{"id":4626,"date":"2011-02-15T12:06:04","date_gmt":"2011-02-15T20:06:04","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=4626"},"modified":"2020-05-06T10:31:44","modified_gmt":"2020-05-06T17:31:44","slug":"a-lesson-in-humility-courtesy-dnssec","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/","title":{"rendered":"A Lesson in Humility Courtesy DNSSEC"},"content":{"rendered":"<p style=\"font-weight: 300;\">At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.\u00a0Often just a few queries with dig would tell me what was wrong, especially if the issue was a common one.\u00a0Lame delegation? Easy.\u00a0Forgotten trailing dot?\u00a0Piece of cake.<\/p>\n<p style=\"font-weight: 300;\">Last week, though, one of our excellent support engineers here at Infoblox asked for help with a DNSSEC validation failure.\u00a0A customer was trying to look up the A records for atmos.pds.nasa.gov and was getting a SERVFAIL error in reply.\u00a0I could reproduce the error, which is sometimes half the battle, but couldn&#8217;t immediately determine its cause.\u00a0Here&#8217;s what appeared in my nameservers syslog output:<\/p>\n<pre>Feb 11 21:33:42bigmo named[67012]: lame-servers: info: error (no valid RRSIG) resolving'atmos.pds.nasa.gov\/DS\/IN': 198.116.4.181#53<\/pre>\n<pre>Feb 11 21:33:42bigmo named[67012]: lame-servers: info: error (no valid RRSIG) resolving'atmos.pds.nasa.gov\/DS\/IN': 198.116.4.189#53<\/pre>\n<pre>Feb 11 21:33:42bigmo named[67012]: lame-servers: info: error (no valid RRSIG) resolving'atmos.pds.nasa.gov\/DS\/IN': 198.116.4.185#53<\/pre>\n<pre>Feb 11 21:33:42bigmo named[67012]: lame-servers: info: error (no valid DS) resolving'atmos.pds.nasa.gov\/A\/IN': 198.116.4.181#53<\/pre>\n<pre>Feb 11 21:33:42bigmo named[67012]: dnssec: info: validating @0x8373000: <a href=\"http:\/\/atmos.pds.nasa.gov\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">atmos.pds.nasa.gov<\/a> A: bad cache hit (<a href=\"http:\/\/atmos.pds.nasa.gov\/DS\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">atmos.pds.nasa.gov\/DS<\/a>)<\/pre>\n<pre>Feb 11 21:33:42 bigmo named[67012]:lame-servers: info: error (broken trust chain) res<\/pre>\n<p style=\"font-weight: 300;\">Two excellent online tools for checking DNSSEC setup,\u00a0<a href=\"https:\/\/community.infoblox.com\/dnsviz.net\">DNSViz<\/a> and\u00a0<a href=\"http:\/\/dnssec-debugger.verisignlabs.com\/\">VeriSign Labs DNSSEC Debugger<\/a>, didnt uncover any obvious problems withthe chain of trust.\u00a0But mydiscrete queries showed some interesting results:<\/p>\n<ul style=\"font-weight: 300;\">\n<li>The authoritative name servers for nasa.gov and pds.nasa.gov were the same.<\/li>\n<li>nasa.gov was signed.<\/li>\n<li>A query for ANY records for pds.nasa.gov returned an SOA record, NS records, and an A record, but no DNSSEC records.\u00a0So pds.nasa.gov existed, but didnt appear to be signed.\u00a0Thats okay, of course.\u00a0In this case, the parent zone indicates that the child zone isn&#8217;t signed by omitting a DS record for the child zone.<\/li>\n<li>An explicit query for a DNSKEY record for pds.nasa.gov returned NOERROR, indicating that pds.nasa.gov existed (of course), but that it owned no DNSKEY records.\u00a0This confirmed that pds.nasa.gov wasn&#8217;t signed.<\/li>\n<li>An explicit query for DS records for pds.nasa.gov returned NXDOMAIN, meaning pds.nasa.gov didn&#8217;t exist!\u00a0That really threw me. Of course pds.nasa.gov existed &#8212; we just saw that it did in the results fromthe previous queries!<\/li>\n<\/ul>\n<p style=\"font-weight: 300;\">Luckily, the smart folks on the DNS Operations mailing list (<a href=\"mailto:dns-operations@lists.dns-oarc.net\">dns-operations@lists.dns-oarc.net<\/a>) figured out what was going on.\u00a0The parent zone, nasa.gov, was missing delegation for pds.nasa.gov.\u00a0When I queried the name server for ANYrecords, the name server responded in its role as an authoritative pds.nasa.gov name server, giving me the SOA, NS and A records it found.\u00a0Ditto when I asked for DNSKEYrecords.\u00a0But when I asked the same name server for pds.nasa.govs DS records &#8212; which could only be stored in the nasa.gov zone &#8212; the name server responded in its role as an authoritative name server for nasa.gov, saying that there was no such domain name as pds.nasa.gov (because there was no delegation in that zone).\u00a0If I&#8217;d thought to set the DNSSEC OK bit in the query, I also would have seen the NSEC records that proved that the domain name didn&#8217;t exist.\u00a0In that context, anyway.<\/p>\n<p style=\"font-weight: 300;\">The administrator of nasa.gov fixed this just as soon as it was reported to her, and now everybody&#8217;s happy.<\/p>\n<p style=\"font-weight: 300;\">Except me.\u00a0I&#8217;m left feeling uneasy.\u00a0First, I&#8217;m facing the stark realization that my troubleshooting skills have atrophied alarmingly, and that I need to review my DNSSEC theory, but I&#8217;m also beginning to see how tricky troubleshooting DNSSEC validation issues can be.\u00a0Of course, this particular problem likely won&#8217;t occur often &#8212; its a corner case &#8212; but there will be plenty of others.\u00a0How often will folks who encounter these problems throw up their hands in frustration and tear out their DNSSEC configurations?\u00a0Who will they turn to when they need help?<\/p>\n<p style=\"font-weight: 300;\">For my part, I&#8217;m going to start following the DNS Operations mailing list more closely and put more time in at the command line.\u00a0And I&#8217;d suggest that those of you starting out with DNSSEC subscribe to the list, too.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.\u00a0Often just a few queries with dig would tell me what was wrong, especially if the issue was a common one.\u00a0Lame delegation? Easy.\u00a0Forgotten trailing dot?