Knot Resolver issues
https://gitlab.nic.cz/knot/knot-resolver/-/issues
2019-03-23T12:29:52+01:00
https://gitlab.nic.cz/knot/knot-resolver/-/issues/231
non-empty answers with SERVFAIL
2019-03-23T12:29:52+01:00
Vladimír Čunát
vladimir.cunat@nic.cz
non-empty answers with SERVFAIL
It currently happens only in some cases. See https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/343#note_51832
- [ ] investigate/decide how exactly the answers can/shall look like. Special case to note: [CNAME chains broken ...
It currently happens only in some cases. See https://gitlab.labs.nic.cz/knot/knot-resolver/merge_requests/343#note_51832
- [ ] investigate/decide how exactly the answers can/shall look like. Special case to note: [CNAME chains broken somewhere later](https://tools.ietf.org/html/rfc6604#section-3).
- [ ] implement.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/232
provide option for explicit port randomization
2020-11-24T16:40:30+01:00
Vladimír Čunát
vladimir.cunat@nic.cz
provide option for explicit port randomization
Linux defaults are reasonable for our use of ephemeral ports, but FreeBSD reportedly assigns them in a sequential-like fashion which is bad for spoofability of data not covered by DNSSEC. [Reported on gitter](https://gitter.im/CZ-NIC/kn...
Linux defaults are reasonable for our use of ephemeral ports, but FreeBSD reportedly assigns them in a sequential-like fashion which is bad for spoofability of data not covered by DNSSEC. [Reported on gitter](https://gitter.im/CZ-NIC/knot-resolver?at=59870755bc464729745a6141).
https://gitlab.nic.cz/knot/knot-resolver/-/issues/233
random generator: consider using gnutls instead of ISAAC
2018-12-21T13:33:20+01:00
Vladimír Čunát
vladimir.cunat@nic.cz
random generator: consider using gnutls instead of ISAAC
[GnuTLS _NONCE level](http://www.gnutls.org/manual/gnutls.html#Random-number-generation) might be suitable. TODO: profile.
- Advantages: smaller state (~2kB -> 140B), dropping extra code that we don't (want to) maintain in exchange for...
[GnuTLS _NONCE level](http://www.gnutls.org/manual/gnutls.html#Random-number-generation) might be suitable. TODO: profile.
- Advantages: smaller state (~2kB -> 140B), dropping extra code that we don't (want to) maintain in exchange for the lib that we depend on anyway, maybe better quality of randomness.
- Disadvantages: probably more CPU-intensive, but most likely not noticeable for our use cases.
2018 Q3
https://gitlab.nic.cz/knot/knot-resolver/-/issues/234
RFC 6672: DNAME support
2020-04-27T15:23:29+02:00
Vladimír Čunát
vladimir.cunat@nic.cz
RFC 6672: DNAME support
https://tools.ietf.org/html/rfc6672 Mainly their validation doesn't work probably; the mandatory CNAMEs should make DNAMEs work on unsigned domains.
Related: #108, as DNAMEs are another way of generating RRs that haven't been seen.
https://tools.ietf.org/html/rfc6672 Mainly their validation doesn't work probably; the mandatory CNAMEs should make DNAMEs work on unsigned domains.
Related: #108, as DNAMEs are another way of generating RRs that haven't been seen.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/235
Segmentation fault occurs in libluajit-5.1.so.2
2017-08-10T15:52:40+02:00
Horigome Yoshihito
Segmentation fault occurs in libluajit-5.1.so.2
Installing kresd from the repository in the aarch64 environment causes a segmentation fault.
I also downloaded and executed 1.3.2 directly from the repository, but the results were the same.
```
$ sudo gdb /usr/sbin/kresd
GNU gdb (Ubuntu...
Installing kresd from the repository in the aarch64 environment causes a segmentation fault.
I also downloaded and executed 1.3.2 directly from the repository, but the results were the same.
```
$ sudo gdb /usr/sbin/kresd
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.5) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "aarch64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/kresd...(no debugging symbols found)...done.
(gdb) r
Starting program: /usr/sbin/kresd
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/aarch64-linux-gnu/libthread_db.so.1".
Program received signal SIGSEGV, Segmentation fault.
0x0000ffffbf5407d4 in lua_pushcclosure () from /usr/lib/aarch64-linux-gnu/libluajit-5.1.so.2
```
The environment is as follows.
```
$ uname -a
Linux dns02 4.13.0-rc3-odroidc2 #8 SMP PREEMPT Thu Aug 3 09:53:36 CEST 2017 aarch64 aarch64 aarch64 GNU/Linux
```
```
$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.3 LTS"
```
```
$ kresd -V
Knot DNS Resolver, version 1.3.3
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/236
kresd crashes when network configuration changes
2017-10-06T15:09:12+02:00
Jan Včelák
kresd crashes when network configuration changes
Environment: Turris 1.3.1 on Turris Omnia
Sorry for vague description but this is all I have. My ISP had an outage and IP configuration on WAN disappeared for ~10 minutes. When they recovered, kresd was not running any longer. I guess t...
