NS changed at registrar to CF servers, but Cloudflare doesn't see them

lior3 · June 22, 2022, 10:25am

Hello,
I add a new domain on my registrar (Hurricane Electric), and wanted to have it managed by Cloudflare, so I followed the procedure and changed the NS records to the two CF nameservers. Three day later, Cloudflare still complains the NS records on my registrar are incorrect, but, when checking, they seem correct, and I can even request (with dig) from my local computer, I get the correct CF servers.

$ dig -t ns austrashet.eu.org 

; <<>> DiG 9.16.15-Ubuntu <<>> -t ns austrashet.eu.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46476
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;austrashet.eu.org.             IN      NS

;; ANSWER SECTION:
austrashet.eu.org.      6811    IN      NS      dana.ns.cloudflare.com.
austrashet.eu.org.      6811    IN      NS      sam.ns.cloudflare.com.

Thanks for your help,
Luc

domjh · June 22, 2022, 10:38am

They don’t appear to be set correctly as the authoritative nameservers for that domain but are set on Hurricane Electric’s nameservers.

~ % dig ns austrashet.eu.org +trace

; <<>> DiG 9.10.6 <<>> ns austrashet.eu.org +trace
;; global options: +cmd
.			82823	IN	NS	k.root-servers.net.
.			82823	IN	NS	f.root-servers.net.
.			82823	IN	NS	l.root-servers.net.
.			82823	IN	NS	b.root-servers.net.
.			82823	IN	NS	c.root-servers.net.
.			82823	IN	NS	j.root-servers.net.
.			82823	IN	NS	a.root-servers.net.
.			82823	IN	NS	m.root-servers.net.
.			82823	IN	NS	i.root-servers.net.
.			82823	IN	NS	h.root-servers.net.
.			82823	IN	NS	d.root-servers.net.
.			82823	IN	NS	e.root-servers.net.
.			82823	IN	NS	g.root-servers.net.
.			82823	IN	RRSIG	NS 8 0 518400 20220705050000 20220622040000 47671 . Vydnz2wv+NPE4OviUgFUE3BD88Q6WsSBuV/+Zg3qUFsBrGXZkMlmyeV+ +0+1dmkY7Zy7loapsHbLczPj9Q2zjJpAZMvh2hDg+ivBV6On8EYb17ej fNpdo3mrGdi5721nrslgAxErPRvJ7fJ+CaYPLdhQWDd4syyS1PsFd2St srYsOnViB3+LqftYkuANWz5yDrpjmTTC90rxop18oHV/KvLrV2a201DR uyprwolDZD/bGbl+ICf5eqq0WsCkt+EapTdSJ8EfCaUILkvz8qQwkwRq TWj9jvLSzvNslkFG0rl/J5goiZJ0ueJuJ9MjAr/gxeySM5bZjQdoSc7C ybRCPg==
;; Received 525 bytes from fe80::ced4:2eff:fee2:a825%11#53(fe80::ced4:2eff:fee2:a825%11) in 12 ms

org.			172800	IN	NS	d0.org.afilias-nst.org.
org.			172800	IN	NS	b2.org.afilias-nst.org.
org.			172800	IN	NS	a0.org.afilias-nst.info.
org.			172800	IN	NS	b0.org.afilias-nst.org.
org.			172800	IN	NS	a2.org.afilias-nst.info.
org.			172800	IN	NS	c0.org.afilias-nst.info.
org.			86400	IN	DS	26974 8 2 4FEDE294C53F438A158C41D39489CD78A86BEB0D8A0AEAFF14745C0D 16E1DE32
org.			86400	IN	RRSIG	DS 8 1 86400 20220705050000 20220622040000 47671 . o7TKQSDC63tjm6fDXeCNEM6DI0mHObulOA3OxFmevMIAFwXPolAwLTsX 7XDxVnYKCNiStZpWnvbZuTqoHPid5sObHlGkzLe+Kgrd0oElbIDjebZ/ DqeTjHE8ZPxdWlzfkpIPaY+C6YeRrBykFy5l6NcjoHPEHKdutz6lTon2 PfDWulbRQx1OLvvkUTlhbLdzIZhLO4B5FiXoJEy3QT6osd8rCS/an5Yu LVAn+fYwipvSLBWTT9CzopwMBf0R1tW30EAaKBCeojWh2QQ62eMIWxdC ZALr6nLlpKwu6vaqNGns4fArChXMfV5znft5rnhq8XJMWZS56sOAcKLT e1hdAQ==
;; Received 789 bytes from 192.36.148.17#53(i.root-servers.net) in 41 ms

