FYI: adobe.com GSLB DNS servers choking on "nsid"

[Mark Andrews]

We tried.

Its "we don't get enough complaints" so we won't actually ask our
nameserver vendor how to fix this despite us telling them that they
just need to add a CNAME record to the backend zone.

The load balancer has a front end that answers A and AAAA queries.
CNAME/TXT/SOA and "unsual" A and AAAA queries are passed to the
backend (a regular nameserver).  This backend is not configured
with a CNAME record for ardownload.wip4.adobe.com /
airdownload.wip4.adobe.com so it returns NXDOMAIN.

Adding CNAME records to the regular zone will fix some of the errors
with these nameservers.  There are other errors which require the
load balancer vendor to fix.

Mark

In message <54B50F21.6010704 at imperial.ac.uk>, Phil Mayers writes:
> Just to save anyone else the trouble, I've just found that some of the 
> GSLB names for *.adobe.com return NXDOMAIN with "nsid" options present:
> 
> # dig +norec +dnssec +nsid @193.104.215.247 ardownload.wip4.adobe.com
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50062
> 
> ...versus:
> 
> # dig +norec +dnssec @193.104.215.247 ardownload.wip4.adobe.com
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20650 > > ;; ANSWER SECTION: <etc. etc.>
> 
> I will make a (doubtless futile) effort to contact them, but if anyone 
> has a decent route in...
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>  from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org