header
Broadband Speed Test Broadband Connection Speed Test
Forums
VoIP Test
Speed Test
TechDigger

MAIN MENU

 Home
 Account Manager
 Account Settings
 Private Messages
 Recommend Us
 Contact Us
 Search Site
 Privacy Policy
 Vistor Statistics
 Sitemap

 Advanced Speed Test
 GA - Capacity Test
 GA - Speed Test
 GA - High Speed Test
 GA - Route Qual Test
 TX - Capacity Test
 TX - Speed Test
 CA -CT- Capacity Test
 CA -CT- Quality Test
 TX -CT- Capacity Test
 TX -CT- Quality Test
 Test Reporting Tool
 Basic Speed Tests
 GA - Speed Test
 TX - Speed Test
 Mobile Speed Test
 Satellite Speed Test
 GA - Capacity Test
 GA - Speed Test
 GA - Route Qual Test
 Test Reporting Tool
 VoIP & IPTV Tests
 GA - VoIP Test
 GA - IPTV Test
 GA - Streaming Test
 GA - Route Qual Test
 TX - VoIP Test
 TX -CT- Voip Test
 Test Reporting Tool
 Firewall Test Tools
 General Port Check
 VoIP Port Check
 VPN Port Check
 FTP/DCC Port Check
 Citrix/RA Port Check
 IM Service Port Check
 Stream Video Check
 Stream Audio Check
 Gaming Port Check

 Tech Forums
 Support Forums
 Search Site
 User Polls (Vote)
 Tech Resources
 Tech Solutions
 Internet / Cable FAQs
 Zen OS Emulator
 Tech News
 Latest Tech
 Hot Tech Topics
 Submit News Tip
 Product Reviews
 Text Only Version

 Hurricane Tracking
 Full Tracking Page
 Interactive Track Map
 Active Watch Areas
 Satellite & Radar
 Forecast Models (Adv)
 Tropical Wave Tracker
 Wind Shear Maps
 Wind & Vorticity Mdls
 Air Mass Models
 Atlantic Panorama
 Weather & Radar
 National Weather
 Your Weather
 California Radar
 Florida Radar
 Missouri Radar
 Oklahoma Radar
 Science Labs
 Earth Sciences
 Space Weather

 Downloads & Links
 Fav Web Links
 Pics & Dig Art
 ShutterBug
 Fun & Games
 Flash Games
 Flash Games II
 Earthview Fun Portal

 ISPGeeks Extras
 Geeks File Crypt
 News Archives
 Tech News Archives
 Tech Top Viewed

CABLE & TELCO NEWS

» Media General, Dish Do Deal
Stations back on bird in 17 previously dark...

» Netflix Revives 'The Killing' for Shortened Final Season
Drama survives cancellation for a second...

» Pryor Eyeing Spectrum Oversight Hearing
Senator?s office confirms he wants to hold incentive auction oversight...

» Capitol Connection Founder Michael Kelley Dies at 73
Helped bring C-SPAN to official Washington in early days of...

» Primetime Emmy Awards to Use Online Voting in 2014
Two-year transition period in 2014 and...

» Video Streaming Continues To Gain Acceptance Among TV Viewers
Now the second most popular way for adults 18-49 to view primetime TV...

» Exclusive: Tribune Buys 'Celebrity Name Game'
Comedy game show to air in access in many...

» FXX Will Be Cable Home For 'The Simpsons'
Record-setting deal includes digital rights to historic...

» FCC Sets UHF TV Discount Comment Deadlines
Public, industry will have until Jan. 13 to weigh...

» Primetime Ratings: CBS Wins Thursday as 'Big Bang Theory,' 'Men' Improve
Parks and Recreation down slightly in return from four-week...

» Liberman Settles Indecency Complaint With FCC
Agrees to pay $110,000 over canceled Jose Luis Sin...

» Comedy Central Gives '@midnight' 40-Week Pickup
Chris Hardwick-hosted late-night talker to return in...

» Media General to FCC: Dish Should Be Sanctioned
Says the satellite operator is the one who has stymied...

» Padden Pitches Value Of Auction Payout
Says banking on future overlay service is speculative...

» BBG Urges Stronger UN Action On Protecting Journalists
Says the Security Council to be more aggressive in its...

» House Communications Subcommittee Plans FCC Oversight Hearing
Rep. Walden expects status of UHF discount will be up for...

» Microsoft Selects Rovi For TV Data On Xbox One
Its metadata will help provide unified search across pay TV, over-the-top and other...

» Journalist Les Brown Dies
Reported about television for The New York Times and...

» SpeedMedia Opens NYC Office
Will give digital service provider a bi-coastal...

» Fox News Hails Ailes Apprentices
Network Honors ninth graduating class with ceremony at NYC...

» Oxygen Promotes Brie Miranda Byrant To VP Post
Will oversee day-to-day original programing...

» Fox, American Express Partner With Twitter for Sponsored TV Content
First time scripted entertainment will part of Amplify...

» Wheeler to CTIA: Adopt Voluntary Phone Unlocking Regime By December
Says it is past time, and regulation could be looming absent...

