Vandweller Forum
I don't know if this is an issue or not, - Printable Version

+- Vandweller Forum (https://vandwellerforum.com)
+-- Forum: Forum announcements (https://vandwellerforum.com/forum-1.html)
+--- Forum: Forum Issues/Suggestions (https://vandwellerforum.com/forum-21.html)
+--- Thread: I don't know if this is an issue or not, (/thread-2260.html)



I don't know if this is an issue or not, - BCGuy - 01-19-2019

https://dnsflagday.net/

What is happening?
The current DNS is unnecessarily slow and suffers from inability to deploy new features. To remediate these problems, vendors of DNS software and also big public DNS providers are going to remove certain workarounds on February 1st, 2019.
This change affects only sites which operate software which is not following published standards. Are you affected?
Domain owners
Please check if your domain is affected:
Test your domain Domain name (without www):  
Invalid input or other unexpected error, sorry!


DNS resolver operators
On or around Feb 1st, 2019, major open source resolver vendors will release updates that implement stricter EDNS handling. Specifically, the following versions introduce this change:
  • BIND 9.13.3 (development) and 9.14.0 (production)
  • Knot Resolver already implemented stricter EDNS handling in all current versions
  • PowerDNS Recursor 4.2.0
  • Unbound 1.9.0
Also public DNS providers listed below will disable workarounds.
DNS server operators
For introduction to EDNS compliance we recommend you to use form above which produces simplified result for a whole domain.
It is also possible to test your DNS servers directly using the tool ednscomp which displays detailed technical report. Simply enter the name of a zone hosted on your DNS servers into the
Code:
zone name
field and click the
Code:
Submit
button.
The summary result of ednscomp tests should preferably be a green message
Code:
All Ok
.
Minimal working setup which will allow your domain to survive 2019 DNS flag day must not have
Code:
timeout
result in any of plain DNS and EDNS version 0 tests implemented in ednscomp tool. Please note that this minimal setup is still not standards compliant and will cause other issues sooner or later. For this reason we strongly recommend you to get full EDNS compliance (all tests
Code:
ok
) instead of doing just minimal cleanup otherwise you will have to face new issues later on.
If there is a problem, the ednscomp tool displays an explanation for each failed test. Failures in these tests are typically caused by:
  • broken DNS software
  • broken firewall configuration
To remediate problems please upgrade your DNS software to the latest stable versions and test again. If the tests are still failing even after a DNS upgrade please check your firewall configuration.
Firewalls must not drop DNS packets with EDNS extensions, including unknown extensions. Modern DNS software may deploy new extensions (e.g. DNS cookies to protect from DoS attacks). Firewalls which drop DNS packets with such extensions are making the situation worse for everyone, including worsening DoS attacks and inducing higher latency for DNS traffic.


When I ran the test, by putting vandwellerforum.com in the box provided, the response was "Invalid input or other unexpected error, sorry!"
Since I know nothing about this stuff, it may be irrelevant.


RE: I don't know if this is an issue or not, - Kaylee - 01-19-2019

(01-19-2019, 06:04 PM)BCGuy Wrote: When I ran the test, by putting vandwellerforum.com in the box provided, the response was "Invalid input or other unexpected error, sorry!"
Since I know nothing about this stuff, it may be irrelevant.

Good find BCGuy!

I tried to find a nice Muggle-friendly reference, but couldn't.
This is the closest one I found, with some decent attempts at analogies:
https://news.ycombinator.com/item?id=18930798
Just skim the top section, and don't stress when Geek/Tech phrases appear.

Bottom line:
There will likely be problems, but mostly with smaller sites.
There's nothing you can do to fix, it's not your fault, please be patient.
There will be lots of overtime & stress behind the scenes, so please be kind to your SysAdmins. Smile
[Image: devotion_to_duty.png]


RE: I don't know if this is an issue or not, - Blacktank - 01-19-2019

so would this be a me thing?
a host thing?
or a mybb thing?


RE: I don't know if this is an issue or not, - Kaylee - 01-20-2019

100% "a host thing"

There's literally nothing you can do... other than send pizza and/or donuts to your host's SysAdmins. Wink


RE: I don't know if this is an issue or not, - Nana - 01-20-2019

Gary, You can test your site domain at this link to find out if or not the vandweller forum is compliant with the dns system or not. Domain owners
Please check if your domain is affected:
Test your domain
Domain name (without www): https://dnsflagday.net/


RE: I don't know if this is an issue or not, - Motrukdriver - 01-20-2019

The host is very good about getting things fixed or upgraded. I used them too with my site. If we do have any downtime it will be minimal I'm sure.