Domain Name System (DNS)

Secondary name servers out of sync

Resolved

Name servers successfully synchronized

Monitoring

IP address whitelist rolled back and zone transfers are in progress now. We expect the name servers to be up to date within one hour.

Investigating

The secondary name servers for all hosted zones were not updated during the DNSSEC key rollover. The old DNSSEC keys will remain valid for at least one week which means it will not affect validity and availability of the zones.
We suspect that the zone transfer initiated by the secondary name servers failed after a change in the IP address whitelisting a few weeks ago. Removal of the old IP addresses might now have caused the AXFR to fail.