Environment: Turris 1.3.1 on Turris Omnia
Sorry for vague description but this is all I have. My ISP had an outage and IP configuration on WAN disappeared for ~10 minutes. When they recovered, kresd was not running any longer. I guess the daemon had to crash as a result of network configuration change on the WAN interface. I don't have any logs that would prove that.
Config:
```
root@turris:~# ps w | grep kresd
10169 root 212m S /usr/bin/kresd -c /tmp/kresd.config -f 1 /tmp/kresd -a 0.0.0.0 53 -a :: 53 -k /etc/root.keys
10485 root 1088 S grep kresd
root@turris:~# cat /tmp/kresd.config
--Automatically generated file; DO NOT EDIT
modules = {
'hints > iterate'
, 'policy'
, 'stats'
, predict = {
window = 30 -- 30 minutes sampling window
, period = 24*(60/30) -- track last 24 hours
}
}
hints.config('/tmp/kresd/hints.tmp')
net.bufsize(4096)
net.ipv4=true
net.ipv6=false
cache.open(200*MB)
cache.clear()
```
Jan Pavlinec
Jan Pavlinec
https://gitlab.nic.cz/knot/knot-resolver/-/issues/237
kresd crashes if run from a shellscript in interactive mode
2018-12-10T17:28:12+01:00
Libor Peltan
kresd crashes if run from a shellscript in interactive mode
When I prepare a shell script like this:
```
#!/bin/bash
kresd -c rolltest.resolver.conf &
while true; do sleep 1; done
```
It ends up kresd crashing:
```
dnsbench@knot-lroot:~$ ./test.sh
[ ta ]: new trust anchor state:
. ...
When I prepare a shell script like this:
```
#!/bin/bash
kresd -c rolltest.resolver.conf &
while true; do sleep 1; done
```
It ends up kresd crashing:
```
dnsbench@knot-lroot:~$ ./test.sh
[ ta ]: new trust anchor state:
. 10 DS 42362 8 2 2C1EC36EEC516C47DD3AEFF9905B46500194649902C1986DF7DB0F3B110DA9AD
[system] interactive mode
> ./test.sh: line 5: 61109 Aborted (core dumped) kresd -c rolltest.resolver.conf
^C
```
A workaround: running kresd in non-interactive mode (option `-f 1`).
Štěpán Balážik
Štěpán Balážik
https://gitlab.nic.cz/knot/knot-resolver/-/issues/141
Resolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL
2017-08-22T13:33:34+02:00
Ondřej Surý
Resolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL
```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
---...
```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | bind ^------------------
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | unbound:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | unbound ^------------------
```
```
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 25787
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A
;; Received 72 B
;; Time 2017-01-24 13:48:24 CET
;; From ::1@38267(UDP) in 1719.0 ms
```
clear cache log:
```
[ 0][plan] plan 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A'
[56954][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56954][resl] => using root hints
[44674][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[44674][plan] plan '.' type 'DNSKEY'
[30973][iter] '.' type 'DNSKEY' id was assigned, parent id 44674
[30973][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[30973][iter] <= rcode: NOERROR
[30973][vldr] <= parent: updating DNSKEY
[30973][vldr] <= answer valid, OK
[30973][resl] <= server: '2001:dc3::35' rtt: 18 ms
[29982][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[29982][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[29982][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[29982][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[29982][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[29982][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[29982][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[29982][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[29982][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[29982][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[29982][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[29982][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[29982][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[29982][iter] <= referral response, follow
[29982][vldr] <= DS: OK
[29982][vldr] <= answer valid, OK
[29982][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[22599][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[22599][plan] plan 'com.' type 'DNSKEY'
[ 9678][iter] 'com.' type 'DNSKEY' id was assigned, parent id 22599
[ 9678][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[ 9678][iter] <= rcode: NOERROR
[ 9678][vldr] <= parent: updating DNSKEY
[ 9678][vldr] <= answer valid, OK
[ 9678][resl] <= server: '192.55.83.30' rtt: 34 ms
[49039][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[49039][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'rACkSPACecLouD.cOM.' type: 'NS' proto: 'udp'
[49039][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[49039][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[49039][iter] <= referral response, follow
[49039][vldr] <= DS doesn't exist, going insecure
[49039][vldr] <= answer valid, OK
[49039][resl] <= server: '192.41.162.30' rtt: 115 ms
[51213][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[51213][resl] => querying: '65.61.188.4' score: 10 zone cut: 'rackspacecloud.com.' m12n: 'CLoUDFIleS.RacKsPAcECloUD.cOM.' type: 'NS' proto: 'udp'
[51213][iter] <= referral response, follow
[51213][resl] <= server: '65.61.188.4' rtt: 31 ms
[33844][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[33844][plan] plan 'www-gtm-ord1.rackspace.com.' type 'AAAA'
[62064][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][plan] plan 'm.gtld-servers.net.' type 'AAAA'
[45856][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[45856][resl] => using root hints
[ 4235][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[ 4235][resl] >< TA: '.'
[ 4235][plan] plan '.' type 'DNSKEY'
[33383][iter] '.' type 'DNSKEY' id was assigned, parent id 4235
[33383][ rc ] => satisfied from cache
[33383][iter] <= rcode: NOERROR
[33383][vldr] <= parent: updating DNSKEY
[33383][vldr] <= answer valid, OK
[53600][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[53600][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'NeT.' type: 'NS' proto: 'udp'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[53600][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[53600][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[53600][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[53600][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[53600][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[53600][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[53600][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[53600][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[53600][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[53600][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[53600][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[53600][iter] <= referral response, follow
[53600][vldr] <= DS: OK
[53600][vldr] <= answer valid, OK
[53600][resl] <= server: '2001:7fd::1' rtt: 5 ms
[63179][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[63179][plan] plan 'net.' type 'DNSKEY'
[64080][iter] 'net.' type 'DNSKEY' id was assigned, parent id 63179
[64080][resl] => querying: '192.52.178.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][resl] => querying: '192.48.79.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][iter] <= rcode: NOERROR
[64080][vldr] <= parent: updating DNSKEY
[64080][vldr] <= answer valid, OK
[64080][resl] <= server: '192.52.178.30' rtt: 264 ms
[64080][resl] <= server: '192.48.79.30' rtt: >=14 ms
[43576][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[43576][resl] => querying: '192.43.172.30' score: 10 zone cut: 'net.' m12n: 'gtld-seRVeRs.NeT.' type: 'NS' proto: 'udp'
[43576][iter] <= referral response, follow
[43576][vldr] <= DS doesn't exist, going insecure
[43576][vldr] <= parent: updating DS
[43576][vldr] <= answer valid, OK
[43576][resl] <= server: '192.43.172.30' rtt: 28 ms
[27496][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[27496][plan] plan 'av4.nstld.com.' type 'AAAA'
[27534][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][resl] => querying: '192.54.112.30' score: 10 zone cut: 'com.' m12n: 'nsTLd.COm.' type: 'NS' proto: 'udp'
[22969][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[22969][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[22969][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[22969][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[22969][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[22969][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[22969][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[22969][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[22969][iter] <= referral response, follow
[22969][resl] <= server: '192.54.112.30' rtt: 28 ms
[10652][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[10652][resl] => querying: '2001:500:127::30' score: 10 zone cut: 'nstld.com.' m12n: 'aV4.nSTLd.cOM.' type: 'AAAA' proto: 'udp'
[10652][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[10652][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[10652][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[10652][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[10652][iter] <= rcode: NOERROR
[10652][resl] <= server: '2001:500:127::30' rtt: 19 ms
[61253][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[61253][resl] => querying: '2001:500:127::30' score: 19 zone cut: 'gtld-servers.net.' m12n: 'M.gTld-SERVerS.NEt.' type: 'AAAA' proto: 'udp'
[61253][iter] <= rcode: NOERROR
[61253][ pc ] => answer cached for TTL=900
[61253][resl] <= server: '2001:500:127::30' rtt: 18 ms
[51040][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[51040][plan] plan 'm.gtld-servers.net.' type 'A'
[26418][iter] 'm.gtld-servers.net.' type 'A' id was assigned, parent id 51040
[26418][ rc ] => satisfied from cache
[26418][iter] <= rcode: NOERROR
[26418][vldr] <= cached insecure response, going insecure
[12543][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[12543][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'racKSPaCe.COm.' type: 'NS' proto: 'udp'
[12543][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[12543][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[12543][iter] <= referral response, follow
[12543][resl] <= server: '192.55.83.30' rtt: 34 ms
[60529][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[60529][resl] => querying: '69.20.95.4' score: 10 zone cut: 'rackspace.com.' m12n: 'wWW-gTM-oRD1.raCksPAcE.CoM.' type: 'AAAA' proto: 'udp'
