This alert notifies you that the DS record handed out by the parent zone points to the wrong DNSKEY record for the zone. DNS resolvers with DNSSEC validation enabled could fail to resolve names in the zone, resulting in a denial of service.

You can set this alert to monitor multiple DNS zones.

📘

To create this alert, you need to have the ALERTS_DNSSEC scope. For more information, contact your account administrator.

Available for

• Edge DNS

Notification time

• New Alert - The condition is present for 10 to 12 minutes.
• Alert Cleared - The condition is cleared for three to five minutes.

Threshold configuration

None required

Troubleshooting

Follow the instructions from the Troubleshooting section on the alert's page.