eu.org.			3600	IN	NS	ns1.eriomem.net.
eu.org.			3600	IN	NS	ns1.eu.org.
eu.org.			3600	IN	NS	hobbes.bsd-dk.dk.
eu.org.			3600	IN	NS	auth1.dns.elm.net.
eu.org.			3600	IN	NS	ns3.keltia.net.
eu.org.			3600	IN	NS	ns.bortzmeyer.eu.org.
eu.org.			3600	IN	NS	gra.wolfhugel.eu.
eu.org.			3600	IN	NS	dns4.gandi.net.
eu.org.			3600	IN	NS	wombat.billaud.eu.org.
eu.org.			3600	IN	DS	36406 8 2 4C6CA5CE24B94EEB26CFB2BB9594DCD553088C4AE22A9F98BC5CA5FC 36A6F4D2
eu.org.			3600	IN	RRSIG	DS 8 2 3600 20220708152843 20220617142843 41346 org. mMYrhPpW802mtBM1V9ubHF+YgiuYeJeKk9HEAQSZyFSNP321kbLg489n J0IDodqrsIyRhY27L0CQdjrbut0TMCKlFn9VnEFaj5ei+HUkWyFsGRjp PwDQGfB+cQtxogYEmPTZbheYcnG9y5OGg3OTO9U2UCKbRtkG+47qjBM8 2fM=
;; Received 631 bytes from 199.19.53.1#53(c0.org.afilias-nst.info) in 118 ms

AUSTRASHET.EU.ORG.	86400	IN	NS	NS1.HE.NET.
AUSTRASHET.EU.ORG.	86400	IN	NS	NS3.HE.NET.
AUSTRASHET.EU.ORG.	86400	IN	NS	NS2.HE.NET.
28VAVQB2R2VNFP7PISBV3QFII7R2B6P0.EU.ORG. 7200 IN NSEC3 1 1 10 FADAF001 296HKQLO49DC33E0OMOPF8G8A8BBHGOJ  A NS SOA MX TXT AAAA SSHFP RRSIG DNSKEY NSEC3PARAM
28VAVQB2R2VNFP7PISBV3QFII7R2B6P0.EU.ORG. 7200 IN RRSIG NSEC3 8 3 7200 20220702200111 20220605052245 7860 eu.org. AzZqK6RH21W+vr3Z2Nw0t8BO4f38tGR6FBL7cGH30vj/bBMczL0dM17z xlYlue4qNc9mHDI7QJzfQihslnKWesiGXJwhutGquJyGh3Xe7LaDP6pu NgFHINHUTO9o3sDt0Z8nKoOYpwR1gfpetqiAj9rUNLkGa0cRhtt9MIUn x+g=
HV9M60DAH0F0O1BH8O0VD7HIHRS91FO2.EU.ORG. 7200 IN NSEC3 1 1 10 FADAF001 HVRI27DAAL4GG5UJLJS5CORQ9E7HK91Q  NS DS RRSIG
HV9M60DAH0F0O1BH8O0VD7HIHRS91FO2.EU.ORG. 7200 IN RRSIG NSEC3 8 3 7200 20220630184205 20220605052245 7860 eu.org. NTEyy2PWS8HJBklWfiQRvbwPyUKu4Fxbg+IIDsLucdeMa08WpTVyaCU9 7Qu12Kr8PqUgiq1jLlvpJGmDt8zUcxLv5V8WCzVEB1ilydZZLVdwuSxt T71tkX6m0K3Ncd0xaivUILA8WTOr16cgjfCC+6hS+ARHd4jVqOOZF9HG gY0=
;; Received 622 bytes from 2001:19f0:7402:6b6:5400:1ff:fe9e:d9fe#53(ns1.eu.org) in 14 ms

austrashet.eu.org.	86400	IN	NS	sam.ns.cloudflare.com.
austrashet.eu.org.	86400	IN	NS	dana.ns.cloudflare.com.
;; Received 100 bytes from 2001:470:300::2#53(NS3.HE.NET) in 13 ms