Until yesterday I had only noticed 2 broken sites (or sites affected by buggy systemd-resolved implementation as some voices claim). Some Jira Plugin and Swedish Railways SJ.
Yesterday basically the Internet stopped working for me. After a while I remembered good old operator wisdom "It's always DNS". And it was DNS. Systemd-resolved logged "missing-key" for basically every query I tried.
So I switched from DoT 1.1.1.1 @Cloudflare to DoT 8.8.8.8 @Google and life continued. Until today that suddenly out of nowhere showed the same symptom.
Turning off DNSSEC verification avoids the problem. An internet search brought up https://github.com/NordSecurity/nordvpn-linux/issues/1853 which also links to another one. The timing seems to match with my observation, but I don't use NordVPN. Any clues?
standardhuman•44m ago
And a tool for checking readiness: https://dnstest.dev/ksk-2024/