Hi all, Afternoon everyone, InternetNZ has just posted an update on our status page of a maintenance window tonight https://status.internetnz.nz/incidents/81fyr308hsw5 this is in responce to the issues earlier this week. Maintenance Window Notification - 3:30pm to 5:30pm, 1 June NZST. Zone generation maintenance Following the recent DNSSEC chain validation incident and to ensure the integrity of our final DNSSEC updates to complete the DNSSEC key rollover in the .nz zone, we've decided to manually validate them. This validation requires the temporary postponement of zone pushes during a window between 3:30pm to 5:30pm tonight, 1 June NZST. For reference, this maintenance should have no impact on recursive name server operations. After the incident, we enacted several preventive measures. The DNSSEC key rollover process was temporarily halted, which allowed us to carefully analyse the situation and allocate sufficient time for the expiry of any mismatched records. While these measures were necessary, they have increased the size of our DNS responses for a sustained period, creating a higher likelihood of technical issues. To reduce this risk, we're now initiating the completion of the key rollover process, which includes the removal of outdated keys. We understand that this may impact your operations, and we appreciate your understanding as we take these steps to maintain the stability and security of the system. Regards Josh On Tue, 30 May 2023 at 09:43, Josh Simpson wrote:

Hi all

As at 2023-05-29 10:45 PM we have identified an interaction in our DNSSEC signing of the .nz second level domains which depending on recursive resolver cache state may invalidate second level zones.

If you encounter issues on recursive resolvers such as SERVFAIL relating to any of the .nz second levels, flushing the resolver cache for the respective zones should allow DNS services to resume functioning. Flushing . net.nz first is recommended.

https://status.internetnz.nz/incidents/gq1c6slz3198 will contain updates.

Regards Josh

--

*Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa*

Helping New Zealanders harness the power of the Internet www.internetnz.nz

*M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]

-- *Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa* Helping New Zealanders harness the power of the Internet www.internetnz.nz *M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]