NS records not validating across all servers

Dingo124 · 08-07-2024 12:58 AM

Hi Community,

For some reason the NS Records I have set have not been validated yet across all geo servers.

I have created NS Records on a few of my domains to point to a specific nameserver. As you can see from the screenshot below this is being seen and validated in some servers but not all. Is there a reason for this? How can I ensure that these records are validated across all servers..

Any help here would be appreciated. Please note that these records were created on 19/6/2024 so I expected them to be validated by this point..

Thanks in advance.

AI

Is updates.green a public domain that you own?

Dingo124

Hey, we own the full domain. I have purposely censored the full domain as this is a public forum. The full domain is redacted but is "green-----.com".

"updates.green-----.com" is a subdomain I created using NS records which I had pointing to specific nameservers. The nameservers are also censored.

Let me know if there's anything you recommend trying.

AI

Hi @Dingo124

thanks for clarifying that. Ok, without knowing the domain, I can give hypothetical reasoning and general troubleshooting steps.

- Double check the domain exists, in good state and is properly delegated from the TLD to a set of name servers in Cloud DNS (from whois output and from dig -4 <domain> +trace +dnssec).

- Check the Cloud DNS zone and verify that original apex NS records are correct (check the NS records vs Registrar setup output which you can get by clicking on the button on the top right in Cloud DNS).

- Check if the Cloud DNS zone is using DNSSec and that it is consistent with the configuration of the parent zone (you can use the tool at https://dnsviz.net).

This should cover most of the scenarios, but obviously not everything that can potentially happen to a domain/dns configuration.