Extended DNS Error Code 6 - DNSSEC Bogus, when I am using Cloudflare resolver 1.1.1.1

I need help identifying a problem when using Cloudflare resolver 1.1.1.1
This is an intermittent problem and only happens in a percentage of queries.
First, I start getting the error: Extended DNS Error Code 6 - DNSSEC Bogus
So after some time, I start getting the error: Extended DNS Error Code 16 - Censored
After a few seconds, DNS is resolved again, but the errors happen again after a while
One of the domains I get this error is marketplace.ifood.com.br
These errors only occur when I use Cloudflare resolver

Below are some errors returned when I use the “dig marketplace.ifood.com.br” command

;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 38885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; OPT=15: 00 00 (“…”)
; OPT=15: 00 06 (“…”)
;; QUESTION SECTION:
;marketplace.ifood.com.br. IN A

;; Query time: 20 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Jul 05 21:04:07 -03 2021
;; MSG SIZE rcvd: 65

; <<>> DiG 9.16.1-Ubuntu <<>> marketplace.ifood.com.br @1.1.1.1 +fail
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22349
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; OPT=15: 00 16 (“…”)
;; QUESTION SECTION:
;marketplace.ifood.com.br. IN A

;; Query time: 0 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Jul 05 21:01:10 -03 2021
;; MSG SIZE rcvd: 59

; <<>> DiG 9.16.1-Ubuntu <<>> marketplace.ifood.com.br @1.1.1.1 +fail
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 28412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; OPT=15: 00 00 (“…”)
;; QUESTION SECTION:
;marketplace.ifood.com.br. IN A

;; Query time: 20 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Mon Jul 05 21:01:12 -03 2021
;; MSG SIZE rcvd: 59

Hi Giovani,

Thanks for the report, we are able see the errors on our side. It looks like something related to upstream ratelimiting, we’ll investigate it further.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.