<div dir="auto">DNSViz is usually the go-to tool when trouble shooting is-it-me-or-is-it-them DNSSEC issues, but it’s thorough enough to help for a lot more general problems too.</div><div dir="auto"><br></div><div dir="auto">Someone else has been using it to check that name,</div><div dir="auto"><br></div><div><a href="https://dnsviz.net/d/www.ecb.europa.eu/dnssec/">https://dnsviz.net/d/www.ecb.europa.eu/dnssec/</a></div><div dir="auto"><br></div><div dir="auto">The only thing that pops up that might hint at your problem are a couple of unresponsive servers in the mix. Questionable that it’s really a cause to your problem.</div><div dir="auto"><br></div><div dir="auto">A note about the “dig +trace” below. They’re pretty and all, but really aren’t a good representation of what your resolver really does. In your case for example, it quits when it gets the CNAME. It doesn’t follow through to get the A record it points to. Problems with QNAME minimization, “bad” data in the cache, and other things won’t show up in a +trace.</div><div dir="auto"><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 17, 2022 at 4:05 AM Matus UHLAR - fantomas <<a href="mailto:uhlar@fantomas.sk">uhlar@fantomas.sk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(204,204,204)">Hello,<br>
<br>
I encountered case where resolution of <a href="http://www.ecb.europa.eu" rel="noreferrer" target="_blank">www.ecb.europa.eu</a> takes long time and <br>
I can't find out why.<br>
<br>
I'm trying to find the culprit using dig +trace and resolution times change <br>
from < 1 second to > 15 seconds, while response times reported by dig say <br>
miliseconds.<br>
<br>
multiple runs of dig seem to fix the issue until I clear named cache.<br>
(which indicated problem is in DNS, but I still have no idea where)<br>
<br>
I'm out od ideas what to search for.<br>
<br>
I have debian 11 with bind version 1:9.16.27-1~deb11u1<br>
<br>
an example dig that took 5 seconds pasted:<br>
<br>
# time dig +trace <a href="http://www.ecb.europa.eu" rel="noreferrer" target="_blank">www.ecb.europa.eu</a><br>
<br>
; <<>> DiG 9.16.27-Debian <<>> +trace <a href="http://www.ecb.europa.eu" rel="noreferrer" target="_blank">www.ecb.europa.eu</a><br>
;; global options: +cmd<br>
. 194472 IN NS <a href="http://m.root-servers.net" rel="noreferrer" target="_blank">m.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://k.root-servers.net" rel="noreferrer" target="_blank">k.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://f.root-servers.net" rel="noreferrer" target="_blank">f.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://g.root-servers.net" rel="noreferrer" target="_blank">g.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://h.root-servers.net" rel="noreferrer" target="_blank">h.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://d.root-servers.net" rel="noreferrer" target="_blank">d.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://b.root-servers.net" rel="noreferrer" target="_blank">b.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://c.root-servers.net" rel="noreferrer" target="_blank">c.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://l.root-servers.net" rel="noreferrer" target="_blank">l.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://e.root-servers.net" rel="noreferrer" target="_blank">e.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://j.root-servers.net" rel="noreferrer" target="_blank">j.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://a.root-servers.net" rel="noreferrer" target="_blank">a.root-servers.net</a>.<br>
