Vodafone Cable DNS resolution issues

Forums › One NZ (including Farmside) › Vodafone Cable DNS resolution issues

1 | 2 | 3 | 4 | 5 | 6

BDFL - Memuneh
81343 posts

Uber Geek
+1 received by user: 42690

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1079764 4-Jul-2014 09:16

This is normal behaviour it seems. From previous experiences when things get bad there's a concerted move to be quiet about it - see what happened with whole Netflix/cache problem before.

Sorry Vodafone folks, nothing personal, just an observation on how the company behaves.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

mattbush

784 posts

Ultimate Geek
+1 received by user: 102
Inactive user

#1079780 4-Jul-2014 09:47

All a bit sad really as when UFB hits most of us will kiss goodbye to VF ....

freitasm

BDFL - Memuneh
81343 posts

Uber Geek
+1 received by user: 42690

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1080780 4-Jul-2014 10:25

I have asked Vodafone Comms people for something we can pass it on. I got an ACK so will wait for an update and post later.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

MarkFleming

4 posts

Wannabe Geek

#1080819 4-Jul-2014 11:33

One 'solution' (funny that we should have to come up with solutions to Vodafone's network problems!) is to run split DNS if you can.

I stick 'default' stuff out OpenDNS' servers (which do content filtering for the kiddies), and anything that relies on geolocation (akamai, microsoft, steam etc) through the Telstraclear DNS servers.

It seems to work pretty well, in that I haven't noticed too many DNS issues myself this week...

freitasm

BDFL - Memuneh
81343 posts

Uber Geek
+1 received by user: 42690

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1081138 4-Jul-2014 19:10

Ok, received some information from Vodafone on this... Basically, yes the DNS resolvers are under excessive load, which seems to be the result of open CPEs being used as part of amplification attacks.

The blocking of DNS resolvers to anyone outside of Vodafone's own network is a move to mitigate this. Vodafone is proactively contacting people who have open DNS resolvers in their CPE configurations.

Here is the report:

The HFC DNS servers are experiencing degraded performance issues due to excessive load. The excessive load is a side effect of DNS amplification attacks being conducted on the Internet.

The reason that these attacks are impacting the HFC DNS servers is that a number of HFC customer devices are misconfigured and are acting as open DNS resolvers. The HFC DNS servers are also currently configured as open resolvers. Open resolvers are used to carry out DNS amplification attacks and this is the cause of the excessive load impacting the HFC DNS servers. It is important to note that these attacks are not specifically targeting either the HFC customer or the HFC DNS servers.

To resolve this issue, the HFC DNS servers are being reconfigured to only respond to queries from Vodafone customer networks. Also all customers with misconfigured devices are being contacted and given instructions in how to disable the open resolver configuration. As this will take time a number of network mitigations are being put in place as well, such as rate-limiting of DNS queries and enabling Denial of Service mitigation features within the network.

I would say this issue should be resolved/mitigated after today (Vodafone tech folks originally posted a message in the NZNOG mailing list saying the changes would happen on the 3rd July). More information in this thread.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

mattbush

784 posts

Ultimate Geek
+1 received by user: 102
Inactive user

#1081160 4-Jul-2014 19:41

Thanks for the update..but even if fixed it will only be temp.!

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

MadEngineer

4719 posts

Uber Geek
+1 received by user: 2730

Trusted

#1081897 6-Jul-2014 16:57

they don't seem to have done it yet?

C:\Users\Madengineer>nslookup
Default Server: BoB.Orcon
Address: 10.1.1.1

> server 203.109.129.67
Default Server: ns1.ihug.co.nz
Address: 203.109.129.67

> google.com
Server: ns1.ihug.co.nz
Address: 203.109.129.67

Non-authoritative answer:
Name: google.com
Addresses: 2404:6800:4006:803::1007
74.125.237.102
74.125.237.105
74.125.237.104
74.125.237.96
74.125.237.99
74.125.237.103
74.125.237.98
74.125.237.101
74.125.237.110
74.125.237.100
74.125.237.97

You're not on Atlantis anymore, Duncan Idaho.

insane

3346 posts

Uber Geek
+1 received by user: 1022

ID Verified

Trusted

2degrees

Subscriber

#1081916 6-Jul-2014 17:42

I think you're looking up against the wrong servers

Earlier on page 1 they said to use 203.97.78.43 & 203.97.78.44.

