2.mediatemple.net a int.tangocard.com

; <<>> DiG 9.7.0-P1 <<>> @ns2.mediatemple.net a int.tangocard.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 59967
;; flags: qr rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;int.tangocard.com.     IN  A

;; ANSWER SECTION:
int.tangocard.com.  43200   IN  CNAME   integration-bing-asg-1991144818.us-east-1.elb.amazonaws.com.

;; Query time: 33 msec
;; SERVER: 70.32.65.137#53(70.32.65.137)
;; WHEN: Fri Aug 24 19:55:06 2012
;; MSG SIZE  rcvd: 105

@mfischer-zd

Copy link
Copy Markdown

Correct behavior for CNAME answer

[xxx@xxx]:~ (master) $ dig ns zendesk.com

; <<>> DiG 9.7.3-P3 <<>> ns zendesk.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39786
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:
;zendesk.com. IN NS

;; ANSWER SECTION:
zendesk.com. 83768 IN NS ns3.p08.dynect.net.
zendesk.com. 83768 IN NS ns2.p08.dynect.net.
zendesk.com. 83768 IN NS ns4.p08.dynect.net.
zendesk.com. 83768 IN NS ns1.p08.dynect.net.

;; ADDITIONAL SECTION:
ns1.p08.dynect.net. 90504 IN A 208.78.70.8
ns2.p08.dynect.net. 90504 IN A 204.13.250.8
ns3.p08.dynect.net. 90504 IN A 208.78.71.8
ns4.p08.dynect.net. 90504 IN A 204.13.251.8

;; Query time: 0 msec
;; SERVER: 10.10.1.10#53(10.10.1.10)
;; WHEN: Fri Aug 24 13:13:00 2012
;; MSG SIZE rcvd: 179

[xxx@xxx]:~ (master) $ dig @ns1.p08.dynect.net a webmail.zendesk.com

; <<>> DiG 9.7.3-P3 <<>> @ns1.p08.dynect.net a webmail.zendesk.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 600
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;webmail.zendesk.com. IN A

;; ANSWER SECTION:
webmail.zendesk.com. 3600 IN CNAME ghs.google.com.

;; AUTHORITY SECTION:
. 518400 IN NS G.ROOT-SERVERS.NET.
. 518400 IN NS M.ROOT-SERVERS.NET.
. 518400 IN NS E.ROOT-SERVERS.NET.
. 518400 IN NS I.ROOT-SERVERS.NET.
. 518400 IN NS B.ROOT-SERVERS.NET.
. 518400 IN NS K.ROOT-SERVERS.NET.
. 518400 IN NS H.ROOT-SERVERS.NET.
. 518400 IN NS A.ROOT-SERVERS.NET.
. 518400 IN NS C.ROOT-SERVERS.NET.
. 518400 IN NS L.ROOT-SERVERS.NET.
. 518400 IN NS D.ROOT-SERVERS.NET.
. 518400 IN NS F.ROOT-SERVERS.NET.
. 518400 IN NS J.ROOT-SERVERS.NET.

;; Query time: 5 msec
;; SERVER: 208.78.70.8#53(208.78.70.8)
;; WHEN: Fri Aug 24 13:13:09 2012
;; MSG SIZE rcvd: 273

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment