[dns-operations] 答复: 答复: DNS forwarder behavior on response with cname

Mark Andrews marka at isc.org
Fri Jan 4 04:15:36 UTC 2019


Named does selective forwarding.  That decision is made before the resolver
is called.  The target of the CNAME may not be sent to the same forwarder
set or forwarded at all.

> On 4 Jan 2019, at 3:02 pm, Dave Lawrence <tale at dd.org> wrote:
> 
> Paul Vixie writes:
>> it's been observed many times, especially since the 2008 summer of fear, 
>> that you can't know that a sibling name isn't a zone cut, so the 
>> question of "is it in bailiwick" is nonsequitur. you can only know when 
>> one name is not in-bailiwick, not when it is.
> 
> FWIW, I very much agree.  That was an interesting insight when it was
> first voiced, and I've got no objection to BIND's all-case query
> restarts when it comes to authorities.  Just wondering if the restart
> in the forward case is an artifact of that, and it is hard to imagine,
> as Davey pointed out, any way that the forwarded resolver will return
> anything significantly different when asked specifically for the
> canonical name.
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org




More information about the dns-operations mailing list