Global Alicdn not cached

Affected CDN:
g.alicdn[dot]com

Affected website:
www[dot]1688[dot]com
world[dot]taobao[dot]com

I believe this is a massive issue that should be rectified immediately as it renders the above website unusable. The CSS and javascript files cannot be loaded due to CDN used (which is g.alicdn[dot]com) not cached in cloudflare’s DNS. The websites works correctly when the DNS server is changed to Google DNS (8.8.8[dot]8).

Pinging g.cdns.com, I get the following result:
Pinging alicdn.com [115.238.23[dot]240] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 115.238.23[dot]240:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

1.1.1.1 doesnt resolve g.alicdn.com while Google’s DNS does.

These are the result:

C:\Users\chai1>nslookup -type=cname g.alicdn.com 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

Non-authoritative answer:
g.alicdn.com canonical name = g.alicdn.com.danuoyi.alicdn.com

C:\Users\chai1>nslookup -type=cname g.alicdn.com 8.8.8.8
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
g.alicdn.com canonical name = g.alicdn.com.danuoyi.alicdn.com

C:\Users\chai1>nslookup g.alicdn.com.danuoyi.alicdn.com 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

*** No internal type for both IPv4 and IPv6 Addresses (A+AAAA) records available for g.alicdn.com.danuoyi.alicdn.com

C:\Users\chai1>nslookup g.alicdn.com.danuoyi.alicdn.com 8.8.8.8
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: g.alicdn.com.danuoyi.alicdn.com
Addresses: 47.246.26.254
47.246.57.252
47.246.57.251
47.246.26.253

C:\Users\chai1>nslookup -class=chaos -type=txt id.server 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

Non-authoritative answer:
id.server text =

    "KUL"

Thanks for the assists, Mr Cop!

What could be next possible resolution to this issue?

Thanks for the report, sorry about that. This is an issue with query name minimization on alicdn.com subdomains, it returns AA bit on referrals while not being authoritative (which makes it a negative answer, not a referral). We’ll try to contact the provider and see if we can get a workaround in place.

It will work if the correct final delegation is cached somehow.

I mean when final delegation for danuoyi.alicdn.com is cached, subdomains underneath it will work.

@chai1998 could you check if it works now?

Yup, it does.

Appreciate the hard work!

Just wondering, what steps were taken to get this issue resolved?

Trying to reach out to domain owner and added a workaround for query name minimization to ignore AA bit in referrals (these are RFC2308 type 3 negative answer) for this particular case.