[dns-operations] looking for a Microsoft DNS contact

[Mark Andrews]

How long is it going to take for the servers to implement EDNS as specified in RFC 6891.  I’d also like to understand the logic in the decision to echo back unknown EDNS options at all.  Isn’t it a little bit insane to send back a option when you don’t know what it does?

Unknown EDNS options are supposed to be ignored.  The servers are echoing back unknown EDNS options which amongst other things causes EDNS Client Subnet (ECS) clients to thing that the servers support ECS.

The following is from https://ednscomp.isc.org/compliance/gov-full-report.html which is a EDNS compliance report for all servers for delegations in the .GOV zone.

al.gov. @13.107.160.9 (ns4-09.azure-dns.info.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @2620:1ec:bda::9 (ns4-09.azure-dns.info.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @64.4.48.9 (ns2-09.azure-dns.net.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @2620:1ec:8ec::9 (ns2-09.azure-dns.net.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @40.90.4.9 (ns1-09.azure-dns.com.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @2603:1061::9 (ns1-09.azure-dns.com.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @13.107.24.9 (ns3-09.azure-dns.org.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok
al.gov. @2a01:111:4000::9 (ns3-09.azure-dns.org.): dns=ok edns=ok edns1=ok edns at 512=ok ednsopt=echoed edns1opt=echoed do=ok ednsflags=ok optlist=ok,subnet signed=ok ednstcp=ok

Mark

> On 24 Oct 2018, at 8:18 am, Jeff Westhead <Jeff.Westhead at microsoft.com> wrote:
> 
> Apologies for not seeing this sooner – I can answer questions or redirect.
>  
> From: dns-operations <dns-operations-bounces at dns-oarc.net> On Behalf Of Mehmet Akcin
> Sent: Sunday, October 14, 2018 8:06 PM
> To: Gavin McCullagh <gmccullagh at gmail.com>
> Cc: dns-operations at dns-oarc.net
> Subject: Re: [dns-operations] looking for a Microsoft DNS contact
>  
> I will make an intro offlist.
>  
> On Sun, Oct 14, 2018 at 7:54 PM Gavin McCullagh <gmccullagh at gmail.com> wrote:
> Hi,
>  
> if there is someone on list who works in or near Microsoft/Azure's DNS service, could you please send me a mail off-list?
>  
> Many thanks in advance,
> Gavin
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> -- 
> Mehmet
> +1-424-298-1903
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org