[dns-operations] Shameless plug for our Zonecheck software (Was: af.mil DNS issue

[John Payne]

On Jul 3, 2006, at 9:00 PM, Joseph S D Yao wrote:

> On Mon, Jul 03, 2006 at 03:44:51PM -0400, John Payne wrote:
> ...
>> As an authorative-only server, if I _KNOW_ I will never send large
>> replies to a query, why do I have to support TCP or EDNS0?
> ...
>
>
> May I please borrow your crystal ball?  I want to see how large I have
> to make my static arrays so that I _KNOW_ nobody will ever overflow
> them.  ;-)

When one is in full control of the DNS zones in question, it's easy
to make predictions about the answers to queries.

Yes, when we decide to support IPv6 and DNSsec then we'll have to
implement EDNS0 and/or TCP support.  Until then... not so much.