Re: dns on fios/frontier

[Robert Kisteleki <robert () ripe net>]

> > > anyone on fios/frontier can please run a quickie and see if you can get
> > > to http://psg.com/?  have a net friend who can not from multiple hosts
> > > on their home lan and he has rebooted router.  called support and they
> > > showed their sunday best "the web site is down."  sigh.
> > https://atlas.ripe.net/probes/13318/
>
> two things.  
>
> so how did you find it?  i was wondering if i could find a useful atlas
> probe or nlring node, and how to find them.

https://atlas.ripe.net/docs/rest/#probe
or more specifically:
https://atlas.ripe.net/api/v1/probe/?tags=fios (it gives exactly one result
at the moment -- the above mentioned one. It's useful if people actually tag
their probes...)

About Ring: we're not authoritative -- I believe http://map.ring.nlnog.net/ is.

> secondly, i gotta snark that the ui maximizes the eurocracy to do a
> seemingly simple
>     dig @probe psg.com. a
> and
>     ping psg.com
> and it does not even serve coffee during the hour the dig and ping are
> "running."  (quaint use of the gerund).

I'd like to draw attention to the "one-off measurement" feature, which
responds within 10-30 seconds or so.

Indeed, it serves no coffee :-(

> i am not great at json, but looks to me as if it is a dns failure
>
> [{"from":"74.106.249.162","fw":4680,"group_id":1964819,"lts":163,"msm_id":1964820,"msm_name":"Tdig","prb_id":13318,"resultset":[{"af":4,"dst_addr":"10.0.0.13","lts":163,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":3,"ID":61959,"NSCOUNT":3,"QDCOUNT":1,"abuf":"8geBgAABAAEAAwADA3BzZwNjb20AAAEAAcAMAAEAAQAADhAABJMcAD7ADAACAAEAAA4QAALADMAMAAIAAQAADhAAEgRubG5zB2dsb2JuaXgDbmV0AMAMAAIAAQAADhAABgNyaXDADMAMABwAAQAADhAAECABBBgAAQAAAAAAAAAAAGLAYQABAAEAApzNAASTHAAnwGEAHAABAAGYeQAQIAEEGAABAAAAAAAAAAAAOQ==","rt":175.454,"size":175},"src_addr":"10.0.1.100","subid":1,"submax":3,"time":1429553733},{"af":4,"dst_addr":"38.103.8.115","lts":164,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":3,"ID":10350,"NSCOUNT":3,"QDCOUNT":1,"abuf":"KG6BgAABAAEAAwADA3BzZwNjb20AAAEAAcAMAAEAAQAADhAABJMcAD7ADAACAAEAAA4QAAYDcmlwwAzADAACAAEAAA4QAALADMAMAAIAAQAADhAAEgRubG5zB2dsb2JuaXgDbmV0AMAMABwAAQAADhAAECABBBgAAQAAAAAAAAAAAGLANQABAAEAAMIIAASTHAAnwDUAHAABAADCCAAQIAEEGAABAAAAAAAAAAAAOQ==","rt":370.067,"size":175},"src_addr":
 "
1
>  
> 0.0.1.100","subid":2,"submax":3,"time":1429553734},{"af":6,"dst_addr":"2001:550:102:301::13","lts":165,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":3,"ID":47682,"NSCOUNT":3,"QDCOUNT":1,"abuf":"ukKBgAABAAEAAwADA3BzZwNjb20AAAEAAcAMAAEAAQAADg4ABJMcAD7ADAACAAEAAA4OABIEbmxucwdnbG9ibml4A25ldADADAACAAEAAA4OAAYDcmlwwAzADAACAAEAAA4OAALADMAMABwAAQAADg4AECABBBgAAQAAAAAAAAAAAGLAUwABAAEAApzLAASTHAAnwFMAHAABAAGYdwAQIAEEGAABAAAAAAAAAAAAOQ==","rt":1.345,"size":175},"src_addr":"2001:550:102:301::1001","subid":3,"submax":3,"time":1429553735}],"timestamp":1429553733,"type":"dns"}]

No, it's ok, see https://atlas.ripe.net/measurements/1964820/#!map

> looks pingable
>
> [{"af":4,"avg":77.5353333333,"dst_addr":"147.28.0.62","dst_name":"147.28.0.62","dup":0,"from":"74.106.249.162","fw":4680,"group_id":1964819,"lts":166,"max":78.025,"min":77.132,"msm_id":1964819,"msm_name":"Ping","prb_id":13318,"proto":"ICMP","rcvd":3,"result":[{"rtt":78.025},{"rtt":77.449},{"rtt":77.132}],"sent":3,"size":48,"src_addr":"10.0.1.100","step":240,"timestamp":1429553736,"ttl":239,"type":"ping"}]

Yep.

Cheers,
Robert

> http://dnsviz.net/d/psg.com/dnssec/ thinks the dnssec glorp is fine.
>
> randy