Troubleshooting slow DNS lookup

[Tony Finch]

On Wed, 8 Dec 2010, Rianto Wahyudi wrote:
>
> - Does any one have a good example of prominent website that have
> DNSEC setup properly other than paypal?
> - Any example of dns record that send packet larger than 512 ?

; <<>> DiG 9.6.2-P2 <<>> +multiline +dnssec www.cam.ac.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27436
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 8, ADDITIONAL: 11

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;www.cam.ac.uk.         IN A

;; ANSWER SECTION:
www.cam.ac.uk.          77902 IN A 131.111.8.46
www.cam.ac.uk.          77902 IN RRSIG A 5 4 86400 20110103030147 (
                                20101204030850 34770 cam.ac.uk.
                                m80OuIdqTxhSGGCbpzoksKHjdSyfaS9eALUEE0X7dwnh
                                Z2jrhoGKaz2snJ3XbRUwebJSNSt7Ej4Mw50buRD77Rlj
                                kMumdYEmzYDSOewZ93CEE54nVzkGUQWYnVxsK1uRxSYK
                                vA== )

;; AUTHORITY SECTION:
cam.ac.uk.              4362 IN NS dns0.eng.cam.ac.uk.
cam.ac.uk.              4362 IN NS bitsy.mit.edu.
cam.ac.uk.              4362 IN NS ns2.ic.ac.uk.
cam.ac.uk.              4362 IN NS dns0.cl.cam.ac.uk.
cam.ac.uk.              4362 IN NS authdns1.csx.cam.ac.uk.
cam.ac.uk.              4362 IN NS authdns0.csx.cam.ac.uk.
cam.ac.uk.              4362 IN NS dns1.cl.cam.ac.uk.
cam.ac.uk.              81614 IN RRSIG NS 5 3 86400 20110105004959 (
                                20101206071226 34770 cam.ac.uk.
                                XuKl+Pwh7HenDLpOmoIssHE5ZOSug1b9+SLhIEdXtWDb
                                cB4zViCtCxJFz8yC41feAy5g2w+6Cc9RAiNexZf3E+PU
                                gQQd+w3UHn5VwNRJroDw4TKMAlsG7LcFvOYuPOKeXyIv
                                Jw== )

;; ADDITIONAL SECTION:
ns2.ic.ac.uk.           73348 IN A 155.198.142.82
dns0.cl.cam.ac.uk.      14636 IN A 128.232.0.19
dns0.cl.cam.ac.uk.      14636 IN AAAA 2001:630:200:ac70::d:a0
dns0.eng.cam.ac.uk.     162 IN A 129.169.8.8
dns1.cl.cam.ac.uk.      14636 IN A 128.232.0.18
authdns1.csx.cam.ac.uk. 162 IN A 131.111.12.37
authdns1.csx.cam.ac.uk. 162 IN AAAA 2001:630:200:8120::d:a1
ns2.ic.ac.uk.           73348 IN RRSIG A 5 4 86400 20101228214539 (
                                20101128205350 4743 ic.ac.uk.
                                VGps8nLXC3hA9vuNKD9K4unAxNeL02U4DQuBe9XRXbgk
                                OCRRQpgzxSNw8S+MS5H740EiquYCb4GhARRwP32Jpxya
                                tR+eGlersDIsGZGpH88mZ9zm8kReZaHNTv3+ENU0fDKt
                                LOou+4SfA+ca7/348PAKmRsR8EA/KpMFm6ofIYs= )
authdns1.csx.cam.ac.uk. 162 IN RRSIG A 5 5 86400 20110104233031 (
                                20101206031205 34770 cam.ac.uk.
                                JKDGs3+vXx+OkFGXQ+ZZZllikf4Q1ab9hiteQNthlQ6y
                                j7nFtg6HvoGqPFT6DicPeMLUCI68GLpWKJcuC+Z8z5IE
                                pMxnAKAjMKdlHibdRzTCT6JBu+4Q7w0opKo0cEI81i/G
                                8Q== )
authdns1.csx.cam.ac.uk. 162 IN RRSIG AAAA 5 5 86400 20101225154130 (
                                20101125184850 34770 cam.ac.uk.
                                CLGNGErElJOiOufuNl5M3q3rfZWlxxNzCIBHRf6hjuKS
                                1KfoAdhLuFJCTcYHj7seN0PqHeKi0cniKXIh1KPX9knk
                                TUrzfxettAcige0vgez7t8HliB3001Xie49hujWYiZvP
                                /g== )

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Dec  8 17:17:18 2010
;; MSG SIZE  rcvd: 1088


Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
HUMBER THAMES DOVER WIGHT PORTLAND: NORTH BACKING WEST OR NORTHWEST, 5 TO 7,
DECREASING 4 OR 5, OCCASIONALLY 6 LATER IN HUMBER AND THAMES. MODERATE OR
ROUGH. RAIN THEN FAIR. GOOD.