. 194472 IN NS <a href="http://i.root-servers.net" rel="noreferrer" target="_blank">i.root-servers.net</a>.<br>
. 194472 IN RRSIG NS 8 0 518400 20220626050000 20220613040000 47671 . iUnxO5EIpOY35jg5SR2+ZW9mYcieUMFZn2JwNHpEPW/YxGfXh+XjLXpC n+ByMYEB2L1b1zzcx86wnyKxnuhU8O/EH63w13op+lo+MxVOJlFOribp 6jV2BZn+fHCJDE/5VHtSGYI741Uf1aUudjrX7htYVngg7Z1eTI0PinGN Z46j/xRcwk5KlHKExmgQSlS1FrLT0yiBeT6Tg48guYfYKbpDNIcy3vS4 7BIv7U0jDmynl8cOYlfgDH2Nft6Vw3vrrVjMFkyWsIdFCsfejrff8UqR JhuE47lm0JdhV7z+3NfoJRANaRjAfD0ufB1chXuFQpsuquAZ907fh+e3 +Ny+kg==<br>
;; Received 1137 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms<br>
<br>
eu. 172800 IN NS <a href="http://x.dns.eu" rel="noreferrer" target="_blank">x.dns.eu</a>.<br>
eu. 172800 IN NS <a href="http://si.dns.eu" rel="noreferrer" target="_blank">si.dns.eu</a>.<br>
eu. 172800 IN NS <a href="http://be.dns.eu" rel="noreferrer" target="_blank">be.dns.eu</a>.<br>
eu. 172800 IN NS <a href="http://w.dns.eu" rel="noreferrer" target="_blank">w.dns.eu</a>.<br>
eu. 172800 IN NS <a href="http://y.dns.eu" rel="noreferrer" target="_blank">y.dns.eu</a>.<br>
eu. 86400 IN DS 59479 8 2 5DBAA81BC0BEFE921886D8DA28498D9FD441B457FB0E3642A0B2F981 1C8E15E0<br>
eu. 86400 IN RRSIG DS 8 1 86400 20220630050000 20220617040000 47671 . ng+6lWObqlR9d72YQ+i4K5NGoIqgUfgADqrrrw83a7nVIZzM0vLNwsA2 h7lOAClHLNzYtaSh3Y9RmjjfaOEggPX/qHe1CXr9OG+Ezn1TiQHIBZ8b EDO2sub4oUG6SqBCM4TEcFodiDV1XaNhOFxbQ++7woya3JlDGfG77Dpi osL8LqZNwvrMcMglfC/anDJwPkE4n4Ywd/UMpsG6+An/HSMn/DLRmaBy Xt1IhMzRZKeIshqVLS0i/JT8A2jzFQjhn80CGAoGe7Lfhk393E81Bm2h lJGsBFaPdoX8oLjvPsjk7kgu4RCNM82zR0GAA0CxJurph7u/PQDlNwFY EqvVOQ==<br>
;; Received 719 bytes from 192.112.36.4#53(<a href="http://g.root-servers.net" rel="noreferrer" target="_blank">g.root-servers.net</a>) in 19 ms<br>
<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns1.bt.net" rel="noreferrer" target="_blank">ns1.bt.net</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns2eu.bt.net" rel="noreferrer" target="_blank">ns2eu.bt.net</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns1bru.europa.eu" rel="noreferrer" target="_blank">ns1bru.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns1lux.europa.eu" rel="noreferrer" target="_blank">ns1lux.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns2bru.europa.eu" rel="noreferrer" target="_blank">ns2bru.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns2lux.europa.eu" rel="noreferrer" target="_blank">ns2lux.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns3bru.europa.eu" rel="noreferrer" target="_blank">ns3bru.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns3lux.europa.eu" rel="noreferrer" target="_blank">ns3lux.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN NS <a href="http://ns4az1.europa.eu" rel="noreferrer" target="_blank">ns4az1.europa.eu</a>.<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN DS 6250 8 2 0186EEFF28A83D2C950963CEEF2F2070DC0885AC8AD7106B03A9741C 25DC6B82<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN DS 14845 8 2 9EF3C28F5B3A3D33756D61715B1BDBDBB07E0555598D30256D1F2B71 95324846<br>
