DNSSEC problem after switching

Hey,

Today we migrated a domain from another registrar to our own, and moved it to Cloudflare. But now the website doesn't work. I think its a DNSSEC problem, dnsviz.net says so. I disabled DNSSEC, which should fix it. But I still can't access the site.

What can I do to remedy this?

JJori Hey, Today we migrated a domain from another registrar to our own, and moved it...

Chaika•10/5/23, 3:30 PM

You moved it to Novuss/Realtime Registrar?
It still says DNSSEC is enabled

DNSSEC: yes
and the TLD's Nameservers are still serving dnskey/ds records.

You disabled DNSSEC at the registrar?

JoriOP•10/5/23, 3:31 PM

I just re-enabled it a couple minutes ago

JoriOP•10/5/23, 3:31 PM

But yes, I disabled it before

JoriOP•10/5/23, 3:31 PM

I'll disable it again

JoriOP•10/5/23, 3:32 PM

'tis disabled now

Chaika•10/5/23, 3:32 PM

Why did you re-enable it? If you were trying to update it with CF's values, it looks like it's the wrong algorithm and such

JoriOP•10/5/23, 3:33 PM

I tried re-enabling it with cloudflare's values

Chaika•10/5/23, 3:33 PM

If you're expecting things to change faster: These changes are super slow, usually it's advised that it could take up to 24 hours or so. In my experience it's more like 30 minutes max, but it also depends on the TLD & Registrar, some are slower then others

JoriOP•10/5/23, 3:33 PM

Alright

JoriOP•10/5/23, 3:34 PM

So just to confirm, dnssec is the issue here, and disabling it should fix it

Chaika•10/5/23, 3:34 PM

From then end user's point of view it can be even longer with dns cache and such, the ttl on the dnssec records is an hour

JJori So just to confirm, dnssec is the issue here, and disabling it should fix it

Chaika•10/5/23, 3:34 PM

yes, or updating it with the right values. I would disable it first and get it working without it, then move onto trying to enable if you want

JoriOP•10/5/23, 3:34 PM

Alright

Chaika•10/5/23, 3:37 PM

I see you disabled it according to whois, still gotta wait for .nl/TLD's nameservers to stop serving it
dig ds tentijesport.nl @ns1.dns.nldig ds tentijesport.nl @ns1.dns.nl
and then cache at DNS Resolvers like 1.1.1.1 should eventually expire and start working again

JoriOP•10/5/23, 3:37 PM

Ah, okay

JoriOP•10/5/23, 3:37 PM

So it should work if we just wait a little bit

JoriOP•10/5/23, 4:02 PM

All the DNSSEC checkers/tools show it's good now

JoriOP•10/5/23, 4:02 PM

Still can't load the page locally, but that's probably gonna take a while

JoriOP•10/5/23, 4:02 PM

Thanks for the help!

DNSSEC problem after switching

Similar Threads

Similar Threads

Similar Threads