[Unbound-users] fail to resolv trello.com

Thu Nov 6 08:56:06 UTC 2014

On Thu, Nov 06, 2014 at 08:21:37AM +0000, Ray Bellis wrote:
> hello,
> 
> the domain trello.com<http://trello.com> could not be resolved ( "dig trello.com<http://trello.com> A" fail )
> 
> It’s working for me, via a 1.4.16 installation.
> 
> when I ask the authoritative nameservers directly I get answers with decreasing TTL values.
> 

They are a webacceleration service and CDN. A webacceleration service is a sort of caching proxy for HTML-pages.

Maybe their DNS-service is also a proxy and they want fast/predictable changes, so they take the original ttl from the real server and decrease it.

> But that’s somewhat, umm, special…
> 
> Curiously their servers (operated by incapsula.com<http://incapsula.com>) also appear to strip the RD bit from replies, contrary to RFC 1035.
> 
> kind regards,
> 
> Ray
> 