<a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. 86400 IN RRSIG DS 8 2 86400 20220623041700 20220616041129 27435 eu. XakdaRA9D2dJc7PciufTV202vD0+QVIjdHl0G9IVkvF/UNEOZCheEJs8 F/+Dv+mVVfVyNTlBpi+gRLmj6RNw6BN1vD4C5TNsniS/s5r//IDJd7p9 Sn7pviz7YgZigyVfI0lFE62tZw5zdotpqKhvtro/Pit/16MvdnmKWjvb u8I=<br>
;; Received 691 bytes from 194.0.25.28#53(<a href="http://w.dns.eu" rel="noreferrer" target="_blank">w.dns.eu</a>) in 15 ms<br>
<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://ns1.coltnet.at" rel="noreferrer" target="_blank">ns1.coltnet.at</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://pdns109.ultradns.net" rel="noreferrer" target="_blank">pdns109.ultradns.net</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://pdns109.ultradns.biz" rel="noreferrer" target="_blank">pdns109.ultradns.biz</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://pdns109.ultradns.org" rel="noreferrer" target="_blank">pdns109.ultradns.org</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://ns8.colt.net" rel="noreferrer" target="_blank">ns8.colt.net</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 3600 IN NS <a href="http://pdns109.ultradns.com" rel="noreferrer" target="_blank">pdns109.ultradns.com</a>.<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 1800 IN NSEC <a href="http://ecdc.europa.eu" rel="noreferrer" target="_blank">ecdc.europa.eu</a>. NS RRSIG NSEC<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 1800 IN RRSIG NSEC 8 3 1800 20220628104634 20220617040432 45108 <a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. W6Sf4qHBcTkjXR8cnt/hG1mAicP6RsgwE+dR9jqNoPT7eAb1jgd/qh6R Jw71BT9Otghuu2aMNtMm4ZhwNrN8YpR0HyxHx5mDO3DZsO4Sqx21+cmp /zUn22xECJI3oVQy5qKczejRQLFiQY7yPg+57Z2V5Zj7lvdDDG8f2IeJ QY75DcTLFuWriUS1Qos1+koXYox4qmAXjq6BgN8/T82iVpYqPjBMxoVJ pjcWnEO/GYzcVOZXQefDNPivF3TeeojbgPt5pmBhz29MlflPi0i1GAna mg1soT9JnEDFmK1y6Va7yVrOPFbpuslSfJSX710JFwVEZsEBfXSWt7ZE sp7gYQ==<br>
<a href="http://ecb.europa.eu" rel="noreferrer" target="_blank">ecb.europa.eu</a>. 1800 IN RRSIG NSEC 8 3 1800 20220715202454 20220617040450 33483 <a href="http://europa.eu" rel="noreferrer" target="_blank">europa.eu</a>. CsLsmCuiFgHEzpPIFcecZojRcm8CmuV6laZJP0kca+xmbUMKiYV9aDoZ Yq9+DAPHJBdnYXUHAGPjLuxC+jfWSwUg2k3t/obrFFYz3MOV2xf802Az mrwjQKbozUVVfiftuPl+n+iaw60ocqyfH1Ev8qDBjiMJ3a382VUWFu5r DP2mpJ9vl9xvAMxN51uZ38lSkXArVEU8t84OMr7Dh6zikvcIlbwaj3TH RFsqoDIB3yfPuAAJksqvxWg8DPARONUHfHZ7njiWef3njjwfcGnRv7sn MecG5j0hL2SrfHxI4eqbxRabOzZ2gzLUh37aIFnptHHcZy84fJgT0Ve1 sE1iOg==<br>
;; Received 891 bytes from 147.67.12.4#53(<a href="http://ns3lux.europa.eu" rel="noreferrer" target="_blank">ns3lux.europa.eu</a>) in 15 ms<br>
<br>
<a href="http://www.ecb.europa.eu" rel="noreferrer" target="_blank">www.ecb.europa.eu</a>. 300 IN CNAME <a href="http://www-ecb-europa-eu.ax4z.com" rel="noreferrer" target="_blank">www-ecb-europa-eu.ax4z.com</a>.<br>
;; Received 86 bytes from 156.154.65.109#53(<a href="http://pdns109.ultradns.net" rel="noreferrer" target="_blank">pdns109.ultradns.net</a>) in 11 ms<br>
<br>
real 0m5.117s<br>
user 0m0.011s<br>
sys 0m0.035s<br>
<br>
-- <br>
Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" rel="noreferrer" target="_blank">http://www.fantomas.sk/</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
"One World. One Web. One Program." - Microsoft promotional advertisement<br>
"Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
<br>
</blockquote></div></div>