upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Blackhole queries to root servers in tests

Browse source 
Some tests don't have a mock root server configured, because they don't
need one. However, these tests might still leak queries to actual name
servers. Add a shared root hints file which can serve as a blackhole for
these queries.

(cherry picked from commit 8434e5abfc)
This commit is contained in:
Tom Krizek 2023-11-27 15:39:37 +01:00
parent b025e8dd2d
commit 1997c36ce4
No known key found for this signature in database
GPG key ID: 01623B9B652A20A7
7 changed files with 44 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
bin/tests/system/_common/root.hint.blackhole Normal file
View file

@ -0,0 +1,14 @@
; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
;
; SPDX-License-Identifier: MPL-2.0
;
; This Source Code Form is subject to the terms of the Mozilla Public
; License, v. 2.0. If a copy of the MPL was not distributed with this
; file, you can obtain one at https://mozilla.org/MPL/2.0/.
;
; See the COPYRIGHT file distributed with this work for additional
; information regarding copyright ownership.
$TTL 999999
. IN NS ns99.root-servers.nil.
ns99.root-servers.nil. IN A 10.53.0.99

5
bin/tests/system/journal/ns1/named.conf.in
View file

@ -35,6 +35,11 @@ controls {
inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone . {
type hint;
file "../../_common/root.hint.blackhole";
};
zone changed {
type primary;
update-policy local;

5
bin/tests/system/journal/ns2/named.conf.in
View file

@ -34,3 +34,8 @@ key rndc_key {
controls {
inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone . {
type hint;
file "../../_common/root.hint.blackhole";
};

5
bin/tests/system/kasp/ns3/named-fips.conf.in
View file

@ -39,6 +39,11 @@ controls {
inet 10.53.0.3 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone "." {
type hint;
file "../../_common/root.hint.blackhole";
};
/* Zones that are getting initially signed */
/* The default case: No keys created, using default policy. */

5
bin/tests/system/kasp/ns6/named.conf.in
View file

@ -39,6 +39,11 @@ controls {
inet 10.53.0.6 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone "." {
type hint;
file "../../_common/root.hint.blackhole";
};
/* This zone switch from dynamic to inline-signing. */
zone "dynamic2inline.kasp" {
type primary;

5
bin/tests/system/kasp/ns6/named2.conf.in
View file

@ -38,6 +38,11 @@ controls {
inet 10.53.0.6 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
zone "." {
type hint;
file "../../_common/root.hint.blackhole";
};
/* This zone switch from dynamic to inline-signing. */
zone "dynamic2inline.kasp" {
type primary;

5
bin/tests/system/nsupdate/ns3/named.conf.in
View file

@ -26,6 +26,11 @@ options {
dnssec-validation yes;
};
zone "." {
type hint;
file "../../_common/root.hint.blackhole";
};
zone "example" {
type primary;
allow-update { any; };