[60529][iter] <= rcode: NOERROR
[60529][ pc ] => answer cached for TTL=300
[60529][resl] <= server: '69.20.95.4' rtt: 107 ms
[56516][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56516][plan] plan 'www-gtm-ord1.rackspace.com.' type 'A'
[ 4871][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][resl] => querying: '65.61.188.4' score: 31 zone cut: 'rackspace.com.' m12n: 'WWw-gtm-OrD1.RAckSPACE.CoM.' type: 'A' proto: 'udp'
[ 3085][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 3085][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 3085][iter] <= rcode: NOERROR
[ 3085][resl] <= server: '65.61.188.4' rtt: 27 ms
[41180][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[41180][resl] => querying: '173.203.44.119' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'cdN2.CLoudfileS.rACkSPacECLoud.com.' type: 'NS' proto: 'udp'
[41180][iter] <= rcode: REFUSED
[41180][resl] <= server: '173.203.44.119' rtt: 121 ms
[52045][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[52045][resl] => querying: '173.203.44.119' score: 221 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.CLOuDfiLes.RacksPAceCloUd.COm.' type: 'A' proto: 'udp'
[52045][iter] <= rcode: REFUSED
[52045][resl] <= server: '173.203.44.119' rtt: 118 ms
[58945][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[58945][resl] => querying: '173.203.44.119' score: 269 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.cLOudFIlEs.RAcKspACecLOUd.CoM.' type: 'A' proto: 'udp'
[58945][iter] <= rcode: REFUSED
[58945][resl] <= server: '173.203.44.119' rtt: 119 ms
[ 1543][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1543][resl] => querying: '173.203.44.119' score: 294 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.CDN2.clOUDfiLeS.RAckSpaCeclOUd.COM.' type: 'A' proto: 'udp'
[ 1543][iter] <= rcode: REFUSED
[ 1543][resl] => server: '173.203.44.119' flagged as 'bad'
[34164][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[34164][resl] => unresolvable NS address, bailing out
[34164][plan] plan 'www-gtm-iad2.rackspace.com.' type 'AAAA'
[ 5083][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][resl] => querying: '65.61.188.4' score: 29 zone cut: 'rackspace.com.' m12n: 'wWw-Gtm-iaD2.RACksPAcE.COM.' type: 'AAAA' proto: 'udp'
[32261][iter] <= rcode: NOERROR
[32261][ pc ] => answer cached for TTL=300
[32261][resl] <= server: '65.61.188.4' rtt: 35 ms
[ 1144][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1144][plan] plan 'www-gtm-iad2.rackspace.com.' type 'A'
[56948][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][resl] => querying: '65.61.188.4' score: 32 zone cut: 'rackspace.com.' m12n: 'WWw-GtM-iAD2.rACKSpACe.coM.' type: 'A' proto: 'udp'
[ 4816][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 4816][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 4816][iter] <= rcode: NOERROR
[ 4816][resl] <= server: '65.61.188.4' rtt: 27 ms
[23391][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[23391][resl] => querying: '207.97.206.40' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.clOUDfiLEs.racKspaceClOuD.COm.' type: 'A' proto: 'udp'
[23391][iter] <= rcode: REFUSED
[23391][resl] <= server: '207.97.206.40' rtt: 107 ms
[15551][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[15551][resl] => querying: '207.97.206.40' score: 207 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.clouDfilES.RAcKSpACEcloUD.CoM.' type: 'A' proto: 'udp'
[15551][iter] <= rcode: REFUSED
[15551][resl] <= server: '207.97.206.40' rtt: 108 ms
[56069][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56069][resl] => querying: '207.97.206.40' score: 257 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.CDN2.ClouDFiles.RaCkspAceCloud.cOM.' type: 'A' proto: 'udp'
[56069][iter] <= rcode: REFUSED
[56069][resl] <= server: '207.97.206.40' rtt: 111 ms
[62422][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[62422][resl] => querying: '207.97.206.40' score: 284 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.ClOuDfIles.RaCkSpaCECLouD.CoM.' type: 'A' proto: 'udp'
[62422][iter] <= rcode: REFUSED
[62422][resl] => server: '207.97.206.40' flagged as 'bad'
[24149][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[24149][resl] => unresolvable NS address, bailing out
[24149][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 12, mempool: 164000 B
```
1.2.2 patch release
Ivana Krumlova
Ivana Krumlova
https://gitlab.nic.cz/knot/knot-resolver/-/issues/138
Resolution of `supercore.s3.amazonaws.com.` fails with SERVFAIL
2017-08-22T13:33:34+02:00
Ondřej Surý
Resolution of `supercore.s3.amazonaws.com.` fails with SERVFAIL
```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 supercore.s3.amazonaws.com.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 39486
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTIO...
