Cannot resolve my site use 1.1.1.1

Zero Trust 1.1.1.1
1

sorry for my bad english,I’m from Hong Kong

I have a free dynamic DNS hostname service tplinkdns.com come from my TPLink router,I use static IP,and use this service made a hostname redirected to my IP.

and I have raspberry PI 3B+,install ubuntu + pihole (enable DNSSEC,upstream DNS use 127.0.0.1#5353) + dnscrypt-proxy

in dnscrypt-proxy config file,I use 1.1.1.1 (Cloudflare) to resolve hostname,everything alright,except I can’t resolve my site,I use dig @1.1.1.1 can’t resolve my site.

but I use 8.8.8.8,it can resolve.

google DNS 8.8.8.8 can resolve my site but Cloudflare DNS 1.1.1.1 can’t

that’s mean use 1.1.1.1,I can’t access waiyin.tplinkdns.com when I use my pihole + dnscrypt-proxy, use 8.8.8.8 I can access.

I wan’t to use 1.1.1.1,but why I have this strange problem?

please see the attach picture

49
491586×1866 664 KB

thank you.

2

The DNS configuration of tplinkdns.com seems to be broken.

3

thank you,I forgort to test only resolve tplinkdns.com,but why 8.8.8.8 can resolve my hostname but 1.1.1.1 can’t?

I just try to use opendns dig my site it can resolve my hostname,also work.

anyway I just curious want to know why it have this problem,thanks for your help.

4

:wave: @i553041,

Cloudflare is a DNSSEC validating resolver. The DNSSEC is broken as @sandro mentioned. If you fix that it should resolve.

-OG

5

Google might use some cached values. No idea, guessing.

The only thing I can tell so far is the entire domain does not resolve.