Google Cloud DNS未解析托管域名

Question

我正在使用一个域名的谷歌云DNS。但由于某些原因，它没有解决

root@ok:~# nslookup insurancegurukul.com
;; Got SERVFAIL reply from 1.1.1.1, trying next server
Server:     8.8.8.8
Address:    8.8.8.8#53

** server can't find insurancegurukul.com: SERVFAIL

root@ok:~# 

用于该域的名称服务器为

root@ok:~# whois  insurancegurukul.com -h whois.internic.net | grep -i "Name Server:"
   Name Server: NS-CLOUD-A1.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A2.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A3.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A4.GOOGLEDOMAINS.COM
root@ok:~# 

如果我检查其中一个名称服务器，则可以正确解析该域。

知道为什么域名不能解析吗？

root@ok:~# nslookup insurancegurukul.com NS-CLOUD-A2.GOOGLEDOMAINS.COM
Server:     NS-CLOUD-A2.GOOGLEDOMAINS.COM
Address:    216.239.34.106#53

Name:   insurancegurukul.com
Address: 148.66.135.207

root@ok:~# 

Answer 1

问题是由DNSSEC引起的。

域名的用户有"DNSSEC: signedDelegation“。

boby@ok-pc-01:~$ whois insurancegurukul.com
   Domain Name: INSURANCEGURUKUL.COM
   Registry Domain ID: 1715752075_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2018-11-15T16:35:06Z
   Creation Date: 2012-04-24T19:39:21Z
   Registry Expiry Date: 2025-04-24T19:39:21Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-CLOUD-A1.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A2.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A3.GOOGLEDOMAINS.COM
   Name Server: NS-CLOUD-A4.GOOGLEDOMAINS.COM
   DNSSEC: signedDelegation
   DNSSEC DS Data: 49912 8 1 45F45DDBA94938BF66B2D6E8759F923428F1FDCF
   DNSSEC DS Data: 18010 8 1 C0B1CC85941CFA008FD6905EE13813B65F917F63

这在域名注册表godaddy >域名> DNS > DNSSEC中被禁用

完成此操作后，DNS解析开始正常工作。