Re: Whitelist IP to support EDNS-client subnet

[MinJae Hwang]

Hi, 

Could you give us a domain name so that we can verify your nameserver is properly handling edns-client-subnet?

Thanks.

On Wednesday, March 20, 2013 3:45:36 AM UTC-4, thanhn...@gmail.com wrote:

Dear supporters,

We did already asked you to whitelist our IP(s) to test our DNS servers which accepts edns-client subnet before (just in staging environment). Now it's ready to apply for production environment. Could you please whitelist my following production IP(s):

1. 118.102.7.250
2. ... will be requested later

To make sure that our production DNS servers still can handle request in case of above server (118.102.7.250) has problem after you whitelist it (of course, we don't expect it happens). So we just ask you to whitelist only 1 IP for moment.

Please update me after you have done so that we can check impact immediately!

Thank you very much for your patient supports,

Nha.Dang

[MinJae Hwang]

Hi Nha,

I added your nameserver IP address. It should be effective within 12 hours.

Thanks!

On Wednesday, March 20, 2013 10:50:16 PM UTC-4, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

Here is our first nameserver: ns1.vcdn.vn

I will ask you to add second nameserver after the first one is successfully passed our test cases.

You can use following domains for testing: 

tv1.cache31.vcdn.vn  

dts.vcdn.vn

 ...

Thank you,

Nha Dang

[MinJae Hwang]

The nameserver is added to the whitelist. It should be effective within 12 hours. Thanks!

On Tuesday, March 26, 2013 10:22:08 AM UTC-4, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

Could you please help to process it?

Thanks,

Nha

On Monday, March 25, 2013 10:27:10 AM UTC+7, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

After a few days testing first nameserver, it works well.

Please help to whitelist second nameserver: 118.102.7.251 ns2.vcdn.vn

Thanks!

Nha Dang

[MinJae Hwang]

Hi,

ns3.vcdn.cn has been added! Thanks.

On Monday, April 22, 2013 12:38:19 AM UTC-4, thanhn...@gmail.com wrote:

Hello MinJae Hwang,

Could you please help me to process it?

Thanks,

Nha Dang

On Friday, April 19, 2013 9:42:50 PM UTC+7, thanhn...@gmail.com wrote:

Hello Hi MinJae Hwang,

Could you please help to whitelist it?

Thanks & regards,

Nha Dang

On Monday, April 15, 2013 3:08:47 PM UTC+7, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

We have just expanded one more DNS server that accepts eDNS client-subnet. Could you please help to whitelist it too? Here is DNS server info:

 

103.23.159.33 ns3.vcdn.vn

 

You can use following domains for testing: 

tv1.cache31.vcdn.vn  

dts.vcdn.vn

 

Thanks & regards,

Nha Dang Thanh

On Thursday, March 28, 2013 10:04:14 AM UTC+7, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

Thank you very much for your supports,

Now both our DNS servers works well after you whitelist them.

However, on Mar 27 2013 04:14:45 AM GMT+7 and Mar 27 2013 05:43:45 AM GMT+7, both our DNS server receive around 300 DNS requests/second from Google DNS (IP 74.125.191.*). Did you do any load test our DNS on that time?

Thanks & regards,

Nha Dang

[MinJae Hwang]

Hi,

I checked that ns3.vcdn.vn is added to the whitelist. It takes sometime to the changes to be effective.

Thanks,

On Tuesday, April 23, 2013 2:58:08 AM UTC-4, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

It seems that you have added incorrect the name server. It's ns3.vcdn.vn not ns3.vcdn.cn

So far our DNS server hasn't received any client-subnet request from Google DNS yet.

Could you please help to check it again?

Thanks,

Nha Dang

[MinJae Hwang]

Nha Dang,

Are you still not getting edns-client-subnet packet?

On Wednesday, April 24, 2013 10:17:08 PM UTC-4, thanhn...@gmail.com wrote:

Hi MinJae Hwang,

After about two days left, but it still does not effect. We also did ask OpenDns to whitelist and it has already been effected.

Could you please help to check it again?

Thanks,

Nha Dang

[Yunhong Gu]

Your nameserver ns3.vcdn.vn is not listed in the delegation from .vn nameservers, so we won't send any queries to it, with or without edns-client-subnet. Only ns1.vcdn.vn and ns2.vcdn.vn are listed in the delegation.

; <<>> DiG 9.8.1-P1 <<>> ns3.vcdn.vn @d.dns-servers.vn

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48134

;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2

;; WARNING: recursion requested but not available

;; QUESTION SECTION:

;ns3.vcdn.vn. IN A

;; AUTHORITY SECTION:

vcdn.vn. 43200 IN NS ns2.vcdn.vn.

vcdn.vn. 43200 IN NS ns1.vcdn.vn.

;; ADDITIONAL SECTION:

ns1.vcdn.vn. 43200 IN A 118.102.7.250

ns2.vcdn.vn. 43200 IN A 118.102.7.251

On Sat, Apr 27, 2013 at 4:57 AM, <thanhn...@gmail.com> wrote:

Hi MinJae Hwang,

Yes, we haven't received any edns-client packet from Google DNS yet.

Thanks,

Nha Dang

--
--
========================================================
You received this message because you are subscribed to the Google
Groups "public-dns-discuss" group.
To post to this group, send email to public-dn...@googlegroups.com
To unsubscribe from this group, send email to
public-dns-disc...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
 
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-disc...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Yunhong Gu]

Those are two different NS rrset. That one in your email was from authoritative nameservers; the other one in my email was from the parent zone for delegation. The delegation is the one we use to resolve a name. This is a configuration error that you have to fix. See also http://www.intodns.com/vcdn.vn.

Yunhong

On Mon, Apr 29, 2013 at 12:49 AM, <thanhn...@gmail.com> wrote:

Hi Yunhong Gu ,

Thank you for your reply. However I'm a little bit confusing about that when I use cmd "dig vcdn.vn ns" I can see ns3.vcdn.vn. 

Moreover, Open DNS can still send edns-client-subnet packages to ns3.vcdn.vn but Google DNS is not?

Here is our cmd detail:

[root@haproxy nhadt]# dig vcdn.vn ns

; <<>> DiG 9.7.3-P3-RedHat-9.7.3-8.P3.el6 <<>> vcdn.vn ns

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48250

;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:

;vcdn.vn.                       IN      NS

;; ANSWER SECTION:

vcdn.vn.                259     IN      NS      ns3.vcdn.vn.

vcdn.vn.                259     IN      NS      ns1.vcdn.vn.

vcdn.vn.                259     IN      NS      ns2.vcdn.vn.

;; Query time: 42 msec

;; SERVER: 8.8.8.8#53(8.8.8.8)

;; WHEN: Mon Apr 29 11:00:18 2013

;; MSG SIZE  rcvd: 79

What should I do next to resolve this problem?

Thanks & Regards,

Nha Dang

public-dns-discuss+unsub...@googlegroups.com

For more options, visit this group at
http://groups.google.com/group/public-dns-discuss?hl=en
For more information on Google Public DNS, please visit
http://code.google.com/speed/public-dns
========================================================
 
---
You received this message because you are subscribed to the Google Groups "public-dns-discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to public-dns-discuss+unsub...@googlegroups.com.

For more options, visit https://groups.google.com/groups/opt_out.