This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

Bad DNS of nordicsemi.com

(Maybe this isn't an ideal place for issues with your web site, but I could see no better one.)

There is a technical non-conformance in your nordicsemi.com domain. In practice, it makes the domain appear non-existent to some people, depending on how hard their DNS resolver tries to work around such bugs. Real instance and more details: forum.turris.cz/.../4

Parents
  • Hi there, thanks for the heads up!

    We'll look into it...

    Cheers, Eivind

  • IP (public): 2001:718:1a02:1:1a66:daff:fe1e:1122 / 195.113.220.117 but I'm rather confident it doesn't matter in this case.

    It's for www.nordicsemi.com, anytime (still so). Let me rehash the issue for you:

    • www.nordicsemi.com is a CNAME link to nordicsemi.nord.aads1.net.
    • the authoritative servers for that answer with NXDOMAIN to nord.aads1.net. which implies that there should exist nothing under it, including nordicsemi.nord.aads1.net. Detailed explanation of why: tools.ietf.org/.../rfc8020
    • Our knot-resolver currently contains hacks to work around this issue, but some resolvers apparently do not and then your site would appear not to exist to them (which is how we found out). I also can't guarantee that kresd will support this hack indefinitely, as it generates extra traffic and extra latency in some (conformant) cases in order to fix broken domains (like yours).
Reply
  • IP (public): 2001:718:1a02:1:1a66:daff:fe1e:1122 / 195.113.220.117 but I'm rather confident it doesn't matter in this case.

    It's for www.nordicsemi.com, anytime (still so). Let me rehash the issue for you:

    • www.nordicsemi.com is a CNAME link to nordicsemi.nord.aads1.net.
    • the authoritative servers for that answer with NXDOMAIN to nord.aads1.net. which implies that there should exist nothing under it, including nordicsemi.nord.aads1.net. Detailed explanation of why: tools.ietf.org/.../rfc8020
    • Our knot-resolver currently contains hacks to work around this issue, but some resolvers apparently do not and then your site would appear not to exist to them (which is how we found out). I also can't guarantee that kresd will support this hack indefinitely, as it generates extra traffic and extra latency in some (conformant) cases in order to fix broken domains (like yours).
Children
No Data
Related