What could cause a 'SERVFAIL' error in Pi-hole query logs when using Cloudflare and DNSSEC?

Responsive Ad Header

Question

Grade: Education Subject: Support
What could cause a 'SERVFAIL' error in Pi-hole query logs when using Cloudflare and DNSSEC?
Asked by:
91 Viewed 91 Answers

Answer (91)

Best Answer
(461)
A 'SERVFAIL' error, particularly when using DNSSEC, usually indicates a problem with DNSSEC validation. It could be due to a broken DNSSEC chain of trust, a misconfigured DNS server, or a temporary issue with the authoritative DNS server for the domain. Check the domain's DNSSEC configuration using online tools. If the domain's DNSSEC is fine, the problem might be on Cloudflare's end or with Pi-hole's configuration, possibly a firewall blocking DNS traffic.