wikimedia-dns.org
ccc9a2671feamaster

wikimedia-dns.org
View Options

			; vim: set expandtab:smarttab
			; {{ serial_comment }}
			@ 1H IN SOA ns0.wikimedia.org. hostmaster.wikimedia.org. {{ serial_num }} 12H 2H 2W 1H

			; Name servers

			@ 1D IN NS ns0.wikimedia.org.
			@ 1D IN NS ns1.wikimedia.org.
			@ 1D IN NS ns2.wikimedia.org.

			; Mail exchangers

			@ 1H IN MX 10 mx1001.wikimedia.org.
			@ 1H IN MX 10 mx2001.wikimedia.org.

			; Canonical names

			; SPF records
			@ 600 IN TXT "v=spf1 include:wikimedia.org ~all"

			; CAA records
			@ 600 IN CAA 0 issue "letsencrypt.org"
			@ 600 IN CAA 0 iodef "mailto:dns-admin@wikimedia.org"

			; Servers (alphabetic order)

			; Service aliases

			; Wikis (alphabetic order)

			; Wikidough resolver. Anycasted.
			@ 600 IN A 185.71.138.138
			@ 600 IN AAAA 2001:67c:930::1

			; Wikidough check service (durum). Anycast.
			;
			; landing page
			check 600 IN A 185.71.138.139
			check 600 IN AAAA 2001:67c:930::2

			; yes.check (DoH)
			yesdoh.check 600 IN A 185.71.138.140
			yesdoh.check 600 IN AAAA 2001:67c:930::3

			; yes.check (DoT)
			yesdot.check 600 IN A 185.71.138.142
			yesdot.check 600 IN AAAA 2001:67c:930::5

			; no.check
			; This allows for UUID-based hostname lookups to defeat any client or
			; browser-level caching between check queries, e.g.:
			; https://7fbceba2-fabb-11eb-9a03-0242ac130003.check.wikimedia-dns.org/check
			; This is essentially equivalent to: no.check since yes{doh,dot}.check will go through Wikidough (dnsdist)
			*.check 5 IN A 185.71.138.141 ; wmf-zone-validator-ignore=MISSING_PTR_FOR_NAME_AND_IP
			*.check 5 IN AAAA 2001:67c:930::4 ; wmf-zone-validator-ignore=MISSING_PTR_FOR_NAME_AND_IP