[dns-operations] dns-operations Digest, Vol 92, Issue 13

[Aaron Campbell]

On 2013-09-11, at 2:30 AM, Paul Vixie <paul at redbarn.org> wrote:

> "A DNS UDP responder shall, when transmitting a message which does not include embedded cryptographic marks such as TSIG or DNSSEC signatures, use an effective DNS message payload size which is calculated as MIN(OFFERED, MIN(DISCOVERED, ESTIMATED) - OVERHEAD)) where OFFERED is the EDNS BUFSIZE received from the initiator, and DISCOVERED is the path MTU if known or else the outbound interface MTU, and ESTIMATED is chosen as 576 for IPv4 or 1280 for IPv6 as the minimum guaranteed size of an IP datagram, and OVERHEAD is chosen as 64 for IPv4 or 48 for IPv6 as the maximum likely size of the IP and UDP headers.

Shouldn't OVERHEAD actually be 68 for IPv4?

Also, already mentioned in 2671bis, but OFFERED shouldn't be used unless it is at least 512.  ("Values lower than 512 MUST be treated as equal to 512.")

-Aaron