Notices by Pieter Lexis (lieter@mastodon.lieter.nl)

@aral DNSVIZ reports no issues: https://dnsviz.net/d/kittens.small-web.org/ZVY34g/dnssec/

You could try to send SIGUSR1 to resolved when the failure occurs, that makes resolved dump info on its upstreams.

You could also enable tracing in systemd-resolved to see if the problem is systemd-resolved or further upstream. Tracing can be enabled by creating a service override and restarting systemd-resolved.

```
[Service]
Environment=SYSTEMD_LOG_LEVEL=debug
```