```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 supercore.s3.amazonaws.com.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 39486
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; supercore.s3.amazonaws.com. IN A
;; Received 44 B
;; Time 2017-01-24 13:36:20 CET
;; From ::1@38267(UDP) in 580.0 ms
```
Clear cache log:
```
[ 0][plan] plan 'supercore.s3.amazonaws.com.' type 'A'
[48058][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[48058][resl] => using root hints
[13001][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13001][plan] plan '.' type 'DNSKEY'
[12426][iter] '.' type 'DNSKEY' id was assigned, parent id 13001
[12426][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[12426][iter] <= rcode: NOERROR
[12426][vldr] <= parent: updating DNSKEY
[12426][vldr] <= answer valid, OK
[12426][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19666][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19666][resl] => querying: '2001:dc3::35' score: 19 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[19666][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[19666][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[19666][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[19666][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[19666][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[19666][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[19666][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[19666][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[19666][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[19666][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[19666][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[19666][iter] <= referral response, follow
[19666][vldr] <= DS: OK
[19666][vldr] <= answer valid, OK
[19666][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19695][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19695][plan] plan 'com.' type 'DNSKEY'
[39453][iter] 'com.' type 'DNSKEY' id was assigned, parent id 19695
[39453][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'com.' type: 'DNSKEY' proto: 'udp'
[39453][iter] <= rcode: NOERROR
[39453][vldr] <= parent: updating DNSKEY
[39453][vldr] <= answer valid, OK
[39453][resl] <= server: '192.55.83.30' rtt: 35 ms
[ 5358][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5358][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'AmAzOnaWS.COM.' type: 'NS' proto: 'udp'
[ 5358][iter] <= using glue for 'u1.amazonaws.com.': '156.154.64.10'
[ 5358][iter] <= using glue for 'u2.amazonaws.com.': '156.154.65.10'
[ 5358][iter] <= using glue for 'r1.amazonaws.com.': '205.251.192.27'
[ 5358][iter] <= using glue for 'r2.amazonaws.com.': '205.251.195.199'
[ 5358][iter] <= referral response, follow
[ 5358][vldr] <= DS doesn't exist, going insecure
[ 5358][vldr] <= answer valid, OK
[ 5358][resl] <= server: '192.41.162.30' rtt: 115 ms
[17677][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[17677][resl] => querying: '156.154.65.10' score: 10 zone cut: 'amazonaws.com.' m12n: 's3.aMAZONAwS.Com.' type: 'NS' proto: 'udp'
[17677][iter] <= referral response, follow
[17677][resl] <= server: '156.154.65.10' rtt: 16 ms
[60967][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[60967][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'AAAA'
[ 9404][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 9404][resl] => using root hints
[27743][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[27743][resl] >< TA: '.'
[27743][plan] plan '.' type 'DNSKEY'
[38153][iter] '.' type 'DNSKEY' id was assigned, parent id 27743
[38153][ rc ] => satisfied from cache
[38153][iter] <= rcode: NOERROR
[38153][vldr] <= parent: updating DNSKEY
[38153][vldr] <= answer valid, OK
[43424][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[43424][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'UK.' type: 'NS' proto: 'udp'
[43424][iter] <= using glue for 'nsa.nic.uk.': '156.154.100.3'
[43424][iter] <= using glue for 'nsa.nic.uk.': '2001:502:ad09::3'
[43424][iter] <= using glue for 'nsb.nic.uk.': '156.154.101.3'
[43424][iter] <= using glue for 'nsc.nic.uk.': '156.154.102.3'
[43424][iter] <= using glue for 'nsd.nic.uk.': '156.154.103.3'
[43424][iter] <= using glue for 'dns1.nic.uk.': '213.248.216.1'
[43424][iter] <= using glue for 'dns1.nic.uk.': '2a01:618:400::1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '103.49.80.1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '2401:fd80:400::1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '213.248.220.1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '2a01:618:404::1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '43.230.48.1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '2401:fd80:404::1'
[43424][iter] <= referral response, follow
[43424][vldr] <= DS: OK
[43424][vldr] <= answer valid, OK
[43424][resl] <= server: '2001:500:9f::42' rtt: 2 ms
[32969][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32969][plan] plan 'uk.' type 'DNSKEY'
[11309][iter] 'uk.' type 'DNSKEY' id was assigned, parent id 32969
[11309][resl] => querying: '2401:fd80:404::1' score: 10 zone cut: 'uk.' m12n: 'uk.' type: 'DNSKEY' proto: 'udp'
[11309][iter] <= rcode: NOERROR
[11309][vldr] <= parent: updating DNSKEY
[11309][vldr] <= answer valid, OK
[11309][resl] <= server: '2401:fd80:404::1' rtt: 19 ms
[17293][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[17293][resl] => querying: '2a01:618:404::1' score: 10 zone cut: 'uk.' m12n: 'co.uK.' type: 'NS' proto: 'udp'
[17293][iter] <= rcode: NOERROR
[17293][iter] <= found cut, retrying with non-minimized name
[17293][resl] <= server: '2a01:618:404::1' rtt: 18 ms
[56151][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[56151][resl] => querying: '2401:fd80:400::1' score: 10 zone cut: 'uk.' m12n: 'Ns-1726.AWsDNs-23.Co.uK.' type: 'AAAA' proto: 'udp'
[56151][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[56151][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[56151][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[56151][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[56151][iter] <= referral response, follow
[56151][vldr] >< cut changed (new signer), needs revalidation
[56151][resl] <= server: '2401:fd80:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[23696][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][resl] => querying: '2a01:618:400::1' score: 10 zone cut: 'uk.' m12n: 'cO.uK.' type: 'DS' proto: 'udp'
