In the domestic domain zone there are currently serious problems with the resolution of domain names. Currently, users report a lack of access to the sites and services of large banks, marketplaces and other services frequently used by Russians, including Yandex and VKontakte.. Messages about difficulties accessing sites and problems with applications began to arrive en masse at approximately 18:30 Moscow time.
Image source: Pixabay
The problems are reported to be caused by a breakdown of DNSSEC, a set of extensions to the DNS protocol designed to ensure the reliability and integrity of data.. A temporary solution is to connect to services by IP address. The problem affected the services of various providers in the Russian Federation, since the digital signatures of domains in the RU zone were signed incorrectly.
DNSSEC technology is extremely important, it adds digital signatures to the DNS, which provide confirmation of the authenticity of DNS records and ensure the integrity of data in the DNS, which is a prerequisite for the reliable identification of web resources on the network. Thanks to this technology in the RU domain zone, the likelihood of IP address spoofing during hacker attacks is reduced to zero.
MegaFon confirmed to the Durov Code resource that they were recording a decrease in traffic volumes, but the problem did not arise on the operator’s side. A similar comment came from Beeline, as well as Tele2. Our site also noticed a sharp decline in traffic, but by the time the news was published it had already begun to recover.
According to media reports, a failure occurred at the ANO “Coordination Center for the National Internet Domain”, and its specialists are already troubleshooting. “We are working on a technical problem, I can’t talk now,” Andrei Vorobyov, director of the Domain Coordination Center, told reporters.
Updated:
Vorobyov gave a more detailed comment to the Fontanka publication: “ The coordination center for the .RU/.РФ domains reports that a technical problem has arisen affecting the .RU zone associated with the global DNSSEC infrastructure. Specialists from the Internet Technical Center and MSK-IX are working to eliminate it. The problem has now been resolved for NSDI subscribers. Restoration work is underway.”