mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-23 02:28:55 -04:00
ea2cb4e9df
When a resolver+auth server has a delegation on a local zone and has a glue, the glue can only be for in-domain NS. In this case, when the resolver is looking at the zonecut, `dns_view_bestzonecut()` synthesizes a delegset from an NS rdataset found in the local zone (the delegation inside auth zone), and ignores the glues if any. As a result, the delegset will contain a single delegation of type DNS_DELEGTYPE_NS_NAMES, which leads to an ADB fetch. But it's actually an in-memory fetch, because in this case, the fetch will immediately find the A/AAAA glues from the local zone. An alternative approach (not chosen here) would be to make `dns_view_bestzonecut()`, when converting an NS rdataset into a `dns_deleg_t`, check for glues for the delegation in the auth zone, and add those in the `dns_deleg_t`. The delegation would be of type DNS_DELEGTYPE_NS_GLUES which would avoid the ADB name lookup. However, that's extra code, extra logic and complexities, for a lookup that will be done in memory anyway, just a bit later. So for now, this is not implemented that way. The test is added, however, to confirm that there is no attempt from the resolver to get the NS fron the child zone. |
||
|---|---|---|
| .. | ||
| check | ||
| confgen | ||
| delv | ||
| dig | ||
| dnssec | ||
| include | ||
| named | ||
| nsupdate | ||
| plugins | ||
| rndc | ||
| tests | ||
| tools | ||
| meson.build | ||