Cloudflare DNS query issues

[valya]

I've had issues loading the site at all for the last month or so. Blank pages, pages taking a long time to load, needing to refresh multiple times, but no issues loading images. I managed to catch the issue in devtools today, and surprise surprise, it's DNS! I'm using 1.1.1.1, and my specific Cloudflare datacenter is failing to query MD's authoritative DNS server. Sometimes it hangs for multiple seconds (longest I saw was a minute and a half), sometimes it just fails instantly. I've tested it in a different country and a different region of my country, and both work fine. I happened to have a server in the same city as the CF datacenter, and I can confirm it's not my own connection as well.

Happy to give staff some more specific details in a more private manner, but below is a DoH query to CF. It looks like it's failing to query the server, then that's causing a DNSSEC failure.

{
  "Status": 2,
  "TC": false,
  "RD": true,
  "RA": true,
  "AD": false,
  "CD": false,
  "Question": [
    {
      "name": "api.mangadex.org",
      "type": 1
    }
  ],
  "Comment": [
    "EDE(9): DNSKEY Missing no SEP matching the DS found for mangadex.org.",
    "EDE(22): No Reachable Authority time limit exceeded"
  ]
}

 

[tristan9]

Hmm that is strange... Never saw our DNSSEC setup having issues anywhere else...

• https://dnssec-analyzer.verisignlabs.com/api.mangadex.org
• https://dnsviz.net/d/api.mangadex.org/dnssec/

If you have more details, feel free to PM, but in my experience unless you know someone on the inside it's pretty much impossible to report an issue to CF...

 

[Roler]

Are you perhaps in Manchester? Does changing to Google DNS or something else resolve it?

 

[valya]

Hmm that is strange... Never saw our DNSSEC setup having issues anywhere else...

• https://dnssec-analyzer.verisignlabs.com/api.mangadex.org
• https://dnsviz.net/d/api.mangadex.org/dnssec/

If you have more details, feel free to PM, but in my experience unless you know someone on the inside it's pretty much impossible to report an issue to CF...

I PMed you some more details and a possible cause, unsure if you got it or not so just following up.