The cause of a large-scale failure in the work of sites in the .ru domain zone was called the imperfection of the software
The reason for the site failure in the .ru domain zone was the imperfection of the DNSSEC software, reports the Coordinating Center for RU and Russian Domains.
“Yesterday, January 30, many Internet users encountered errors in DNS resolution of domains located in the .RU zone, which were caused by a failure when updating the Domain Name System Security Extension (DNSSEC) key,” the Coordination Center said.
Experts of the Internet Technical Center (TCI) and MSK-IX now know the reasons for the “collision of keys” that led to problems.
After the failure was detected, the updated keys were withdrawn, “the .RU zone was fully restored, which took about two hours, including the distribution of data through the DNS system,” the Coordination Center said.
Previously, a profile expert published a timeline of a network incident with the resolution of domain names in the RU zone. Media sources called the probable cause of this problem “actions of the zone administrator, the Coordination Center for .RU/.RF domains or its contractors.”
In the process, specialists of the Center for Monitoring and Management of the Public Communication Network (CMUSC) advised ISPs and communication operators to disable DNSSEC, although this is dangerous and may lead to problems with the appearance of fraudulent sites and an increase in phishing incidents.