.AL 域名 DNSSEC 故障后，Cloudflare 用 EDE 33 告知验证绕过

精选理由

Cloudflare 搞了个新 DNS 错误码 EDE 33，DNS 出问题时能直接告诉你是不是 DNSSEC 验证被绕过了，对搞网络和运维的人挺有用。

AI 摘要

.AL 顶级域名因 DNSSEC 密钥轮换失败导致解析中断。Cloudflare 部署了 Negative Trust Anchor 恢复解析，同时推出了 EDE 33 错误码。1.1.1.1 DNS 服务在返回该代码时直接表明 DNSSEC 验证被绕过。这为用户提供了更透明的 DNS 错误信息。

.AL 域名 DNSSEC 故障后，Cloudflare 用 EDE 33 告知验证绕过 — 图片来源 · Cloudflare Blog

原文 · Cloudflare Blog

A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed

When a failed DNSSEC key rollover took down the .AL TLD, we deployed a Negative Trust Anchor to restore resolution. This time, though, clients didn't have to take our word for it: 1.1.1.1 returned EDE 33, a new DNS error code that signals directly in the response that DNSSEC validation was bypassed.

阅读原文