ns-cloud-e2.googledomains.com returns REFUSED

Solution 1:

  • Make sure that you’ve completed the DNSSEC setup at your registrar, you can do this by creating a DS record for your domain in the parent zone, so that resolvers know your domain is DNSSEC-enabled and can validate its data.
  • Update your both DNS A and AAAA records to point to the load balancer's IP address, check here for help.
  • Ensure that you didn’t miss any step mentioned here while provisioning Google managed SSL certificates and attached your certificates to correct load balancer.