nanog mailing list archives

Re: 2019-01-11 ARIN.NET DNSSEC Outage – Post-Mortem (was: Re: ARIN NS down?)

From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Mon, 14 Jan 2019 09:49:45 +0100

On Fri, Jan 11, 2019 at 08:59:10PM +0000,
 John Curran <jcurran () arin net> wrote 
 a message of 125 lines which said:

Our monitoring systems reported being green until the signatures
expired as they presently check that the SOA's match on the internal
and external nameservers.


For checking of DNSSEC signatures expiration (something which is as
crucial to monitor as the PKIX certificates expiration), I use
<http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html>
and I'm happy with it.

Current thread:

Re: Dnssec still inoperable on the internet ?— was ARIN NS down?, (continued)
- - - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Stephane Bortzmeyer (Jan 11)
    - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Ca By (Jan 11)
    - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Max Tulyev (Jan 11)
    - Re: Dnssec still inoperable on the internet ?― was ARIN NS down? Randy Bush (Jan 11)
    - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Antonios Chariton (Jan 11)
    - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Mikael Abrahamsson (Jan 11)
    - Re: Dnssec still inoperable on the internet ?— was ARIN NS down? Ca By (Jan 11)
- Re: ARIN NS down? Stephane Bortzmeyer (Jan 11)
  - Re: ARIN NS down? John Curran (Jan 11)
    - 2019-01-11 ARIN.NET DNSSEC Outage – Post-Mortem (was: Re: ARIN NS down?) John Curran (Jan 11)
    - Re: 2019-01-11 ARIN.NET DNSSEC Outage – Post-Mortem (was: Re: ARIN NS down?) Stephane Bortzmeyer (Jan 14)