ISC BIND 9 breakage?

Wed Mar 25 17:18:49 UTC 2020

Did anyone else on CentOS 6 just have some DNS resolvers totally fall over?

I noticed that this command: dnssec-lookaside auto; was causing the issue. The issue occurred right at about 1PM EST.

I see this note in the ISC key file..

# ISC DLV: See https://www.isc.org/solutions/dlv for details.
        #
        # NOTE: The ISC DLV zone is being phased out as of February 2017;
        # the key will remain in place but the zone will be otherwise empty.
        # Configuring "dnssec-lookaside auto;" to activate this key is
        # harmless, but is no longer useful and is not recommended.

It's not harmless anymore.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20200325/f2693b1e/attachment.html>