mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-26 01:29:58 -05:00
a616437338
* v1 EDER poc * remove superfluous edns_list_get_option function * create an EDER configurable * Hackathon 114 * Fixes for version -04 * Generated configparser and configlexer are not versioned in master anymore * Remove NOERROR DNS Error Reporting; not part of final RFC. * Use assigned IANA EDNS0 Option Code for Report-Channel. * Fix buffer protection and agent domain validity * Use DNS Error Reporting instead of the eder nickname * Update documentation. * Fix typo. * Bail out early if ede is not present. * Forget previous EDNS options from upstream; this is what was implicitly happening but not deterministacally. * Don't report LDNS_EDE_OTHER and bail early if there is no reporting agent. * Only do DNS error reporting when a client asked for something that went wrong. * Add an error reporting agent in the parent that should be ignored. * review feedback. * fixup for fast reload * Add 'num.dns_error_reports' to stats and test for it. --------- Co-authored-by: TCY16 <tom@nlnetlabs.nl> Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
82 lines
1.5 KiB
Text
82 lines
1.5 KiB
Text
; nameserver test file
|
|
$ORIGIN example.com.
|
|
$TTL 3600
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
REPLY QR AA NOERROR
|
|
ADJUST copy_id
|
|
SECTION QUESTION
|
|
www IN A
|
|
SECTION ANSWER
|
|
www IN A 10.20.30.40
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
REPLY QR AA NOERROR
|
|
ADJUST copy_id
|
|
SECTION QUESTION
|
|
1ttl IN A
|
|
SECTION ANSWER
|
|
1ttl 1 IN A 1.1.1.1
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
REPLY QR AA NOERROR
|
|
ADJUST copy_id
|
|
SECTION QUESTION
|
|
0ttl IN A
|
|
SECTION ANSWER
|
|
0ttl 0 IN A 0.0.0.1
|
|
ENTRY_END
|
|
|
|
|
|
|
|
$ORIGIN bogusdnssec.
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
REPLY QR AA NOERROR
|
|
ADJUST copy_id
|
|
SECTION QUESTION
|
|
@ IN DNSKEY
|
|
SECTION ANSWER
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
REPLY QR AA NOERROR
|
|
ADJUST copy_id
|
|
SECTION QUESTION
|
|
www IN A
|
|
SECTION ANSWER
|
|
www 0 IN A 10.20.30.40
|
|
; bogus signature to not trigger LAME DNSSEC and continue with validation
|
|
www 0 IN RRSIG A 8 2 240 20250429005000 20250401005000 42393 bogusdnssec. ob6ddTJkdeOUn92cxx1NPGneV7rhOp2zKBv8FXQjJ/Wso8LJJnzRHW9p 3sTatlzi+UdRi7BOrcxwjUG38lgO+TS5vRFGAiTRmOezm6xJVNTg8lIb RJGCD5bRtRRstwt31Qt6Gda+6sAyvDebpUB/opkQpevv6xohdrhr0g8+ Q4w=
|
|
SECTION ADDITIONAL
|
|
; dns error reporting agent
|
|
HEX_EDNSDATA_BEGIN
|
|
00 12 ; opt-code (Report-Channel)
|
|
00 0A ; opt-len
|
|
02 61 6E 05 61 67 65 6E 74 00 ; an.agent.
|
|
HEX_EDNSDATA_END
|
|
ENTRY_END
|
|
|
|
|
|
|
|
$ORIGIN an.agent.
|
|
;just give an answer back to anything
|
|
ENTRY_BEGIN
|
|
MATCH opcode subdomain
|
|
REPLY QR AA NXDOMAIN
|
|
ADJUST copy_id copy_query
|
|
SECTION QUESTION
|
|
an.agent. IN ANY
|
|
ENTRY_END
|
|
|
|
|
|
|
|
$ORIGIN unresponsive.
|
|
;; no entry for 'unresponsive.', we rely on timeouts.
|