Skip to content

Commit 7c676b8

Browse files
Create reporting-issues.mdx (#18905)
* Create reporting-issues.mdx * Update reporting-issues.mdx * Fix broken link to DNS over TLS --------- Co-authored-by: Rebecca Tamachiro <[email protected]>
1 parent a5c8b4c commit 7c676b8

File tree

1 file changed

+139
-0
lines changed

1 file changed

+139
-0
lines changed
Lines changed: 139 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,139 @@
1+
---
2+
pcx_content_type: troubleshooting
3+
title: Reporting Issues with Cloudflare's DNS Resolver
4+
sidebar:
5+
order: 3
6+
head:
7+
- tag: title
8+
content: Reporting Issues with Cloudflare's DNS Resolver
9+
slug: 1.1.1.1/troubleshooting
10+
11+
---
12+
13+
import { Render } from "~/components"
14+
15+
This guide will help you diagnose and resolve common issues with Cloudflare's DNS Resolver. Before proceeding with manual troubleshooting steps, you can use our [diagnostic tool](https://one.one.one.one/help/) to automatically gather relevant information.
16+
17+
## Name resolution issues
18+
19+
### Linux/macOS
20+
21+
```sh
22+
# Test DNS resolution
23+
dig example.com @1.1.1.1
24+
dig example.com @1.0.0.1
25+
dig example.com @8.8.8.8
26+
27+
# Check connected nameserver
28+
dig +short CHAOS TXT id.server @1.1.1.1
29+
dig +short CHAOS TXT id.server @1.0.0.1
30+
31+
# Optional: Network information
32+
dig @ns3.cloudflare.com whoami.cloudflare.com txt +short
33+
```
34+
35+
### Windows
36+
37+
```sh
38+
# Test DNS resolution
39+
nslookup example.com 1.1.1.1
40+
nslookup example.com 1.0.0.1
41+
nslookup example.com 8.8.8.8
42+
43+
# Check connected nameserver
44+
nslookup -class=chaos -type=txt id.server 1.1.1.1
45+
nslookup -class=chaos -type=txt id.server 1.0.0.1
46+
47+
# Optional: Network information
48+
nslookup -type=txt whoami.cloudflare.com ns3.cloudflare.com
49+
```
50+
51+
**Note:** The network information command reveals your IP address. Only include this in reports to Cloudflare if you are comfortable sharing this information.
52+
53+
For additional analysis, you can generate a [DNSViz](http://dnsviz.net/) report for the domain in question.
54+
55+
## Connectivity and routing issues
56+
57+
Before reporting connectivity issues:
58+
59+
1. Search for existing reports from your country and ISP.
60+
2. Run traceroutes to both Cloudflare DNS resolvers.
61+
62+
### Linux/macOS
63+
64+
```sh
65+
# Basic connectivity tests
66+
traceroute 1.1.1.1
67+
traceroute 1.0.0.1
68+
69+
# If reachable, check nameserver identity
70+
dig +short CHAOS TXT id.server @1.1.1.1
71+
dig +short CHAOS TXT id.server @1.0.0.1
72+
73+
# TCP connection tests
74+
dig +tcp @1.1.1.1 id.server CH TXT
75+
dig +tcp @1.0.0.1 id.server CH TXT
76+
```
77+
78+
### Windows
79+
80+
```sh
81+
# Basic connectivity tests
82+
tracert 1.1.1.1
83+
tracert 1.0.0.1
84+
85+
# If reachable, check nameserver identity
86+
nslookup -class=chaos -type=txt id.server 1.1.1.1
87+
nslookup -class=chaos -type=txt id.server 1.0.0.1
88+
89+
# TCP connection tests
90+
nslookup -vc -class=chaos -type=txt id.server 1.1.1.1
91+
nslookup -vc -class=chaos -type=txt id.server 1.0.0.1
92+
```
93+
94+
## DNS-over-TLS (DoT) troubleshooting
95+
96+
### Linux/macOS
97+
98+
```sh
99+
# Test TLS connectivity
100+
openssl s_client -connect 1.1.1.1:853
101+
openssl s_client -connect 1.0.0.1:853
102+
103+
# Test DNS resolution over TLS
104+
kdig +tls @1.1.1.1 id.server CH TXT
105+
kdig +tls @1.0.0.1 id.server CH TXT
106+
```
107+
108+
### Windows
109+
110+
Windows does not include a standalone DoT client. You can test TLS connectivity using OpenSSL after installing it manually.
111+
112+
## DNS-over-HTTPS (DoH) troubleshooting
113+
114+
### Linux/macOS
115+
116+
```sh
117+
curl -H 'accept: application/dns-json' 'https://cloudflare-dns.com/dns-query?name=cloudflare.com&type=AAAA'
118+
```
119+
120+
### Windows
121+
122+
```powershell
123+
(Invoke-WebRequest -Uri 'https://cloudflare-dns.com/dns-query?name=cloudflare.com&type=AAAA').RawContent
124+
```
125+
126+
## Common issues
127+
128+
### First hop failures
129+
130+
If your traceroute fails at the first hop, the issue is likely hardware-related. Your router may have a hardcoded route for 1.1.1.1. When reporting this issue, include:
131+
132+
- Router make and model
133+
- ISP name
134+
- Any relevant router configuration details
135+
136+
## Additional resources
137+
138+
- [1.1.1.1 DNS Resolver homepage](https://1.1.1.1)
139+
- [DNS-over-TLS documentation](/1.1.1.1/encryption/dns-over-tls/)

0 commit comments

Comments
 (0)