Unable to open the train timetable information of Taiwan Railways website with Cloudflare DNS


#1

When setting Cloudflare DNS, I’m unable to visit the train timetable information of Taiwan Railways website.
http://twtraffic.tra.gov.tw/twrail

This site can’t be reached

In the past, I could visit it with Cloudflare DNS.
I don’t know when the issue started.
May you solve it?

Thanks.


#3

This isn’t an answer, but:

Google and PowerDNS can resolve it.

Unbound can’t.

DNSViz does not like it: http://dnsviz.net/d/twtraffic.tra.gov.tw/WwJYsg/dnssec/

I don’t know what’s happening.


#4

Yes, other DNS service can normally resolve it, like Google DNS, AdGuard DNS and so on.
Before, Cloudflare DNS also could resolve it.
But recently Cloudflare DNS started not to resolve it.
Maybe Cloudflare changed to use outmoded database during the period.
Please solve it.

Thanks.


#5

It seems like there is an error in the DNSSEC validation, which explains why 1.1.1.1 fails to resolve it.

1.1.1.1 is a validating resolver, so if DNSSEC is enabled on a domain and it fails makes the domain resolution fail.

You should contact the domain owners and make them fix it, it’s not a 1.1.1.1 issue.


#6

It’s intriguing that some validating implementations can handle it, though.

DNSViz reports so many different issues, it might take some thinking to figure out what different DNS servers are doing.

For example, a lot of them appear to be EDNS bugs in the authoritative servers; perhaps 1.1.1.1 rejects them for that reason.

(Unbound gets hung up on queries for twtraffic.tra.gov.tw. DS getting invalid DNSSEC responses.)


#7

This topic was automatically closed after 14 days. New replies are no longer allowed.