Name Servers taking for ever

have a lot of different client sites in Cloudflare and never had this problem I updated the name servers over 15 hours again and its still not picking it up DNS prop shows its half done, is it just a matter of waiting it out?

Erisa•3/5/25, 5:18 PM

whats the domain?

bhoweOP•3/5/25, 5:18 PM

https://anstarfire.com/

bhoweOP•3/5/25, 5:19 PM

https://www.whatsmydns.net/#A/anstarfire.com

DNS Propagation Checker - Global DNS Checker Tool

Instant DNS Propagation Check. Global DNS Propagation Checker - Check DNS records around the world.

Erisa•3/5/25, 5:20 PM

dara.dara. and sage.sage. are the nameservers that cloudflare tells you to set? They do seem to be set correctly from what I can see...

bhoweOP•3/5/25, 5:20 PM

yeah

bhoweOP•3/5/25, 5:20 PM

I did double check that

bhoweOP•3/5/25, 5:20 PM

Screenshot_2025-03-05_at_11.20.49_AM.png

Erisa•3/5/25, 5:21 PM

Hm yeah then I'd think it's a waiting game, it might be that Godaddy is being really slow about propagating them to wherever cloudflare is querying from

bhoweOP•3/5/25, 5:21 PM

yeah I called them

bhoweOP•3/5/25, 5:22 PM

Just to check

Erisa•3/5/25, 5:22 PM

The docs at https://developers.cloudflare.com/dns/zone-setups/full-setup/setup/#verify-changes say to wait up to 24 hours
While most changes take much much less than that, sometimes it can be a lot slower

bhoweOP•3/5/25, 5:22 PM

yeah thanks Erisa!

bhoweOP•3/5/25, 5:22 PM

Just weird Im assuming people in different spots of the world have a problem getting to the site

Bbhowe https://anstarfire.com/

Chaika•3/5/25, 5:24 PM

DNSSEC is enabled/configured at your Registrar, GoDaddy, with an invalid configuration.

; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for anstarfire.com.)

https://dnsviz.net/d/anstarfire.com/dnssec/

It looks like you had it enabled for a previous DNS Host.

You’ll want to either outright disable DNSSEC at your registrar, or update your DNSSEC configuration with the information Cloudflare gives you:
https://developers.cloudflare.com/dns/additional-options/dnssec/

These changes to your DNSSEC Configuration can be done at your Registrar, GoDaddy.

bhoweOP•3/5/25, 5:24 PM

thanks

Chaika•3/5/25, 5:25 PM

Yea, dnssec is the reason why only half the probes resolve/some people can visit but some can't, not all resolvers validate dnssec. All the big ones do, but not ISPs usually

bhoweOP•3/5/25, 5:28 PM

I deleted the DS records hopefully that will clear it up, cant really turn it on/off unless you are using thier name servers

Bbhowe I deleted the DS records hopefully that will clear it up, cant really turn it on...

Chaika•3/5/25, 5:33 PM

yup looks better. Google and Cloudflare Resolvers can resolve now, should only take a bit for the rest

bhoweOP•3/5/25, 5:33 PM

Thanks everyone

Name Servers taking for ever

Similar Threads

Similar Threads

Similar Threads