Unable to connect to Canonical name server
https://askubuntu.com/questions/1567553/unable-to-connect-to-canonical-name-server
I am currently unable to connect to any Canonical name server from a server that has been running and regularly installing updates for over a year.
$ dig canonical.com
;; communications error to 127.0.0.1#53: timed out
; <<>> DiG 9.18.39-0ubuntu0.22.04.3-Ubuntu <<>> canonical.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63336
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: bf985d2b0d9a5dc2010000006a2561614f29acbfa3607ed5 (good)
;; QUESTION SECTION:
;canonical.com. IN A
;; Query time: 4992 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Jun 07 05:17:37 PDT 2026
;; MSG SIZE rcvd: 70
dig ubuntu.com
;; communications error to 127.0.0.1#53: timed out
; <<>> DiG 9.18.39-0ubuntu0.22.04.3-Ubuntu <<>> ubuntu.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 50583
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 84ddd6bff6324a85010000006a256152cb1a1628a3bb7127 (good)
;; QUESTION SECTION:
;ubuntu.com. IN A
;; Query time: 4996 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Jun 07 05:17:22 PDT 2026
;; MSG SIZE rcvd: 67
$ dig ppa.launchpad.net
;; communications error to 127.0.0.1#53: timed out
; <<>> DiG 9.18.39-0ubuntu0.22.04.3-Ubuntu <<>> ppa.launchpad.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 22613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: fb7e9b492b13c8f3010000006a2561fc0a1aadf66f6769da (good)
;; QUESTION SECTION:
;ppa.launchpad.net. IN A
;; Query time: 4996 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Jun 07 05:20:12 PDT 2026
;; MSG SIZE rcvd: 74
Just for reference:
dig askubuntu.com
; <<>> DiG 9.18.39-0ubuntu0.22.04.3-Ubuntu <<>> askubuntu.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63171
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: c734f19287eea80a010000006a25613ef05f7ff9ad6a7c55 (good)
;; QUESTION SECTION:
;askubuntu.com. IN A
;; ANSWER SECTION:
askubuntu.com. 277 IN A 198.252.206.1
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Jun 07 05:17:02 PDT 2026
;; MSG SIZE rcvd: 86
$ ping -c 10 198.252.206.1
PING 198.252.206.1 (198.252.206.1) 56(84) bytes of data.
64 bytes from 198.252.206.1: icmp_seq=1 ttl=61 time=0.263 ms
64 bytes from 198.252.206.1: icmp_seq=2 ttl=61 time=0.317 ms
64 bytes from 198.252.206.1: icmp_seq=3 ttl=61 time=0.266 ms
64 bytes from 198.252.206.1: icmp_seq=4 ttl=61 time=0.306 ms
64 bytes from 198.252.206.1: icmp_seq=5 ttl=61 time=0.295 ms
64 bytes from 198.252.206.1: icmp_seq=6 ttl=61 time=0.294 ms
64 bytes from 198.252.206.1: icmp_seq=7 ttl=61 time=0.366 ms
64 bytes from 198.252.206.1: icmp_seq=8 ttl=61 time=0.297 ms
64 bytes from 198.252.206.1: icmp_seq=9 ttl=61 time=0.264 ms
64 bytes from 198.252.206.1: icmp_seq=10 ttl=61 time=0.289 ms
--- 198.252.206.1 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9197ms
rtt min/avg/max/mdev = 0.263/0.295/0.366/0.029 ms
It seems to be specific to one server. The server does not exhibit any signs of having been compromised and is updated regularly, though currently it is impossible to update because, by all outward appearances, Canonical has blocked my IP address from accessing their name server.
$ dig ns1.canonical.com
;; communications error to 127.0.0.1#53: timed out
; <<>> DiG 9.18.39-0ubuntu0.22.04.3-Ubuntu <<>> ns1.canonical.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44028
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 67b8ecec6a690c94010000006a2563010c14125b277b79a9 (good)
;; QUESTION SECTION:
;ns1.canonical.com. IN A
;; Query time: 4992 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Sun Jun 07 05:24:33 PDT 2026
;; MSG SIZE rcvd: 74
$ ping -c 10 185.125.190.65
PING 185.125.190.65 (185.125.190.65) 56(84) bytes of data.
--- 185.125.190.65 ping statistics ---
10 packets transmitted, 0 received, 100% packet loss, time 9202ms
$ tracepath 185.125.190.65
1?: [LOCALHOST] pmtu 1500
1: [redacted ISP address] 0.183ms
1: [redacted ISP address] 1.537ms
2: 172.18.0.29 1.138ms
3: no reply
4: 104.23.203.14 0.326ms
5: 162.158.244.69 0.467ms
6: no reply
7: no reply
8: no reply
9: no reply
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
25: no reply
26: no reply
27: no reply
28: no reply
29: no reply
30: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500
Note that other servers using the same redacted ISP address and the ISP tech support successfully connect to the Canonical IP addresses and name servers.
Are there any options for me here?
I have other Ubuntu Servers that do not have this problem.
This issue is not caused by last month's outage.