<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Additionally, you fail to run supported version of BIND 9.<div><br></div><div>Support for DLV had been removed from BIND 9.16.0 and even BIND 9.16 had reached end-of-life as of this year (after four and something years of support).</div><div><br></div><div>Ondrej<br id="lineBreakAtBeginningOfSignature"><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 19. 8. 2024, at 5:56, Ondřej Surý <ondrej@isc.org> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><meta http-equiv="content-type" content="text/html; charset=utf-8">Since you are asking for a cause.<div><br></div><div>The cause is that you failed to follow operational advice and kept using DLV after it has been discontinued. This is entirely on you.</div><div><br></div><div>ISC is keeping dlv.isc.org operational only as a courtesy, and there is absolutely no SLA.</div><div><br></div><div>Ondrej<br id="lineBreakAtBeginningOfSignature"><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 19. 8. 2024, at 2:51, 秋林峻祐 <jst125@d2c.co.jp> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">This will be my first email. Sorry for any rough edges.</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">ISSUE:: I am using a DNS server in Japan. The DNS server failed to resolve the domain name on August 2, 2024. It automatically recovered after a while. The following message was recorded in the logs</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">I want to know why I suddenly can't resolve names.</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">logs::</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">log1: validating @0xXXXXXXXXXXXXXXXX: <a href="http://dlv.isc.org/" target="_blank">dlv.isc.org</a> DNSKEY: verify failed due to bad signature (keyid=xxxxxxx): RRSIG has expired</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">log2: validating @0xXXXXXXXXXXXXXXXX: <a href="http://domain.example.com/" target="_blank">domain.example.com</a> A: bad cache hit (<a href="http://domain.example.com.dlv.isc.org/DLV" target="_blank">domain.example.com.dlv.isc.org/DLV</a>)</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">timestamp:: Failure date: 2024.08.02 00:39:30 (JST) Failure recovery date: 2024.08.02 05:06:06 (JST)</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">env:: CentOS release 6.4 (Final) BIND version: bind-9.8.2-0.68.rc1.el6_10.8.x86_64 Execution user: /group:root / named</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">Considerations:: There were no other physical or internal OS failures. From the fact that the recovery was automatic, I am guessing that there was a failure or maintenance in the dlv repository for verification. If you have any other information related to the cause of the problem, we would appreciate it if you could share it with us.</p><p style="color:rgb(51,50,56);font-family:"GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";margin:0px 0px 16px 1rem">Discussion::<br>I know that “Look aside validation” has already been discontinued, but I have a question to isolate the cause.<br>I would like to know why “Look aside validation” has already been discontinued, yet the system usually operates without problems.<br>There were no other physical or internal OS failures.<br>The system recovered automatically.<br>I am guessing that it was caused by the dlv repository for validation.<br>If anyone has any other information relate</p></div>
<span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></div></blockquote></div></body></html>