Hi all,
Afternoon everyone, InternetNZ has just posted an update on our status page
of a maintenance window tonight
https://status.internetnz.nz/incidents/81fyr308hsw5 this is in responce to
the issues earlier this week.
Maintenance Window Notification - 3:30pm to 5:30pm, 1 June NZST.
Zone generation maintenance
Following the recent DNSSEC chain validation incident and to ensure the
integrity of our final DNSSEC updates to complete the DNSSEC key rollover
in the .nz zone, we've decided to manually validate them.
This validation requires the temporary postponement of zone pushes during a
window between 3:30pm to 5:30pm tonight, 1 June NZST. For reference, this
maintenance should have no impact on recursive name server operations.
After the incident, we enacted several preventive measures. The DNSSEC key
rollover process was temporarily halted, which allowed us to carefully
analyse the situation and allocate sufficient time for the expiry of any
mismatched records.
While these measures were necessary, they have increased the size of our
DNS responses for a sustained period, creating a higher likelihood of
technical issues. To reduce this risk, we're now initiating the completion
of the key rollover process, which includes the removal of outdated keys.
We understand that this may impact your operations, and we appreciate your
understanding as we take these steps to maintain the stability and security
of the system.
Regards
Josh
On Tue, 30 May 2023 at 09:43, Josh Simpson
Hi all
As at 2023-05-29 10:45 PM we have identified an interaction in our DNSSEC signing of the .nz second level domains which depending on recursive resolver cache state may invalidate second level zones.
If you encounter issues on recursive resolvers such as SERVFAIL relating to any of the .nz second levels, flushing the resolver cache for the respective zones should allow DNS services to resume functioning. Flushing . net.nz first is recommended.
https://status.internetnz.nz/incidents/gq1c6slz3198 will contain updates.
Regards Josh
--
*Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa*
Helping New Zealanders harness the power of the Internet www.internetnz.nz
*M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]
-- *Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa* Helping New Zealanders harness the power of the Internet www.internetnz.nz *M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]