Cloudflare DNS ( 1.1.1.1) not working with .bd tld

.com.bd site or .gov.bd sites are not loading with cloudflare dns , but working fine with adguard dns

the .bd domain appears to have some expired RRSIGs at the moment.
https://dnsviz.net/d/btcl.gov.bd/dnssec/
https://dnssec-debugger.verisignlabs.com/btcl.gov.bd

Resolvers checking DNSSEC will report problems…

dig btcl.gov.bd @1.1.1.1

; <<>> DiG 9.10.6 <<>> btcl.gov.bd @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22534
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; OPT=15: 00 07 66 6f 72 20 44 4e 53 4b 45 59 20 62 64 2e 2c 20 69 64 20 3d 20 32 36 30 34 34 3a 20 52 52 53 49 47 20 62 64 2e 2c 20 65 78 70 69 72 61 74 69 6f 6e 20 3d 20 31 37 31 32 30 39 32 39 32 37 ("..for DNSKEY bd., id = 26044: RRSIG bd., expiration = 1712092927")
; OPT=15: 00 17 31 32 33 2e 34 39 2e 31 32 2e 31 31 32 3a 35 33 20 72 63 6f 64 65 3d 53 45 52 56 46 41 49 4c 20 66 6f 72 20 62 64 20 44 4e 53 4b 45 59 ("..123.49.12.112:53 rcode=SERVFAIL for bd DNSKEY")
;; QUESTION SECTION:
;btcl.gov.bd.			IN	A

;; ANSWER SECTION:
btcl.gov.bd.		1531	IN	A	123.49.12.155

;; Query time: 94 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Wed Apr 03 14:19:15 BST 2024
;; MSG SIZE  rcvd: 175



dig btcl.gov.bd @8.8.8.8

; <<>> DiG 9.10.6 <<>> btcl.gov.bd @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; OPT=15: 00 07 45 78 70 69 72 65 64 20 52 52 53 49 47 20 66 6f 75 6e 64 20 66 6f 72 20 67 6f 76 2e 62 64 2f 6e 73 65 63 20 28 6b 65 79 74 61 67 3d 31 39 33 32 30 29 ("..Expired RRSIG found for gov.bd/nsec (keytag=19320)")
;; QUESTION SECTION:
;btcl.gov.bd.			IN	A

;; Query time: 812 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Wed Apr 03 14:19:18 BST 2024
;; MSG SIZE  rcvd: 96
2 Likes

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.