Domain Configuration Issue: Pending Nameserver Status for mysite.kz

[Aydar]

What is the name of the domain?

mysite.kz

What is the issue you’re encountering

I am writing to request assistance with resolving a domain configuration issue for my domain ****.kz, which I am trying to onboard to Cloudflare. Despite updating the nameservers at my domain registrar to the ones provided by Cloudflare, the domain status remains in “Pending Nameserver”, and several DNS tests indicate configuration conflicts. Below are the details of the issue:

What steps have you taken to resolve the issue?

1. Issue Summary

   1. I have updated the nameservers for ****.kz to:
      • nico.ns.cloudflare.com
      • ulla.ns.cloudflare.com
   2. However, after more than 24 hours, the domain status in the Cloudflare dashboard is still “Pending Nameserver.”
   3. DNS test results reveal the following issues:
      • The Parent Zone is still reporting the old nameservers:
      • ns1.ps.kz
      • ns2.ps.kz
      • ns3.ps.kz
      • The Local Zone reports the correct Cloudflare nameservers:
      • nico.ns.cloudflare.com
      • ulla.ns.cloudflare.com

2. Detailed Test Results

Below are the test results obtained from DNS propagation and configuration tools:
1. Nameserver Conflicts
• Parent Zone reports:
• 195.210.46.194 (ns1.ps.kz)
• 31.210.174.104 (ns2.ps.kz)
• 195.210.46.172 (ns3.ps.kz)
• Local Zone reports:
• 108.162.195.147 (nico.ns.cloudflare.com)
• 108.162.192.233 (ulla.ns.cloudflare.com)
2. SOA Record Issues
• Serial Numbers Do Not Match:
• Parent Zone SOA serial: 2024112901
• Cloudflare SOA serial: 2358309625
• SOA Serial Number Format Invalid:
• Cloudflare serial year 2358 is in the future.
• SOA Expire Value Out of Range:
• Cloudflare SOA expire value: 604800
• Recommended range: 1209600 - 2419200
3. Nameservers on the Same Subnet:
• The old nameservers (e.g., 195.210.46.*) are causing redundancy issues in some regions.

3. Actions Taken

   1. Updated the nameservers at my domain registrar (ps.kz) to nico.ns.cloudflare.com and ulla.ns.cloudflare.com.
   2. Verified the updated nameservers using DNS propagation tools.
   3. Contacted my registrar to ensure the Parent Zone updates were submitted correctly. They confirmed that the settings were applied, but the Parent Zone still reports the old nameservers.
   4. Cleared DNS caches and waited for more than 24 hours, but the issue persists.

4. Request for Assistance

   1. Please verify if there are any issues on Cloudflare’s side preventing the domain from being activated.
   2. Fix the SOA record issues, including:
      • Correcting the SOA serial number format.
      • Adjusting the SOA expire value to the recommended range.
   3. Advise if further actions are required on my part or by my domain registrar to resolve the nameserver propagation issue.

What feature, service or problem is this related to?

DNS records

Screenshot of the error

[cloonan]

Contact your domain registrar and ask them to remove DNSSEC