[24246][iter] <= rcode: NOERROR
[24246][resl] <= server: '2a01:618:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[54876][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[54876][ rc ] => satisfied from cache
[54876][iter] <= rcode: NOERROR
[54876][vldr] <= cached insecure response, going insecure
[56151][resl] => resuming yielded answer
[32610][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32610][resl] => querying: '156.154.103.3' score: 10 zone cut: 'co.uk.' m12n: 'nS-1726.awsdnS-23.co.uk.' type: 'AAAA' proto: 'udp'
[32610][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[32610][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[32610][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[32610][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[32610][iter] <= referral response, follow
[32610][resl] <= server: '156.154.103.3' rtt: 21 ms
[ 7507][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 7507][resl] => querying: '205.251.199.27' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'ns-1726.AWSDns-23.CO.UK.' type: 'AAAA' proto: 'udp'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[ 7507][iter] <= rcode: NOERROR
[ 7507][resl] <= server: '205.251.199.27' rtt: 38 ms
[33647][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[33647][resl] => querying: '2600:9000:5306:be00::1' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'SuPErCore.S3.AMaZonAws.cOm.' type: 'A' proto: 'udp'
[33647][iter] <= rcode: REFUSED
[33647][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[ 1013][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 1013][resl] => querying: '2600:9000:5306:be00::1' score: 114 zone cut: 's3-1.amazonaws.com.' m12n: 'suPercORE.S3.AmAzOnAws.coM.' type: 'A' proto: 'udp'
[ 1013][iter] <= rcode: REFUSED
[ 1013][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[57855][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[57855][resl] => querying: '2600:9000:5306:be00::1' score: 164 zone cut: 's3-1.amazonaws.com.' m12n: 'supErcOre.s3.AmazoNaWS.coM.' type: 'A' proto: 'udp'
[57855][iter] <= rcode: REFUSED
[57855][resl] <= server: '2600:9000:5306:be00::1' rtt: 13 ms
[27306][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[27306][resl] => querying: '2600:9000:5306:be00::1' score: 188 zone cut: 's3-1.amazonaws.com.' m12n: 'SupeRcOre.s3.AmAzOnaWs.COM.' type: 'A' proto: 'udp'
[27306][iter] <= rcode: REFUSED
[27306][resl] => server: '2600:9000:5306:be00::1' flagged as 'bad'
[45229][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[45229][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'A'
[ 1731][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][resl] => querying: '2600:9000:5307:1b00::1' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'nS-1726.AWsdnS-23.cO.Uk.' type: 'A' proto: 'udp'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[49901][iter] <= rcode: NOERROR
[49901][resl] <= server: '2600:9000:5307:1b00::1' rtt: 15 ms
[ 5832][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5832][resl] => querying: '205.251.198.190' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'suPERcORE.s3.AmAzonAws.coM.' type: 'A' proto: 'udp'
[ 5832][iter] <= rcode: REFUSED
[ 5832][resl] <= server: '205.251.198.190' rtt: 32 ms
[61034][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[61034][resl] => querying: '205.251.198.190' score: 132 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPercorE.S3.AmAZOnAws.Com.' type: 'A' proto: 'udp'
[61034][iter] <= rcode: REFUSED
[61034][resl] <= server: '205.251.198.190' rtt: 31 ms
[59107][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[59107][resl] => querying: '205.251.198.190' score: 181 zone cut: 's3-1.amazonaws.com.' m12n: 'SUPERcoRe.s3.AMazonAWS.Com.' type: 'A' proto: 'udp'
[59107][iter] <= rcode: REFUSED
[59107][resl] <= server: '205.251.198.190' rtt: 37 ms
[46872][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[46872][resl] => querying: '205.251.198.190' score: 209 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPERCoRe.S3.amAZonaWs.coM.' type: 'A' proto: 'udp'
[46872][iter] <= rcode: REFUSED
[46872][resl] => server: '205.251.198.190' flagged as 'bad'
[13397][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13397][resl] => unresolvable NS address, bailing out
[13397][plan] plan 'ns-1084.awsdns-07.org.' type 'AAAA'
[18528][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[18528][resl] => using root hints
[ 4069][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[ 4069][resl] >< TA: '.'
[ 4069][plan] plan '.' type 'DNSKEY'
[59431][iter] '.' type 'DNSKEY' id was assigned, parent id 4069
[59431][ rc ] => satisfied from cache
[59431][iter] <= rcode: NOERROR
[59431][vldr] <= parent: updating DNSKEY
[59431][vldr] <= answer valid, OK
[51048][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[51048][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'oRg.' type: 'NS' proto: 'udp'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '199.19.56.1'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '2001:500:e::1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '199.249.112.1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '2001:500:40::1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '199.19.54.1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '2001:500:c::1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '199.249.120.1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '2001:500:48::1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '199.19.53.1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '2001:500:b::1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '199.19.57.1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '2001:500:f::1'
[51048][iter] <= referral response, follow
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B
```
1.2.0 release
Ivana Krumlova
Ivana Krumlova
https://gitlab.nic.cz/knot/knot-resolver/-/issues/131
pypi.fiber.consulting returns SERVFAIL on first try
2017-08-22T13:33:34+02:00
Ondřej Surý
pypi.fiber.consulting returns SERVFAIL on first try
Probably iteration limit or something like that:
Clean cache log:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[23288][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[23288][resl] => using root hint...