» 'Daily Show's John Oliver to Host Weekly Series on HBO
Show will air on Sundays next...

» AMC Renews 'Hell on Wheels' for Expanded Fourth Season
Western drama improved in its move to...

TECH & TRADE NEWS


Sony Gaming
[ Sony Gaming ]

·Amazon Cloud Service Used in Sony Attacks
·Linux on the console? Sony sued for removing PS3 support
·Price cut leads to big month for Sony, PlayStation 3 sales
·3D capability product coming to PSP
·PSP Go battery life discussed, new cables confirmed
·Gaming performs better for Sony as it ekes out a profit
·PS3 firmware live, little touch-ups welcome (screenshots! Flash!)
·Microsoft, Sony offer new video-game gizmos
·Hacker allegedly breaks hi-def disc encryption

RECENT SHUTTERBUG

Clown Fish
Clown Fish


Macro Shot
Macro Shot


Cold Beef
Cold Beef


Foggy Fall
Foggy Fall




Photo Gallery

SITE SPONSOR



RANDOM SHUTTERBUG

Smile for the camera
Smile for the c ...


Resplendent Colors
Resplendent Col ...


nw_fall_img_0958
nw_fall_img_095 ...


The Dream
The Dream



Photo Gallery

ISPgeeks.com :: View topic - Need some serious DNS expertise to assist with issue
forums home faq search edit profile members list private messages usergroups

Need some serious DNS expertise to assist with issue Goto page 1, 2  Next
 

Post new topic   Reply to topic    ISPgeeks.com Forum Index -> Networking (Routers, Switches, Wifi) Support
View previous topic :: View next topic  
Author Message
NickBlade
Geek Wannabe
Geek Wannabe


Joined: Dec 29, 2012
Posts: 5
Location: Houston

PostPosted: Thu Jan 10, 2013 11:14 pm    Post subject: Need some serious DNS expertise to assist with issue Reply with quote

ISPgeeks, I am at my limit of DNS expertise and need some help.

Situation - ISP is ViaSat on their new 140 Gbps ViaSat-1 satellite. Throughput is good (over 15 Mbps) and latency is bad, but better than most satellites. The service is plagued with intermittent DNS issues. Symptoms manifest as browser pages not loading, accompanied by various error messages depending upon your browser flavor. Customers all over the US are reporting these issues and ViaSat (Exede, Wildblue) have admitted no issues. Most of the focus has been on the satellite modem, client OS config, and other on-premises issues. Plus there's been a lot of talk about how to remediate with host file entries, tweaking the DNS client, etc. But nobody has really looked at the network.


So ran a trace off the router and hooked directly to the modem. Here are the results:

The two DNS servers are 184.63.64.68 and .69. When browsing works, DNS trace looks good, BUT DNS responses from both name servers at different IPv4 addresses have the same source Ethernet address (00-A0-BC-35-BD-2F).

When pages fail to load with browser DNS errors, both name server respond to DNS queries with ResultCode = 2, "Server Failure". RFC1035 defines ResultsCode ServFail (RCODE = 2) as
Quote:
Server failure - The name server was unable to process this query due to a problem with the name server.


Additionally, when the .68 and .69 name servers respond to requets with ServFail, the source Ethernet address for both of them is different (00-A0-BC-22-A0-6E). Even more interesting is that 00-A0-BC is assigned to ViaSat themselves.

I have an idea of what might be happening.
But I'd like some other folks that might know more about DNS than I do to chime in.

Thoughts ... ????
Back to top
View user's profile Send private message
BHNtechXpert
Verified MSO Staff
Verified MSO Staff


Joined: Nov 03, 2011
Posts: 376

PostPosted: Thu Jan 10, 2013 11:27 pm    Post subject: Reply with quote

Assuming it's really a DNS issue can you change the DNS servers you point to...use OpenDNS or Google DNS servers?
Back to top
View user's profile Send private message Visit poster's website
NickBlade
Geek Wannabe
Geek Wannabe


Joined: Dec 29, 2012
Posts: 5
Location: Houston

PostPosted: Fri Jan 11, 2013 12:36 am    Post subject: Reply with quote

BHNtechXpert wrote:
Assuming it's really a DNS issue can you change the DNS servers you point to...use OpenDNS or Google DNS servers?


No, good question. That's the first thing I tried and based on OpenDNS tools, the ViaSat system is hijacking all DNS requests. This appears to be part of their scheme to decrease overall latency by reducing the number of satellite transits required for normal DNS protocol.

The harder part for me to understand is why both name servers with different IPv4 source addresses have the same Ethernet source address. Unless, the DNS servers are onboard the satellite and the two IPv4 addresses are aliased to a single NI. That is consistent with the prefix 00-0A-BC being assigned to them. But I've found a few posts saying that their DNS systems are ground-based. So not sure there...

Then the ServFail responses *always* come from a different Ethernet source address (also the same for both IPv4 name server addresses). That's gotta be significant, but I don't know what the ServFail message means here. Does it mean another DNS server downstream failed and these guys are reporting that back? Or does it mean that the source server sending the DNS reply failed itself...?

