Sara Dickinson

@JsBergbau If you enable logging you will get detailed reports from stubby of any connection failures (see below for output from the stubby command line logs when one server has...

Two comments: 1) It is better to use `dnssec: GETDNS_EXTENSION_TRUE` in Stubby as this will hard fail if there are any problems with obtaining or refreshing the root trust anchor...

@wtoorop candidate for the getdns 1.6.1 release

I see intermittent SERVFAIL via Stubby for both the domains you mention with failures about 1 time in 10 for me - that is when using TLS as the transport...

Haven't done this myself but I found this older issue: https://github.com/getdnsapi/stubby/issues/245 relating to building 1.6.0 successfully which might be some help?

Thanks @pemensik LGTM

What I notice in the log is that it appears the far end is shutting the connection and a quick test shows that Cloudflare seems to be using a 7s...

@abelbeck I've seen that with Quad9 too but didn't know Cloudflare has used such a small value recently. I agree that the current algorithm is rather fixed and uses some...

@abelbeck Thanks very much for the feedback. I've updated the title to reflect what needs doing on this issue. We might want to consider an explicit option for preferring IPv6...

@earthsojourner Thanks for the note - I will add something into the configuration to warn folks of this issue!