Probably iteration limit or something like that:
Clean cache log:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[23288][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[23288][resl] => using root hints
[47790][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[47790][plan] plan '.' type 'DNSKEY'
[10800][iter] '.' type 'DNSKEY' id was assigned, parent id 47790
[10800][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[10800][iter] <= rcode: NOERROR
[10800][vldr] <= parent: updating DNSKEY
[10800][vldr] <= answer valid, OK
[10800][resl] <= server: '2001:dc3::35' rtt: 19 ms
[24754][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[24754][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'COnsULTIng.' type: 'NS' proto: 'udp'
[24754][iter] <= using glue for 'demand.beta.aridns.net.au.': '37.209.194.7'
[24754][iter] <= using glue for 'demand.beta.aridns.net.au.': '2001:dcd:2::7'
[24754][iter] <= using glue for 'demand.alpha.aridns.net.au.': '37.209.192.7'
[24754][iter] <= using glue for 'demand.alpha.aridns.net.au.': '2001:dcd:1::7'
[24754][iter] <= using glue for 'demand.delta.aridns.net.au.': '37.209.198.7'
[24754][iter] <= using glue for 'demand.delta.aridns.net.au.': '2001:dcd:4::7'
[24754][iter] <= using glue for 'demand.gamma.aridns.net.au.': '37.209.196.7'
[24754][iter] <= using glue for 'demand.gamma.aridns.net.au.': '2001:dcd:3::7'
[24754][iter] <= referral response, follow
[24754][vldr] <= DS: OK
[24754][vldr] <= answer valid, OK
[24754][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[ 1704][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1704][plan] plan 'consulting.' type 'DNSKEY'
[16921][iter] 'consulting.' type 'DNSKEY' id was assigned, parent id 1704
[16921][resl] => querying: '2001:dcd:3::7' score: 10 zone cut: 'consulting.' m12n: 'CoNSULTiNg.' type: 'DNSKEY' proto: 'udp'
[16921][iter] <= rcode: NOERROR
[16921][vldr] <= parent: updating DNSKEY
[16921][vldr] <= answer valid, OK
[16921][resl] <= server: '2001:dcd:3::7' rtt: 15 ms
[59254][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[59254][resl] => querying: '2001:dcd:4::7' score: 10 zone cut: 'consulting.' m12n: 'fIBeR.CoNsUlting.' type: 'NS' proto: 'udp'
[59254][iter] <= referral response, follow
[59254][vldr] <= DS: OK
[59254][vldr] <= answer valid, OK
[59254][resl] <= server: '2001:dcd:4::7' rtt: 15 ms
[11692][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[11692][plan] plan 'fiber.consulting.' type 'DNSKEY'
[17671][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[17671][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[ 6688][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[ 6688][resl] => using root hints
[29600][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[29600][plan] plan '.' type 'DNSKEY'
[36950][iter] '.' type 'DNSKEY' id was assigned, parent id 29600
[36950][ rc ] => satisfied from cache
[36950][iter] <= rcode: NOERROR
[36950][vldr] <= parent: updating DNSKEY
[36950][vldr] <= answer valid, OK
[61812][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[61812][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'sPACe.' type: 'NS' proto: 'udp'
[61812][iter] <= using glue for 'a.nic.space.': '194.169.218.51'
[61812][iter] <= using glue for 'a.nic.space.': '2001:67c:13cc::1:51'
[61812][iter] <= using glue for 'b.nic.space.': '185.24.64.51'
[61812][iter] <= using glue for 'b.nic.space.': '2a04:2b00:13cc::1:51'
[61812][iter] <= using glue for 'c.nic.space.': '185.38.99.4'
[61812][iter] <= using glue for 'c.nic.space.': '2a02:e180:3::4'
[61812][iter] <= using glue for 'd.nic.space.': '108.59.161.4'
[61812][iter] <= using glue for 'd.nic.space.': '2a02:e180:4::4'
[61812][iter] <= referral response, follow
[61812][vldr] <= DS: OK
[61812][vldr] <= answer valid, OK
[61812][resl] <= server: '2001:7fd::1' rtt: 2 ms
[ 4807][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[ 4807][plan] plan 'space.' type 'DNSKEY'
[34976][iter] 'space.' type 'DNSKEY' id was assigned, parent id 4807
[34976][resl] => querying: '2a02:e180:4::4' score: 10 zone cut: 'space.' m12n: 'SpAcE.' type: 'DNSKEY' proto: 'udp'
[34976][iter] <= rcode: NOERROR
[34976][vldr] <= parent: updating DNSKEY
[34976][vldr] <= answer valid, OK
[34976][resl] <= server: '2a02:e180:4::4' rtt: 21 ms
[65306][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[65306][resl] => querying: '2a02:e180:3::4' score: 10 zone cut: 'space.' m12n: 'H4CK.Space.' type: 'NS' proto: 'udp'
[65306][iter] <= referral response, follow
[65306][vldr] <= DS doesn't exist, going insecure
[65306][vldr] <= parent: updating DS
[65306][vldr] <= answer valid, OK
[65306][resl] <= server: '2a02:e180:3::4' rtt: 99 ms
[25567][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[25567][plan] plan 'c.dns.gandi.net.' type 'AAAA'
[45392][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[45392][resl] => using root hints
[10763][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[10763][resl] >< TA: '.'
