Yesterday, we started noticing an increased failure rate when completing certificate orders. This began at 16:53 UTC, November 6th, 2023 and is ongoing. About 60% of all certificate orders generated have resulted in INVALID orders, supposedly due to DNS failures. We’ve checked that our nameserver i…

Basically fixed all the issues with our custom DNS server implementation raised by this test, EDNS Compliance Tester . Which included Setting AA flag and returning SOA for when we had no answer for a query Returning the correct NS record handling edns0 properly

Potential networking / client changes on DNS Challenges

Help

vpadma November 7, 2023, 5:26pm 5

Hey @mcpherrinm and @jcjones, feel free to contact me directly if you'd like some more insight / help into figuring out what's happening here.

We're definitely curious as well

Topic		Replies	Views
DNS failures (SERVFAIL, timeout) for domains using Network Solutions/Web.com/worldnic.com nameservers Help	71	9779	May 23, 2020
Many challenges returning invalid starting yesterday Help	11	1537	January 7, 2018
Random change validation failure Issuance Tech	7	1923	December 11, 2016
DNS SERVFAIL errors from Let's Encrypt Help	3	115	August 23, 2024
DNS problem: SERVFAIL looking up A , AAAA Help	2	68	December 28, 2024

Potential networking / client changes on DNS Challenges

Related topics