Question

我正在将Google Cloud DNS用于域。但是由于某种原因，它无法解决

root@ok:~# nslookup insurancegurukul.com
;; Got SERVFAIL reply from 1.1.1.1, trying next server
Server:     8.8.8.8
Address:    8.8.8.8#53

** server can't find insurancegurukul.com: SERVFAIL

root@ok:~#

用于该域的名称服务器是

root@ok:~# whois  insurancegurukul.com -h whois.internic.net | grep -i "Name Server:"
   Name Server: NS-CLOUD-A1.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A2.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A3.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A4.GOOGLEDOMAINS.COM
root@ok:~#

如果我检查这些名称服务器之一，则域名可以正确解析。

您知道为什么该域无法解析吗？

root@ok:~# nslookup insurancegurukul.com NS-CLOUD-A2.GOOGLEDOMAINS.COM
Server:     NS-CLOUD-A2.GOOGLEDOMAINS.COM
Address:    216.239.34.106#53

Name:   insurancegurukul.com
Address: 148.66.135.207

root@ok:~#

Answer 1

问题是由DNSSEC引起的。

域的域名具有“ DNSSEC：signedDelegation”。

boby@ok-pc-01:~$ whois insurancegurukul.com
   Domain Name: INSURANCEGURUKUL.COM
   Registry Domain ID: 1715752075_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2018-11-15T16:35:06Z
   Creation Date: 2012-04-24T19:39:21Z
   Registry Expiry Date: 2025-04-24T19:39:21Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-CLOUD-A1.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A2.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A3.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A4.GOOGLEDOMAINS.COM
   DNSSEC: signedDelegation
   DNSSEC DS Data: 49912 8 1 45F45DDBA94938BF66B2D6E8759F923428F1FDCF
   DNSSEC DS Data: 18010 8 1 C0B1CC85941CFA008FD6905EE13813B65F917F63

这在域registar godaddy>域> DNS> DNSSEC中已禁用

完成此操作后，DNS解析将开始正常工作。

Google Cloud DNS无法解析托管域

1 个答案: