DNS Infrastructure & Naming Conventions
Dig through SERVFAILs with EDE

Dig through SERVFAILs with EDE

5/25/2022 · Stanley Chiang, Marek Vavruša, Anbang Wen

What this post added

This post announces the expansion of Extended DNS Error (EDE) code support in Cloudflare's 1.1.1.1 DNS resolver. It details how EDE codes provide richer debugging information for SERVFAIL responses, specifically demonstrating their utility in diagnosing DNSSEC validation failures by returning specific error codes like 'DNSKEY Missing' and 'Unsupported DNSKEY Algorithm'. The post also lists the newly supported EDE codes and provides examples of how to use `dig` and `kdig` to observe these enhanced error messages.

Read the original post ↗