931451 - bug*.bugzilla.mozilla.org not resolving

Status: RESOLVED FIXED

(Infrastructure & Operations :: DNS and Domain Registration, task)

Description

[Adrian J Fernandez [:Aj]]

Not sure if related to the recent DNSSEC changes to mozilla.org but seems some nameservers do not resolve anything under bug*.bugzilla.mozilla.org

Example:
http://dnssec-debugger.verisignlabs.com/bug920669.bugzilla.mozilla.org

Seems so far the following Nameserver don't return a record;
# comcast 
75.75.75.75
75.75.76.76

# google
8.8.8.8
8.8.4.4

Issue first noticed by user dveditz in irc. Originally thought as local issue.

Comment 1

[Adrian J Fernandez [:Aj]]

DNSSEC was removed for mozilla.org shortly after the bug was created.
Comcast name servers are now resolving the attachment URLs.

Google is still a bit behind and doesn't resolve yet.

Comment 2

[Brian Hourigan [:digi]]

Google nameservers are properly resolving bug*.bugzilla.mozilla.org

Comment 3

[Brian Hourigan [:digi]]

We have the following wildcard CNAME entries:

*.add-ons.mozilla.org.                    IN  CNAME static-redirect.zlb.phx.mozilla.net.
*.bugzilla-stage-next.mozilla.org.        IN  CNAME dm-bugstage03a.mozilla.org.
*.bugzilla.mozilla.org.                   IN  CNAME wild.bugzilla.dynect.mozilla.net.
*.khan.mozilla.org.                       IN  CNAME khan.mozilla.org.
*.konigsberg.mozilla.org.                 IN  CNAME konigsberg.nl.mozilla.org.
*.m.mozilla.org.                          IN  CNAME mana.mozilla.org.
*.pastebin.mozilla.org.                   IN  CNAME generic.zlb.phx.mozilla.net.
*.quality.mozilla.org.                    IN  CNAME quality.mozilla.org.
*.sm-stage01.labs.mozilla.org.            IN  CNAME sm-stage01.labs.mozilla.com.

Comment 4

[Brian Hourigan [:digi]]

Our DNS partner confirmed this was a result of a software bug in their dnssec
signer. We rolled back dnssec and wildcard cname entries are working, and we will 
verify this is fixed prior to re-enabling dnssec at a future point in time.