Support files and logs from debugging DNS resolution failures for go.airliquide.com

Dockerfile

FROM centos:7

RUN mkdir -p /code/go
ENV GOPATH /code/go

RUN yum install -y epel-release gcc byacc golang openssl-devel expat-devel fstrm-devel unbound protobuf-c-devel bind-utils nc vim \
    && go get -u -v github.com/dnstap/golang-dnstap \
    && go get -u -v github.com/dnstap/golang-dnstap/dnstap

go.airliquide.com.1024.tap

19:09:27.058397 CQ 127.0.0.1 UDP 46b "go.airliquide.com." IN A
19:09:27.060333 RQ 193.0.14.129 UDP 28b "." IN NS
19:09:27.120271 RR 193.0.14.129 UDP 1013b "." IN NS
19:09:27.121309 RQ 192.33.4.12 UDP 32b "com." IN A
19:09:27.152451 RR 192.33.4.12 UDP 1023b "com." IN A
19:09:27.153437 RQ 192.54.112.30 UDP 43b "AIrLIQuIde.cOm." IN A
19:09:27.177728 RR 192.54.112.30 UDP 391b "AIrLIQuIde.cOm." IN A
19:09:27.178321 RQ 58.65.12.66 UDP 46b "gO.AIRLIquiDe.COm." IN A
19:09:27.523378 RR 58.65.12.66 UDP 244b "gO.AIRLIquiDe.COm." IN A
19:09:27.524352 RQ 192.12.94.30 UDP 39b "PaRdoT.cOM." IN A
19:09:27.573843 RR 192.12.94.30 UDP 791b "PaRdoT.cOM." IN A
19:09:27.574490 RQ 208.78.70.39 UDP 42b "go.pardot.COM." IN A
19:09:27.596603 RR 208.78.70.39 UDP 116b "go.pardot.COM." IN A
19:09:27.596983 RQ 204.13.250.39 UDP 42b "pI.pardOt.cOM." IN A
19:09:27.933500 RR 204.13.250.39 UDP 99b "pI.pardOt.cOM." IN A
19:09:27.933892 RQ 208.78.71.39 UDP 46b "PI-UE1.Pardot.cOm." IN A
19:09:27.955173 RR 208.78.71.39 UDP 86b "PI-UE1.Pardot.cOm." IN A
19:09:27.955650 RQ 204.13.250.39 UDP 41b "t.paRdoT.Com." IN A
19:09:28.277204 RR 204.13.250.39 UDP 108b "t.paRdoT.Com." IN A
19:09:28.277641 RQ 204.13.251.39 UDP 48b "Pi-ue1.t.ParDot.COM." IN A
19:09:28.298930 RR 204.13.251.39 UDP 93b "Pi-ue1.t.ParDot.COM." IN A
19:09:28.299432 RQ 199.7.91.13 UDP 28b "." IN NS
19:09:28.326119 RR 199.7.91.13 UDP 1013b "." IN NS
19:09:28.327050 RQ 199.9.14.201 UDP 32b "coM." IN A
19:09:28.409613 RR 199.9.14.201 UDP 998b "coM." IN A
19:09:28.410103 RQ 192.26.92.30 UDP 39b "PArdoT.com." IN A
19:09:28.517585 RR 192.26.92.30 UDP 791b "PArdoT.com." IN A
19:09:28.518183 RQ 204.13.251.39 UDP 51b "pI-ue1-lbA2.PArDOt.Com." IN A
19:09:28.539995 RR 204.13.251.39 UDP 172b "pI-ue1-lbA2.PArDOt.Com." IN A
19:09:28.540652 RQ 199.7.91.13 UDP 28b "." IN DNSKEY
19:09:28.541039 RQ 199.7.83.42 UDP 42b "_Ta-4a5C-4F66." IN A
19:09:28.569550 RR 199.7.91.13 UDP 864b "." IN DNSKEY
19:09:28.572820 RQ 192.48.79.30 UDP 32b "COm." IN DNSKEY
19:09:28.585787 RR 199.7.83.42 UDP 714b "_Ta-4a5C-4F66." IN A
19:09:28.672963 RR 192.48.79.30 UDP 777b "COm." IN DNSKEY
19:09:28.673910 RQ 192.55.83.30 UDP 43b "AIrLiquiDe.com." IN DS
19:09:28.762043 RR 192.55.83.30 UDP 1013b "AIrLiquiDe.com." IN DS
19:09:28.763052 RQ 192.54.112.30 UDP 43b "AIrLIquidE.com." IN A
19:09:28.786458 RR 192.54.112.30 UDP 391b "AIrLIquidE.com." IN A
19:09:28.786918 RQ 194.2.192.5 UDP 43b "AIrLIQuiDE.Com." IN DNSKEY
19:09:28.904180 RR 194.2.192.5 UDP 687b "AIrLIQuiDE.Com." IN DNSKEY
19:09:28.905389 CR 127.0.0.1 UDP 347b "go.airliquide.com." IN A