\u00a0Piece of cake. Last week, though, one of our excellent support engineers [&hellip;]<\/p>\n","protected":false},"author":178,"featured_media":1892,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2],"tags":[30,229,16,15],"class_list":{"0":"post-4626","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"tag-dns","9":"tag-dnssec","10":"tag-infoblox","11":"tag-security","12":"entry"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>A Lesson in Humility Courtesy DNSSEC<\/title>\n<meta name=\"description\" content=\"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Lesson in Humility Courtesy DNSSEC\" \/>\n<meta property=\"og:description\" content=\"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2011-02-15T20:06:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-05-06T17:31:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"413\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cricket Liu\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cricket Liu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/\"},\"author\":{\"name\":\"Cricket Liu\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\"},\"headline\":\"A Lesson in Humility Courtesy DNSSEC\",\"datePublished\":\"2011-02-15T20:06:04+00:00\",\"dateModified\":\"2020-05-06T17:31:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/\"},\"wordCount\":640,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/april-14-1.jpg\",\"keywords\":[\"DNS\",\"DNSSEC\",\"Infoblox\",\"Security\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/\",\"name\":\"A Lesson in Humility Courtesy DNSSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/april-14-1.jpg\",\"datePublished\":\"2011-02-15T20:06:04+00:00\",\"dateModified\":\"2020-05-06T17:31:44+00:00\",\"description\":\"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/april-14-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/april-14-1.jpg\",\"width\":600,\"height\":413,\"caption\":\"Podcast Episode #5: Carrier Grade NAT, Security, and IPv6\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/a-lesson-in-humility-courtesy-dnssec\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"A Lesson in Humility Courtesy DNSSEC\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb6b62b1b99a7cbcd7c528d5763778d5\",\"name\":\"Cricket Liu\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/cricket-new-96x96.jpg\",\"caption\":\"Cricket Liu\"},\"description\":\"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/cricket-liu\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"A Lesson in Humility Courtesy DNSSEC","description":"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/","og_locale":"en_US","og_type":"article","og_title":"A Lesson in Humility Courtesy DNSSEC","og_description":"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.","og_url":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/","og_site_name":"Infoblox Blog","article_published_time":"2011-02-15T20:06:04+00:00","article_modified_time":"2020-05-06T17:31:44+00:00","og_image":[{"width":600,"height":413,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg","type":"image\/jpeg"}],"author":"Cricket Liu","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cricket Liu","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/"},"author":{"name":"Cricket Liu","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5"},"headline":"A Lesson in Humility Courtesy DNSSEC","datePublished":"2011-02-15T20:06:04+00:00","dateModified":"2020-05-06T17:31:44+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/"},"wordCount":640,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg","keywords":["DNS","DNSSEC","Infoblox","Security"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/","url":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/","name":"A Lesson in Humility Courtesy DNSSEC","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg","datePublished":"2011-02-15T20:06:04+00:00","dateModified":"2020-05-06T17:31:44+00:00","description":"At one time, when my job actually entailed managing nameservers and namespace, I was pretty good at troubleshooting DNS problems.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/april-14-1.jpg","width":600,"height":413,"caption":"Podcast Episode #5: Carrier Grade NAT, Security, and IPv6"},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/security\/a-lesson-in-humility-courtesy-dnssec\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.infoblox.com\/blog\/category\/security\/"},{"@type":"ListItem","position":3,"name":"A Lesson in Humility Courtesy DNSSEC"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/bb6b62b1b99a7cbcd7c528d5763778d5","name":"Cricket Liu","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/cricket-new-96x96.jpg","caption":"Cricket Liu"},"description":"Cricket is one of the world\u2019s leading experts on the Domain Name System (DNS) and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an internet consulting and training company, Acme Byte &amp; Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including \u201cDNS and BIND,\u201d one of the most widely used references in the field, now in its fifth edition.","url":"https:\/\/www.infoblox.com\/blog\/author\/cricket-liu\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/178"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=4626"}],"version-history":[{"count":3,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4626\/revisions"}],"predecessor-version":[{"id":4629,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/4626\/revisions\/4629"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/1892"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=4626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=4626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=4626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}