2019-01-11 ARIN.NET DNSSEC Outage – Post-Mortem (was: Re: ARIN NS down?)
Stephane Bortzmeyer
bortzmeyer at nic.fr
Mon Jan 14 08:49:45 UTC 2019
On Fri, Jan 11, 2019 at 08:59:10PM +0000,
John Curran <jcurran at arin.net> wrote
a message of 125 lines which said:
> Our monitoring systems reported being green until the signatures
> expired as they presently check that the SOA's match on the internal
> and external nameservers.
For checking of DNSSEC signatures expiration (something which is as
crucial to monitor as the PKIX certificates expiration), I use
<http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html>
and I'm happy with it.
More information about the NANOG
mailing list