Name Servers taking for ever

have a lot of different client sites in Cloudflare and never had this problem I updated the name servers over 15 hours again and its still not picking it up DNS prop shows its half done, is it just a matter of waiting it out?
16 Replies
Erisa
Erisa2mo ago
whats the domain?
bhowe
bhoweOP2mo ago
DNS Propagation Checker - Global DNS Checker Tool
Instant DNS Propagation Check. Global DNS Propagation Checker - Check DNS records around the world.
Erisa
Erisa2mo ago
dara. and sage. are the nameservers that cloudflare tells you to set? They do seem to be set correctly from what I can see...
bhowe
bhoweOP2mo ago
yeah I did double check that
bhowe
bhoweOP2mo ago
No description
Erisa
Erisa2mo ago
Hm yeah then I'd think it's a waiting game, it might be that Godaddy is being really slow about propagating them to wherever cloudflare is querying from
bhowe
bhoweOP2mo ago
yeah I called them Just to check
Erisa
Erisa2mo ago
The docs at https://developers.cloudflare.com/dns/zone-setups/full-setup/setup/#verify-changes say to wait up to 24 hours While most changes take much much less than that, sometimes it can be a lot slower
bhowe
bhoweOP2mo ago
yeah thanks Erisa! Just weird Im assuming people in different spots of the world have a problem getting to the site
Chaika
Chaika2mo ago
DNSSEC is enabled/configured at your Registrar, GoDaddy, with an invalid configuration. ; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for anstarfire.com.) https://dnsviz.net/d/anstarfire.com/dnssec/ It looks like you had it enabled for a previous DNS Host. You’ll want to either outright disable DNSSEC at your registrar, or update your DNSSEC configuration with the information Cloudflare gives you: https://developers.cloudflare.com/dns/additional-options/dnssec/ These changes to your DNSSEC Configuration can be done at your Registrar, GoDaddy.
bhowe
bhoweOP2mo ago
thanks
Chaika
Chaika2mo ago
Yea, dnssec is the reason why only half the probes resolve/some people can visit but some can't, not all resolvers validate dnssec. All the big ones do, but not ISPs usually
bhowe
bhoweOP2mo ago
I deleted the DS records hopefully that will clear it up, cant really turn it on/off unless you are using thier name servers
Chaika
Chaika2mo ago
yup looks better. Google and Cloudflare Resolvers can resolve now, should only take a bit for the rest
bhowe
bhoweOP2mo ago
Thanks everyone

Did you find this page helpful?