Here's a summary of a ten minute scan showing counts for the two different Ethernet source addresses:
Quote:

records from 00-A0-BC-35-BD-2F ---> 2605
number of ServFails --------------> 0
number from 184...68 -------------> 1126
number from 184...69 -------------> 1479

records from 00-A0-BC-22-A0-6E ---> 19
number of ServFails --------------> 19
number from 184...68 -------------> 10
number from 184...69 -------------> 9
Back to top
View user's profile Send private message
BHNtechXpert
Verified MSO Staff
Verified MSO Staff


Joined: Nov 03, 2011
Posts: 376

PostPosted: Fri Jan 11, 2013 12:53 am    Post subject: Reply with quote

God....

It has been years since I was involved in satellite based internet but it still applies today....they Mickey Mouse around with so much to get it to work its hard to tell exactly what is happening. They are probably hijacking at the gateway...I don't know if this will work or not but its worth a try. Why not setup a local DNS server on your network, point your PC's to that instead (that way nothing gets hijacked) because the translation will happen locally and all you are going to be pointing to outbound is an IP address therefor their DNS server isn't in the picture (in theory).
Back to top
View user's profile Send private message Visit poster's website
BHNtechXpert
Verified MSO Staff
Verified MSO Staff


Joined: Nov 03, 2011
Posts: 376

PostPosted: Fri Jan 11, 2013 12:55 am    Post subject: Reply with quote

I have a Synology NAS for example that handles all my DNS requests right on my local network...
Back to top
View user's profile Send private message Visit poster's website
BroadBand
Admin Geek
Admin Geek


Joined: Feb 19, 2009
Posts: 404
Location: Planet Earth

PostPosted: Mon Jan 14, 2013 11:27 pm    Post subject: Reply with quote

Any improvement or updates?
Back to top
View user's profile Send private message
Zenophobe
Geek Tech Expert
Geek Tech Expert


Joined: Jan 12, 2010
Posts: 1283
Location: Central Florida

PostPosted: Sun Jan 20, 2013 10:58 pm    Post subject: Reply with quote

BHNtechXpert wrote:
Assuming it's really a DNS issue can you change the DNS servers you point to...use OpenDNS or Google DNS servers?


Google 8.8.8.8
8.8.4.4

Open DNS 208.67.222.222
208.67.220.220

also check this program out:DNS Bench
_________________
Zenophobe
Back to top
View user's profile Send private message AIM Address MSN Messenger
BHNtechXpert
Verified MSO Staff
Verified MSO Staff


Joined: Nov 03, 2011
Posts: 376

PostPosted: Mon Jan 21, 2013 11:59 am    Post subject: Reply with quote

Zenophobe wrote:
BHNtechXpert wrote:
Assuming it's really a DNS issue can you change the DNS servers you point to...use OpenDNS or Google DNS servers?


Google 8.8.8.8
8.8.4.4

Open DNS 208.67.222.222
208.67.220.220

also check this program out:DNS Bench


He can't because they intercept the DNS requests regardless of settings. Zeno have you upgraded to the latest beta yet? They have a new module that turns your Syno into a DNS server (works great).
Back to top
View user's profile Send private message Visit poster's website
Zenophobe
Geek Tech Expert
Geek Tech Expert


Joined: Jan 12, 2010
Posts: 1283
Location: Central Florida

PostPosted: Mon Jan 21, 2013 9:20 pm    Post subject: Reply with quote

BHNtechXpert wrote:
Zenophobe wrote:
BHNtechXpert wrote:
Assuming it's really a DNS issue can you change the DNS servers you point to...use OpenDNS or Google DNS servers?


Google 8.8.8.8
8.8.4.4

Open DNS 208.67.222.222
208.67.220.220

also check this program out:DNS Bench


He can't because they intercept the DNS requests regardless of settings. Zeno have you upgraded to the latest beta yet? They have a new module that turns your Syno into a DNS server (works great).


I saw that but had not looked into it.. is it very daunting?
_________________
Zenophobe
Back to top
View user's profile Send private message AIM Address MSN Messenger
BHNtechXpert
Verified MSO Staff
Verified MSO Staff


Joined: Nov 03, 2011
Posts: 376

PostPosted: Mon Jan 21, 2013 9:29 pm    Post subject: Reply with quote

Nope... easy peasy...once you get it installed I can give you all the settings...then simply point your Asus router DNS settings to your local IP of the Synology....and done.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    ISPgeeks.com Forum Index -> Networking (Routers, Switches, Wifi) Support All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Internet Speed Test bandwidth test Voip Test | Site Map | IspGeekMap 
ISPgeeks Advertising | Broadband Speed Test
ISPgeeks Tech SolutionsInternet Speed Test
Hosting provided by Ubiquity Hosting Solutions

©2006-2013
 ISPGeeks.com - All rights reserved
ISPgeeks Privacy Policy
Page Generation: 0.15 Seconds
speedtest bandwidth speed test speed test
broadband diagnostics test internet speed dsl speed test