Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

stop sending authority/additional section when sending answer of type DS #105

Open
cstrotm opened this issue Oct 19, 2016 · 2 comments
Open
Assignees

Comments

@cstrotm
Copy link
Contributor

cstrotm commented Oct 19, 2016

Shane wrote:

I have been running the latest version of ymmv for some days now, and it discovered a
difference in the reply from yeti-dns01.dnsworkshop.org for:

$ dig -t ds is.

It is a bit odd, since it is returning the authoritative answer for the DS lookup AND the delegation
information for the root zone. I don't think it causes any problems, but it is a difference.

BIND 9 and Windows 2016 DNS (possibly others) only return the DS, without Authority/Additional section

Is there a RFC reference?

@jinmeiib
Copy link

jinmeiib commented Oct 21, 2016

I don't think it's a delegation. Since is./DS belongs to the root zone, it should simply include the ./NS in the authority section just like any authoritative answer from any zone.

BIND 9 intentionally omits the NS for DS queries, presumably so that the response won't be too big:

2678.   [func]      Treat DS queries as if "minimal-response yes;"
            was set. [RT #20258]

@cstrotm
Copy link
Contributor Author

cstrotm commented Oct 21, 2016

Hello JINMEI Tatuya,

I agree, it's authoritative data returned as with other RR requests. I plan to make the change similar to what BIND 9 and other DNS server do when implementing "minimal-answers" for Bundy. This ticket is an reminder.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants