Lame Delegation of 8.8.8.8 itself

394 views
Skip to first unread message

Ted Rule

unread,
Jan 2, 2024, 11:12:52 AMJan 2
to public-dns-discuss
Some DNS monitoring on our equipment over the Xmas period highlighted an oddity w.r.t. Google's DNS Resolver Servers at 8.8.8.8 and 8.8.4.4, 
and their ability to PTR resolve their own IP Address which started during the early hours of December 29th GMT.

Basically, you get SERVFAIL when querying for the PTR record of 8.8.8.8 and 8.8.4.4, as below.

A little bit more digging suggests that the problem is possibly not Google's fault, but rather a mismatch of NS glue as between Google's DNS Servers,
and those belonging to level3.net.

The root/TLD Servers appear to delegate 8.8.8.in-addr.arpa down to ns1.level3.net / ns2.level3.net, but those two Servers think it is handled by Google's DNS Servers.

I suspect ARIN/Level3/Google need to talk to each other and correct the inconsistency, BICBW.


$ dig @8.8.8.8 -x 8.8.8.8


; <<>> DiG 9.10.6 <<>> @8.8.8.8 -x 8.8.8.8

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 45725

;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1


;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 512

;; QUESTION SECTION:

;8.8.8.8.in-addr.arpa.        IN    PTR


;; Query time: 14 msec

;; SERVER: 8.8.8.8#53(8.8.8.8)

;; WHEN: Tue Jan 02 14:22:09 GMT 2024

;; MSG SIZE  rcvd: 49



$ dig @8.8.4.4 -x 8.8.4.4


; <<>> DiG 9.10.6 <<>> @8.8.4.4 -x 8.8.4.4

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 38076

;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1


;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 512

; OPT=15: 00 00 5b 32 30 39 2e 32 34 34 2e 30 2e 32 5d 20 4c 61 6d 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 61 74 20 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 66 6f 72 20 34 2e 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2f 70 74 72 ("..[209.244.0.2] Lame delegation at 4.8.8.in-addr.arpa for 4.4.8.8.in-addr.arpa/ptr")

; OPT=15: 00 00 5b 32 30 39 2e 32 34 34 2e 30 2e 31 5d 20 4c 61 6d 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 61 74 20 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 66 6f 72 20 34 2e 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2f 70 74 72 ("..[209.244.0.1] Lame delegation at 4.8.8.in-addr.arpa for 4.4.8.8.in-addr.arpa/ptr")

; OPT=15: 00 16 41 74 20 64 65 6c 65 67 61 74 69 6f 6e 20 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 66 6f 72 20 34 2e 34 2e 38 2e 38 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2f 70 74 72 ("..At delegation 4.8.8.in-addr.arpa for 4.4.8.8.in-addr.arpa/ptr")

;; QUESTION SECTION:

;4.4.8.8.in-addr.arpa.        IN    PTR


;; Query time: 42 msec

;; SERVER: 8.8.4.4#53(8.8.4.4)

;; WHEN: Tue Jan 02 14:22:49 GMT 2024

;; MSG SIZE  rcvd: 288



$ dig @z.arin.net. 8.8.8.in-addr.arpa. ns +norecurse


; <<>> DiG 9.10.6 <<>> @z.arin.net. 8.8.8.in-addr.arpa. ns +norecurse

; (2 servers found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31633

;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1


;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 1232

;; QUESTION SECTION:

;8.8.8.in-addr.arpa.        IN    NS


;; AUTHORITY SECTION:

8.8.8.in-addr.arpa.    86400    IN    NS    ns2.level3.net.

8.8.8.in-addr.arpa.    86400    IN    NS    ns1.level3.net.


;; Query time: 84 msec

;; SERVER: 2001:500:f0::63#53(2001:500:f0::63)

;; WHEN: Tue Jan 02 14:23:44 GMT 2024

;; MSG SIZE  rcvd: 93


$ dig @ns1.level3.net 8.8.8.in-addr.arpa. ns +norecurse


; <<>> DiG 9.10.6 <<>> @ns1.level3.net 8.8.8.in-addr.arpa. ns +norecurse

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61485

;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1


;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 4096

;; QUESTION SECTION:

;8.8.8.in-addr.arpa.        IN    NS


;; AUTHORITY SECTION:

8.8.8.in-addr.arpa.    3600    IN    NS    ns1.google.com.

8.8.8.in-addr.arpa.    3600    IN    NS    ns3.google.com.

8.8.8.in-addr.arpa.    3600    IN    NS    ns2.google.com.

8.8.8.in-addr.arpa.    3600    IN    NS    ns4.google.com.


;; Query time: 26 msec

;; SERVER: 209.244.0.1#53(209.244.0.1)

;; WHEN: Tue Jan 02 14:24:01 GMT 2024

;; MSG SIZE  rcvd: 129





pun...@google.com

unread,
Jan 2, 2024, 11:14:29 AMJan 2
to public-dns-discuss
We are aware of the issue and working with ARIN to resolve the incorrect delegation.

Reply all
Reply to author
Forward
0 new messages