go.airliquide.com.512.tap

19:27:28.595363 CQ 127.0.0.1 UDP 46b "go.airliquide.com." IN A
19:27:28.595655 RQ 192.203.230.10 UDP 28b "." IN NS
19:27:28.617346 RR 192.203.230.10 UDP 28b "." IN NS
19:27:28.617486 RQ 192.203.230.10 TCP 28b "." IN NS
19:27:28.676580 RR 192.203.230.10 TCP 1097b "." IN NS
19:27:28.677362 RQ 198.41.0.4 UDP 32b "cOM." IN A
19:27:28.702394 RR 198.41.0.4 UDP 256b "cOM." IN A
19:27:28.702533 RQ 198.41.0.4 TCP 32b "CoM." IN A
19:27:28.750095 RR 198.41.0.4 TCP 1163b "CoM." IN A
19:27:28.750484 RQ 192.26.92.30 UDP 43b "aIRlIqUiDe.cOM." IN A
19:27:28.857051 RR 192.26.92.30 UDP 391b "aIRlIqUiDe.cOM." IN A
19:27:28.857322 RQ 194.2.192.5 UDP 46b "GO.AIRliquIde.com." IN A
19:27:28.970729 RR 194.2.192.5 UDP 244b "GO.AIRliquIde.com." IN A
19:27:28.971363 RQ 192.54.112.30 UDP 39b "paRDot.coM." IN A
19:27:28.994832 RR 192.54.112.30 UDP 508b "paRDot.coM." IN A
19:27:28.994988 RQ 192.54.112.30 TCP 39b "PArdot.Com." IN A
19:27:29.038393 RR 192.54.112.30 TCP 791b "PArdot.Com." IN A
19:27:29.038883 RQ 208.78.71.39 UDP 42b "gO.ParDOt.cOM." IN A
19:27:29.061212 RR 208.78.71.39 UDP 116b "gO.ParDOt.cOM." IN A
19:27:29.061519 RQ 204.13.250.39 UDP 42b "pi.PArdoT.coM." IN A
19:27:29.393306 RR 204.13.250.39 UDP 99b "pi.PArdoT.coM." IN A
19:27:29.393637 RQ 204.13.250.39 UDP 46b "pi-Ue1.PaRDOT.COm." IN A
19:27:29.830265 RR 204.13.250.39 UDP 86b "pi-Ue1.PaRDOT.COm." IN A
19:27:29.830528 RQ 208.78.71.39 UDP 41b "t.PaRdOt.CoM." IN A
19:27:29.852919 RR 208.78.71.39 UDP 108b "t.PaRdOt.CoM." IN A
19:27:29.853181 RQ 208.78.71.39 UDP 48b "pI-uE1.t.PARDOT.cOM." IN A
19:27:29.874232 RR 208.78.71.39 UDP 93b "pI-uE1.t.PARDOT.cOM." IN A
19:27:29.874516 RQ 204.13.251.39 UDP 51b "pi-UE1-lba6.parDoT.COm." IN A
19:27:29.897978 RR 204.13.251.39 UDP 172b "pi-UE1-lba6.parDoT.COm." IN A
19:27:29.898335 RQ 192.36.148.17 UDP 28b "." IN NS
19:27:29.919242 RR 192.36.148.17 UDP 28b "." IN NS
19:27:29.919354 RQ 192.36.148.17 TCP 28b "." IN NS
19:27:29.966187 RQ 192.33.4.12 UDP 28b "." IN DNSKEY
19:27:29.966320 RQ 199.7.91.13 UDP 42b "_ta-4a5c-4f66." IN A
19:27:29.989560 RR 192.33.4.12 UDP 28b "." IN DNSKEY
19:27:29.989722 RQ 192.33.4.12 TCP 28b "." IN DNSKEY
19:27:29.994137 RR 199.7.91.13 UDP 353b "_ta-4a5c-4f66." IN A
19:27:29.994291 RQ 199.7.91.13 TCP 42b "_ta-4A5c-4f66." IN A
19:27:30.034947 RR 192.33.4.12 TCP 864b "." IN DNSKEY
19:27:30.037095 RQ 192.36.148.17 UDP 28b "." IN NS
19:27:30.037151 RR 199.7.91.13 TCP 714b "_ta-4A5c-4f66." IN A
19:27:30.058862 RR 192.36.148.17 UDP 28b "." IN NS
19:27:30.058970 RQ 192.36.148.17 TCP 28b "." IN NS
19:27:30.103705 RR 192.36.148.17 TCP 1097b "." IN NS
19:27:30.104066 RQ 192.5.5.241 UDP 32b "CoM." IN DS
19:27:30.125274 RR 192.5.5.241 UDP 367b "CoM." IN DS
19:27:30.125705 RQ 198.97.190.53 UDP 32b "COm." IN A
19:27:30.231716 RR 198.97.190.53 UDP 256b "COm." IN A
19:27:30.231856 RQ 198.97.190.53 TCP 32b "cOM." IN A
19:27:30.446141 RR 198.97.190.53 TCP 1163b "cOM." IN A
19:27:30.446625 RQ 192.43.172.30 UDP 32b "cOM." IN DNSKEY
19:27:30.469269 RR 192.43.172.30 UDP 486b "cOM." IN DNSKEY
19:27:30.469410 RQ 192.43.172.30 TCP 32b "coM." IN DNSKEY
19:27:30.512585 RR 192.43.172.30 TCP 777b "coM." IN DNSKEY
19:27:30.513082 RQ 192.26.92.30 UDP 43b "aIrLIQuIDe.coM." IN DS
19:27:30.618493 RR 192.26.92.30 UDP 510b "aIrLIQuIDe.coM." IN DS
19:27:30.618658 RQ 192.26.92.30 TCP 43b "AiRlIQUIDE.cOm." IN DS
19:27:30.830964 RR 192.26.92.30 TCP 1277b "AiRlIQUIDE.cOm." IN DS
19:27:30.831694 RQ 192.55.83.30 UDP 43b "AIRlIqUIdE.Com." IN A
19:27:30.914865 RR 192.55.83.30 UDP 391b "AIRlIqUIdE.Com." IN A
19:27:30.915488 RQ 194.2.192.5 UDP 43b "AirliqUidE.cOM." IN DNSKEY
19:27:31.026066 RR 194.2.192.5 UDP 43b "AirliqUidE.cOM." IN DNSKEY
19:27:31.026347 RQ 194.2.192.5 TCP 43b "aiRliqUide.cOM." IN DNSKEY
19:27:31.245535 RR 194.2.192.5 TCP 109b "aiRliqUide.cOM." IN DNSKEY
19:27:31.245760 RQ 58.65.12.66 UDP 43b "AiRlIquIde.COm." IN DNSKEY
19:27:31.533717 RR 58.65.12.66 UDP 43b "AiRlIquIde.COm." IN DNSKEY

