Skip to content

URGENT HELP - AWS Route 53 not pointing to IP as desired

0

Due to AWS Route 53 service disruptions which caused our websites go offline for a couple of hours - I restarted my main ec2 instance in panic to solve the issue... but that changed the public ipv4 of instance and for the subdomain, I've updated A record pointing to new public IPv4 address of ec2 instance... when I test out the ipv4 address directly, it works but doesn't connect when connected using the subdomain. It's been many hours I updated the IP address... how long should that take to propagate... It's crucial because it's the main backend server. I don't know how to fix this... can't figure out whether it's propagation delay or a problem within internal configuration of ec2 instance.

asked 2 years ago283 views

4 Answers
0
Accepted Answer

When I lookup the name servers for datamintelligence.com, I don't see a Route53 delegation set, but rather a CloudFlare delegation set.

% dig -t NS datamintelligence.com +short
etta.ns.cloudflare.com.
vick.ns.cloudflare.com.

There are also no name-servers for the sub-domain backendaws.datamintelligence.com, so there is no sub-domain delegation in datamintelligence.com, which is fine if this isn't actually a sub-domain, but rather just a resource record, however, when I try and resolve it, I get an NXDOMAIN so this does not exists in your authoritative domain at CloudFlare.

% dig backendaws.datamintelligence.com

; <<>> DiG 9.10.6 <<>> backendaws.datamintelligence.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;backendaws.datamintelligence.com. IN	A

;; AUTHORITY SECTION:
datamintelligence.com.	1408	IN	SOA	etta.ns.cloudflare.com. dns.cloudflare.com. 2353779047 10000 2400 604800 1800

;; Query time: 13 msec
;; SERVER: 2001:1c04:4b01:4701:c960:e0a9:cc56:f4d2#53(2001:1c04:4b01:4701:c960:e0a9:cc56:f4d2)
;; WHEN: Mon Oct 07 16:10:58 CEST 2024
;; MSG SIZE  rcvd: 120

You need to reach out to CloudFlare who appear to be your DNS provider for datamintelligence.com and not AWS.

AWS
EXPERT

answered 2 years ago

EXPERT

reviewed 2 years ago

0

As well as the AI answer, make sure your updating the record in the Correct DNS Zone

EXPERT

answered 2 years ago

  • How do I ensure correct DNS Zone, whenever I go to route 53.. it automatically sets itself to Global aws region

  • Is the Route53 Zone your updating the correct one? Do you have anotherone in a different account? Are the Glue Records for your zone pointing to the same name servers in the Zone?

  • Yes, there's only one Hosted zone in route53, so I'm sure I'm updating the correct one

0

I understand your urgency, and I'll try to help you troubleshoot this issue. There are several factors to consider:

  1. DNS Propagation: While DNS changes can take up to 24-48 hours to propagate globally, in most cases, it should be much quicker. If it's been many hours since you updated the A record, propagation delay is likely not the issue.

  2. TTL (Time to Live): Check the TTL value for your A record. If it's set to a high value, it could cause longer propagation times. Consider lowering the TTL temporarily to speed up propagation.

  3. DNS Cache: Your local DNS cache or your ISP's cache might be holding onto the old IP address. Try clearing your local DNS cache and using a different DNS resolver (like Google's 8.8.8.8) to test.

  4. Record Configuration: Double-check that the A record for backendaws.datamintelligence.com is correctly configured in Route 53 with the new public IPv4 address of your EC2 instance.

  5. EC2 Configuration: Ensure that your EC2 instance is properly configured to handle requests coming to the subdomain. Check that your web server configuration (e.g., Apache or Nginx) is set up to respond to requests for this subdomain.

  6. Security Groups and Network ACLs: Verify that your EC2 instance's security group and the subnet's network ACL allow incoming traffic on the necessary ports (typically 80 for HTTP and 443 for HTTPS).

  7. Route 53 Health Checks: Consider setting up a Route 53 health check for your EC2 instance to monitor its availability.

To troubleshoot further:

  1. Use the 'dig' or 'nslookup' command to check if the subdomain resolves to the correct IP address.
  2. Try accessing the website using the new IP address directly to ensure the EC2 instance is responding correctly.
  3. Check your EC2 instance's system logs for any errors related to incoming connections.

If you've verified all these points and the issue persists, it may be worth contacting AWS support for further assistance, especially if you suspect it's related to the recent Route 53 service disruption.
Sources
route53 problem | AWS re:Post
Troubleshooting Amazon Route 53 - Amazon Route 53
Troubleshoot website connectivity on EC2 Windows instance | AWS re:Post

answered 2 years ago

EXPERT

reviewed 2 years ago

0

It doesn't point to the right IP address when checked using dig and nslookup? what can I do to get it up and running instantly

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.