[afnog] .ke DNSSEC issues

Barry Apudo Macharia barry at tespok.co.ke
Tue Mar 31 12:43:05 UTC 2015


Afternoon Laban 

The issue of .KE is being addressed by IANA and Kenic team at the moment 
we will know the impact on KIXP traffic once the issue is resolved 


Barry Apudo Macharia 
Technical Manager 
Telecommunication Service Providers Association of Kenya/Kenya Internet Exchange Point 
Pilot: +254 (20) 2245036 
Cel. +254 (720) 899750 
Email: barry at kixp.or.ke , barry at tespok.co.ke 
website:www.tespok.co.ke 
Save a tree. Don't print this e-mail unless it's really necessary 



> On 31 Mar 2015, at 13:34, Laban Mwangi <lmwangi at gmail.com> wrote:
> 
> Hi all,
> 
>  Looks like .KE is having DNSSEC issues [1], [2].  For a lot of folks behind validating recursors, .ke is practically down. From my end, ongoing impact seems to be severe (as expected):
> * API calls to .ke. endpoints (Telcos, Banks etc),
> * .ke. websites and the most visible being google.co.ke <http://google.co.ke/>. google.com <http://google.com/> redirects .com. services to it's country level domain. So www, maps... are down for me. I ended up using *.google.co.tz <http://google.co.tz/>.
> * Infrastructure & services (SMTP, whois, news services....)
> 
> 
> Poking around with dig, I suspect that the issue started at around 2015-03-31 0400 UTC.
> 
> Could anyone give a bump to KENIC folks?
> 
> I really hope they conduct and publish a post-mortem.
> 
> PS: It would also be interesting to see KIXP traffic graphs for the day [3]
> 
> 
> 1. http://dnssec-debugger.verisignlabs.com/www.google.co.ke <http://dnssec-debugger.verisignlabs.com/www.google.co.ke>
> 2. http://dnsviz.net/d/www.google.co.ke/dnssec/ <http://dnsviz.net/d/www.google.co.ke/dnssec/>
> 3. https://cacti.tespok.co.ke/cacti/ <https://cacti.tespok.co.ke/cacti/>
> 
> 
> Cheers,
> Laban
> _______________________________________________
> afnog mailing list
> https://www.afnog.org/mailman/listinfo/afnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.afnog.org/pipermail/afnog/attachments/20150331/342a215c/attachment.html>


More information about the afnog mailing list