We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns. Ex: dig domain @tldns (Connection timed out;; no servers can be reached)

but dig domain @tldns +trace works. Will this connection timeouts cause intermittent failures or what is difference between +trace & notrace?

NOTE: The TLD registar were able to resolve the same TLD nameservers from their servers.

  • @Hema Can you add more details – Manikandan Ram Nov 23 '19 at 17:20
  • Unfortunately i cannot reveal the domain name. But the domain is failing to resolve the origin name intermittently and recovering back in 2 minutes. We are suspecting it as an issue with Top Level domain nameservers (.tw) . When we do dig mydomain @ tldnameserver it gives connection timeouts. But, dig mydomain @ tldnameservers +trace is resolved (gives nameservers of my domain as an answer). Ram, could you please let me know in which area I could add more information – Bandari Hema Nov 23 '19 at 17:32
  • Is your firewall allowing port 53 UDP through? – davidgo Nov 23 '19 at 17:37
  • I think you have purchased your domain from one of your hosting provider (Like Godaddy) and your server might in AWS.. – Manikandan Ram Nov 23 '19 at 17:39
  • 1
    "Unfortunately i cannot reveal the domain name." Then do not expect quick relevant replies. Domains are public, they are published to be queried by anyone... – Patrick Mevzek Nov 23 '19 at 17:49

Three things you have to be careful

  1. Check whether your Name servers are pointing to Route 53.
  2. Add only the required records in your Route 53 DNS server.

Check here for Route 53 Records

  1. Also check whether your server is accessible via IP Address that you had given in your DNS Record

Not the answer you're looking for? Browse other questions tagged or ask your own question.