<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Are both instances using the same ISP and DNS upstream resolver
(from the ISP)?<br>
<br>
<div class="moz-cite-prefix">On 30.11.2018 13:57, A. Schulze via
Unbound-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20181130135728.Horde._wpfre38JkmhLfih_jlZtU7@andreasschulze.de"><br>
Hello,
<br>
<br>
we notices the name "<a class="moz-txt-link-abbreviated" href="http://www.revenue.ie">www.revenue.ie</a>" is un-resolvable via one of
our unbound instances.
<br>
while looking for reasons we found no problem on a standby system.
<br>
unbound-1.8.1 configuration is *identical* (except listen ip)
<br>
The issue is reproducible even after restarting both instances.
<br>
<br>
neither <a class="moz-txt-link-freetext" href="http://dnsviz.net/d/revenue.ie/dnssec/">http://dnsviz.net/d/revenue.ie/dnssec/</a> nor
<a class="moz-txt-link-freetext" href="https://zonemaster.net/result/de1eaf5bb0b9a596">https://zonemaster.net/result/de1eaf5bb0b9a596</a>
<br>
show (me) an obvious reason.
<br>
<br>
Some random tries later I configured "domain-insecure: revenue.ie"
which solved the problem.
<br>
<br>
Cold someone explain that behaviour? Maybe we could learn again
some more experiences debugging strategies ...
<br>
<br>
Thanks
<br>
Andreas
<br>
<br>
</blockquote>
<br>
</body>
</html>