Does anyone have a difficulty with resolution DNSR11.O.LENCR.ORG?

Hi @bestperson

I’ve no such issues.

Check which resolvers are used by Nginx, some of them might be having issues resolving requests or taking longer than the defined resolver_timeout.

grep -r resolver /etc/nginx/nginx.conf

Additionally, if you only use Let’s Encrypt certificates, you can start disabling OCSP in Nginx. Let’s Encrypt will stop supporting OCSP, so you can skip it.

To disable OCSP in Nginx, you’ll need to update the templates and change ssl_stapling on; to ssl_stapling off;.

2 Likes