DNS remains inactive

Support
1

Netlify site name: flipstance.netlify.app
For this site I have added a custom domain: flipstance.com
I have added Netlify DNS and have changed the nameservers of my domain accordingly over 48 hrs ago, so Netlify can handle my DNS.
But I suspect that the DNS still is inactive and I don’t know how to activate it, after having been searching for many hours :man_shrugging: (therefor I can’t generate SSL certs either)

This is what my lookups look like:

$ ping flipstance.com
ping: cannot resolve flipstance.com: Unknown host
$ whois flipstance.com | grep -i "name server"
   Name Server: DNS1.P04.NSONE.NET
   Name Server: DNS2.P04.NSONE.NET
   Name Server: DNS3.P04.NSONE.NET
   Name Server: DNS4.P04.NSONE.NET
Name Server: dns1.p04.nsone.net
Name Server: dns2.p04.nsone.net
Name Server: dns3.p04.nsone.net
Name Server: dns4.p04.nsone.net
$ dig flipstance.com NS +trace | tail -n 6

; <<>> DiG 9.10.6 <<>> flipstance.com NS +trace
;; global options: +cmd
;; Received 28 bytes from 192.168.x.y#53(192.168.x.y) in 35 ms

DNS Lookup Network Tools: DNS,IP,Email
| A | flipstance.com | 54.161.234.33 Unknown (AS14618) | 20 sec |
| A | flipstance.com | 18.213.222.111Unknown (AS14618) | 20 sec |

And this is what my Netlify DNS looks like:

Scherm­afbeelding 2024-03-18 om 15.47.17
Scherm­afbeelding 2024-03-18 om 15.47.17916×1142 68.5 KB

2

hi @planetcrypton

I checked the whois for flipstance.com and noticed that DNSSEC is enabled for the domain. Netlify DNS doesn’t support DNSSEC which means all DNS queries will fail unless DNSSEC is disabled or the DNS service for this domain is moved to a different provider that supports DNSSEC.

We have more information available in this troubleshooting guide!

$  whois flipstance.com | grep "DNSSEC"
   DNSSEC: signedDelegation
   DNSSEC DS Data: 62510 13 2 878C404DD03263FE9CF8493FB640F8C95985855AE0F6C11D5D1730E465EE9F8F
   DNSSEC DS Data: 62510 13 4 5EE2EF8C964A34355C9B75E3701EC5E6C430D496B2614CF2A6AF21D4E61CF60823FF1007C0051781EC5275B94D7616C2
   DNSSEC DS Data: 62510 13 1 404A1DF49F731A89C052F370F38069D0A1A737DB
DNSSEC: signedDelegation

- rc

1 Like
3

Ok… thank you for pointing that out @rcmaples!
I think I’ll move the DNS back to where it was, and just point my A records to Netlify in stead.
If I do that, I just delete the DNS setup for my domain in Netlify and adjust the DNS once that has moved?

4

Yes @planetcrypton that it correct.

1 Like