We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns. Ex: dig domain @tldns (Connection timed out;; no servers can be reached)

but dig domain @tldns +trace works. Will this connection timeouts cause intermittent failures or what is difference between +trace & notrace?

NOTE: The TLD registar were able to resolve the same TLD nameservers from their servers.

  • @Hema Can you add more details Nov 23, 2019 at 17:20
  • Unfortunately i cannot reveal the domain name. But the domain is failing to resolve the origin name intermittently and recovering back in 2 minutes. We are suspecting it as an issue with Top Level domain nameservers (.tw) . When we do dig mydomain @ tldnameserver it gives connection timeouts. But, dig mydomain @ tldnameservers +trace is resolved (gives nameservers of my domain as an answer). Ram, could you please let me know in which area I could add more information Nov 23, 2019 at 17:32
  • Is your firewall allowing port 53 UDP through?
    – davidgo
    Nov 23, 2019 at 17:37
  • I think you have purchased your domain from one of your hosting provider (Like Godaddy) and your server might in AWS.. Nov 23, 2019 at 17:39
  • 1
    "Unfortunately i cannot reveal the domain name." Then do not expect quick relevant replies. Domains are public, they are published to be queried by anyone... Nov 23, 2019 at 17:49

1 Answer 1


Three things you have to be careful

  1. Check whether your Name servers are pointing to Route 53.
  2. Add only the required records in your Route 53 DNS server.

Check here for Route 53 Records

  1. Also check whether your server is accessible via IP Address that you had given in your DNS Record

Not the answer you're looking for? Browse other questions tagged .