helpful-commands.md

On the Host Machine

• docker build -t pidns <path-to-dockerfile> - Create the Docker image
• docker run --rm -it pidns /bin/bash - Create and run a Docker container based on the pidns Docker image

In the Docker Container

• nc -lkU /tmp/dnstap.sock - Create a socket for dnstap to connect to
  • -l - Listen for incoming connections
  • -k - Continue listening for other connections after the current connection is closed
  • -U - Create a named Unix Domain Socket
• unbound -d -c /usr/local/etc/unbound/unbound.conf

root.key

; autotrust trust anchor file
;;id: . 1
;;last_queried: 1500518597 ;;Wed Jul 19 19:43:17 2017
;;last_success: 1500518597 ;;Wed Jul 19 19:43:17 2017
;;next_probe_time: 1500522140 ;;Wed Jul 19 20:42:20 2017
;;query_failed: 0
;;query_interval: 3600
;;retry_time: 3600
.	172800	IN	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=1 [ ADDPEND ] ;;count=250 ;;lastchange=1499776649 ;;Tue Jul 11 05:37:29 2017
.	172800	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1404118431 ;;Mon Jun 30 01:53:51 2014

unbound.conf

server:
    edns-buffer-size: 512
    directory: "."
    auto-trust-anchor-file: "root.key"
    pidfile: ""
    logfile: ""
    chroot: ""
    username: ""
    log-replies: yes
    log-queries: yes
    num-threads: 1
    so-reuseport: yes
    verbosity: 2
    use-syslog: no
    log-time-ascii: yes
    do-ip4: yes
    do-ip6: yes
    do-udp: yes
    do-tcp: yes
    tcp-upstream: no
    port: 1053
    private-address: 192.168.0.0/16
    private-address: 172.16.0.0/12
    private-address: 10.0.0.0/8
    private-address: 169.254.0.0/16
    private-address: fd00::/8
    private-address: fe80::/10
    hide-identity: yes
    hide-version: yes
    harden-glue: yes
    harden-dnssec-stripped: yes
    use-caps-for-id: yes
    cache-min-ttl: 0
    cache-max-ttl: 0
    cache-max-negative-ttl: 0
    neg-cache-size: 0
    prefetch: no
    unwanted-reply-threshold: 10000
    do-not-query-localhost: yes
    val-clean-additional: yes
    val-sig-skew-max: 0
    val-sig-skew-min: 0
    ipsecmod-enabled: no
dnstap:
    dnstap-enable: yes
    dnstap-socket-path: "/tmp/dnstap.sock"
    dnstap-send-identity: yes
    dnstap-send-version: yes
    dnstap-log-client-query-messages: yes
    dnstap-log-client-response-messages: yes
    dnstap-log-forwarder-query-messages: yes
    dnstap-log-forwarder-response-messages: yes
    dnstap-log-resolver-query-messages: yes
    dnstap-log-resolver-response-messages: yes