<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Afternoon Laban <div class=""><br class=""></div><div class="">The issue of .KE is being addressed by IANA and Kenic team at the moment </div><div class="">we will know the impact on KIXP traffic once the issue is resolved </div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div apple-content-edited="true" class="">
<div class=""><div style="orphans: 2; widows: 2;" class=""><div class="">Barry Apudo Macharia </div><div class="">Technical Manager </div><div class="">Telecommunication Service Providers Association of Kenya/Kenya Internet Exchange Point </div><div class="">Pilot: +254 (20) 2245036 </div><div class="">Cel. +254 (720) 899750 </div><div class="">Email: <a href="mailto:barry@kixp.or.ke" class="">barry@kixp.or.ke</a> , <a href="mailto:barry@tespok.co.ke" class="">barry@tespok.co.ke</a> </div><div class="">website:www.tespok.co.ke </div><div class="">Save a tree. Don't print this e-mail unless it's really necessary </div></div><div style="orphans: 2; widows: 2;" class=""><br class=""></div></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On 31 Mar 2015, at 13:34, Laban Mwangi <<a href="mailto:lmwangi@gmail.com" class="">lmwangi@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div class=""><div class=""><div class=""><div class=""><div class="">Hi all,<br class=""><br class=""></div> Looks like .KE is having DNSSEC issues [1], [2]. For a lot of folks behind validating recursors, .ke is practically down. From my end, ongoing impact seems to be severe (as expected):<br class="">* API calls to .ke. endpoints (Telcos, Banks etc),<br class="">* .ke. websites and the most visible being <a href="http://google.co.ke/" class="">google.co.ke</a>. <a href="http://google.com/" class="">google.com</a> redirects .com. services to it's country level domain. So www, maps... are down for me. I ended up using *.<a href="http://google.co.tz/" class="">google.co.tz</a>.<br class=""></div><div class="">* Infrastructure & services (SMTP, whois, news services....)<br class=""></div><div class=""><br class=""><br class="">Poking around with dig, I suspect that the issue started at around 2015-03-31 0400 UTC.<br class=""></div><br class="">Could anyone give a bump to KENIC folks?<br class=""><br class=""></div>I really hope they conduct and publish a post-mortem.<br class=""></div><div class=""><br class="">PS: It would also be interesting to see KIXP traffic graphs for the day [3]<br class=""></div><div class=""><br class=""></div><div class=""><br class="">1. <a href="http://dnssec-debugger.verisignlabs.com/www.google.co.ke" target="_blank" class="">http://dnssec-debugger.verisignlabs.com/www.google.co.ke</a><br class="">2. <a href="http://dnsviz.net/d/www.google.co.ke/dnssec/" target="_blank" class="">http://dnsviz.net/d/www.google.co.ke/dnssec/</a><br class="">3. <a href="https://cacti.tespok.co.ke/cacti/" class="">https://cacti.tespok.co.ke/cacti/</a><br class=""><br class=""><br class=""></div>Cheers,<br class=""></div>Laban<br class=""></div>
_______________________________________________<br class="">afnog mailing list<br class=""><a href="https://www.afnog.org/mailman/listinfo/afnog" class="">https://www.afnog.org/mailman/listinfo/afnog</a></div></blockquote></div><br class=""></div></body></html>