/plushcap/analysis/cloudflare/dig-through-servfails-with-ede

Dig through SERVFAILs with EDE

What's this blog post about?

In 2020, Cloudflare introduced Extended DNS Error (EDE) Codes on its public DNS resolver 1.1.1.1 to provide additional context and information about errors encountered during DNS queries. EDE codes are based on the proposed IETF standard enabled by the Extension Mechanisms for DNS (EDNS). These codes return extra information about DNS or DNSSEC issues without altering the RCODE, making debugging easier. Now, Cloudflare has expanded its support to include more error code types and additional helpful information to further improve users' debugging experience. Users can leverage these EDE codes by running dig or kdig commands in their terminal. The new supported error codes provide valuable insights into the issues encountered during DNS queries, such as unsupported DNSKEY algorithms, missing DNSKEYs, expired signatures, and more. These enhancements aim to make troubleshooting DNS-related problems more efficient and user-friendly by providing detailed information about the errors encountered. Users can refer to Cloudflare's developer documentation for more details on the supported EDE codes and their meanings.

Company
Cloudflare

Date published
May 25, 2022

Author(s)
Stanley Chiang, Marek VavruĊĦa, Anbang Wen

Word count
673

Hacker News points
2

Language
English


By Matt Makai. 2021-2024.