"It's definitely not DNS, something's clearly broken but I can't find a damn thing in any logs anywhere" I said, foolishly, before discovering that the problem was in fact DNS, because the problem is always DNS.