DNS resolver reaction to non-reachable authoritative DNS server

Doug Barton dougb at dougbarton.us
Thu Mar 13 17:28:24 UTC 2014

On 03/13/2014 12:35 AM, Anurag Bhatia wrote:
> Hello there!
> I am trying to troubleshoot a case of DNS failure issue with one of Indian
> Govt's domain (nic.in). I can see that 1 out of 4 authoritative DNS server
> is IPv6 only. We have quite a few users running IPv4 only setup and hence
> 1/4 of these DNS servers are non-reachable from the recursor hosted by our
> clients.
> How is DNS query expected to respond in such case? Will it give SRVFAIL and
> terminate immediately (causing DNS resolution failure) OR it will just see
> one of the auth DNS as non-reachable and next will proceed with either of
> other three thus slowing down but with no failure?

Basically the latter.

If your customers are using BIND there is a flag you can supply to named 
to cause it to operate only in IPv4. That would avoid this problem 

hope this helps,


More information about the NANOG mailing list