DNSSEC validation failure loggingΒΆ

This logs a message for each DNSSEC validation failure (on notice logging level). It is meant to provide hint to operators which queries should be investigated using diagnostic tools like DNSViz.

Add following line to your configuration file to enable it:

logging:
   dnssec-bogus: true

Example of error message logged:

[dnssec] validation failure: dnssec-failed.org. DNSKEY