Not sure why their authoritative name servers allow recursive lookups....

freitasm

BDFL - Memuneh
81343 posts

Uber Geek
+1 received by user: 42690

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1081920 6-Jul-2014 17:50

From my Snap connection:

Default Server: fritz.box
Address: 192.168.178.1

> Default Server: ns1.acld.clix.net.nz
Address: 203.97.78.43

> Server: ns1.acld.clix.net.nz
Address: 203.97.78.43

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
>

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

mattbush

784 posts

Ultimate Geek
+1 received by user: 102
Inactive user

#1082137 6-Jul-2014 23:18

Its still very quiet....

freitasm

BDFL - Memuneh
81343 posts

Uber Geek
+1 received by user: 42690

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1082743 7-Jul-2014 20:25

This is still happening, not solved at all:

@freitasm and lo and behold I get it again.. with another random DNS failure. @vodafoneNZ

— Owen Evans (@buildmaster) July 7, 2014

@freitasm I thought @vodafoneNZ were supposed to have fixed the DNS problems?? "Oops! Google Chrome could not find http://t.co/LF1fAg1NUu"

— Stuart Maxwell (@stuartm) July 7, 2014

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

AliExpress

Shop now on AliExpress (affiliate link).

ningj

2 posts

Wannabe Geek
+1 received by user: 1

#1087788 12-Jul-2014 16:21

Seems ok now and have switched back as they are much faster than OpenDNS & Google DNS alternatives.
I wrote a simple bash script to check 98 or so common internet sites and haven't seen any problems since yesterday.

jimbob79

673 posts

Ultimate Geek
+1 received by user: 165

#1090999 17-Jul-2014 20:22

Are there still a problem with VF DNS servers? I got two colleagues who are complaining about their home internet for the last few days saying that pages are incomplete i.e. no CSS pages loaded.

Also tonight I started to have the same problem on a few US websites and for the first time in three years am getting major jitter on my VoIP 2talk connection on the upstream. But I doubt the VoIP jitter is related to DNS.

Having to fail over to OpenDNS.

sbiddle

30853 posts

Uber Geek
+1 received by user: 10000

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1091006 17-Jul-2014 20:35

jimbob79: Are there still a problem with VF DNS servers? I got two colleagues who are complaining about their home internet for the last few days saying that pages are incomplete i.e. no CSS pages loaded. Also tonight I started to have the same problem on a few US websites and for the first time in three years am getting major jitter on my VoIP 2talk connection on the upstream. But I doubt the VoIP jitter is related to DNS.

Having to fail over to OpenDNS.

Are you on cable?

I've heard some speculation in the last week or so that the unlimited plans have literally trashed some nodes of the network.. If true it's exactly why the US doesn't have unlimited internet any longer on cable, DOCSIS can struggle when a small number of people smash a shared medium.

citrofia

10 posts

Wannabe Geek
+1 received by user: 2

#1092187 19-Jul-2014 22:00

NikT:

The correct DNS servers for Vodafone/exTCL Cable should be 203.97.78.43 & 203.97.78.44.

The Paradise DNS servers, 203.96.152.4 & 203.96.152.12, were previously used as well.

I've been on TC cable in Chch for 5-6 years and have had increasing DNS resolution issues (ie 'server not found') over the last 9 months. Just checked the router and it seems it's still using the Paradise DNS (96.152) even though I upgraded to Fast 50 and the DPC3008 last month. Admittedly I wasn't home when the new modem was installed, and the router was locked, but the installer left no information about checking/changing the DNS addresses.
From what I've read here it looks like these should have been changed sometime ago even if I stayed on the old service.
I obviously missed the memo.

1 | 2 | 3 | 4 | 5 | 6