mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-28 04:21:07 -05:00
b49310ac06
If we try to fetch a record from cache and need to look into hints database we assume that the resolver is not primed and start dns_resolver_prime(). Priming query is supposed to return NSes for "." in ANSWER section and glue records for them in ADDITIONAL section, so that we can fill that info in 'regular' cache and not use hints db anymore. However, if we're using a forwarder the priming query goes through it, and if it's configured to return minimal answers we won't get the addresses of root servers in ADDITIONAL section. Since the only records for root servers we have are in hints database we'll try to prime the resolver with every single query. This patch adds a DNS_FETCHOPT_NOFORWARD flag which avoids using forwarders if possible (that is if we have forward-first policy). Using this flag on priming fetch fixes the problem as we get the proper glue. With forward-only policy the problem is non-existent, as we'll never ask for root server addresses because we'll never have a need to query them. Also added a test to confirm priming queries are not forwarded.
28 lines
779 B
Text
28 lines
779 B
Text
; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
;
|
|
; This Source Code Form is subject to the terms of the Mozilla Public
|
|
; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;
|
|
; See the COPYRIGHT file distributed with this work for additional
|
|
; information regarding copyright ownership.
|
|
|
|
$TTL 300
|
|
. IN SOA gson.nominum.com. a.root.servers.nil. (
|
|
2000042100 ; serial
|
|
600 ; refresh
|
|
600 ; retry
|
|
1200 ; expire
|
|
600 ; minimum
|
|
)
|
|
. NS a.root-servers.nil.
|
|
a.root-servers.nil. A 10.53.0.1
|
|
|
|
example1 NS ns.example1
|
|
ns.example1 A 10.53.0.1
|
|
|
|
example2 NS ns.example2
|
|
ns.example2 A 10.53.0.1
|
|
|
|
example3 NS ns.example3
|
|
ns.example3 A 10.53.0.1
|