[10763][plan] plan '.' type 'DNSKEY'
[16961][iter] '.' type 'DNSKEY' id was assigned, parent id 10763
[16961][ rc ] => satisfied from cache
[16961][iter] <= rcode: NOERROR
[16961][vldr] <= parent: updating DNSKEY
[16961][vldr] <= answer valid, OK
[19618][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[19618][resl] => querying: '2001:503:c27::2:30' score: 10 zone cut: '.' m12n: 'nEt.' type: 'NS' proto: 'udp'
[19618][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[19618][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[19618][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[19618][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[19618][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[19618][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[19618][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[19618][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[19618][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[19618][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[19618][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[19618][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[19618][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[19618][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[19618][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[19618][iter] <= referral response, follow
[19618][vldr] <= DS: OK
[19618][vldr] <= answer valid, OK
[19618][resl] <= server: '2001:503:c27::2:30' rtt: 16 ms
[12050][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[12050][plan] plan 'net.' type 'DNSKEY'
[27336][iter] 'net.' type 'DNSKEY' id was assigned, parent id 12050
[27336][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'NEt.' type: 'DNSKEY' proto: 'udp'
[27336][iter] <= rcode: NOERROR
[27336][vldr] <= parent: updating DNSKEY
[27336][vldr] <= answer valid, OK
[27336][resl] <= server: '192.55.83.30' rtt: 35 ms
[ 1255][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[ 1255][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'GANDi.NET.' type: 'NS' proto: 'udp'
[ 1255][iter] <= using glue for 'dns0.gandi.net.': '2001:4b98:d:1::39'
[ 1255][iter] <= using glue for 'dns0.gandi.net.': '217.70.177.39'
[ 1255][iter] <= using glue for 'dns1.gandi.net.': '2001:4b98:d:1::45'
[ 1255][iter] <= using glue for 'dns1.gandi.net.': '217.70.177.45'
[ 1255][iter] <= using glue for 'dns2.gandi.net.': '2001:4b98:d:589::211'
[ 1255][iter] <= using glue for 'dns2.gandi.net.': '217.70.183.211'
[ 1255][iter] <= using glue for 'dns3.gandi.net.': '2001:4b98:c:13::14'
[ 1255][iter] <= using glue for 'dns3.gandi.net.': '217.70.184.14'
[ 1255][iter] <= using glue for 'dns4.gandi.net.': '2001:4b98:dc2:90:217:70:186:184'
[ 1255][iter] <= using glue for 'dns4.gandi.net.': '217.70.186.184'
[ 1255][iter] <= referral response, follow
[ 1255][vldr] <= DS doesn't exist, going insecure
[ 1255][vldr] <= parent: updating DS
[ 1255][vldr] <= answer valid, OK
[ 1255][resl] <= server: '192.41.162.30' rtt: 115 ms
[19006][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[19006][resl] => querying: '2001:4b98:dc2:90:217:70:186:184' score: 10 zone cut: 'gandi.net.' m12n: 'Dns.gANDi.NET.' type: 'NS' proto: 'udp'
[19006][iter] <= rcode: NOERROR
[19006][iter] <= found cut, retrying with non-minimized name
[19006][ pc ] => answer cached for TTL=900
[19006][resl] <= server: '2001:4b98:dc2:90:217:70:186:184' rtt: 18 ms
[58499][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[58499][resl] => querying: '217.70.186.184' score: 10 zone cut: 'gandi.net.' m12n: 'c.dns.GANdI.nEt.' type: 'AAAA' proto: 'udp'
[58499][iter] <= using glue for 'dns4.gandi.net.': '217.70.186.184'
[58499][iter] <= using glue for 'dns4.gandi.net.': '2001:4b98:dc2:90:217:70:186:184'
[58499][iter] <= using glue for 'dns2.gandi.net.': '217.70.183.211'
[58499][iter] <= using glue for 'dns2.gandi.net.': '2001:4b98:d:589::211'
[58499][iter] <= using glue for 'dns0.gandi.net.': '217.70.177.39'
[58499][iter] <= using glue for 'dns0.gandi.net.': '2001:4b98:d:1::39'
[58499][iter] <= using glue for 'dns1.gandi.net.': '217.70.177.45'
[58499][iter] <= using glue for 'dns1.gandi.net.': '2001:4b98:d:1::45'
[58499][iter] <= using glue for 'dns3.gandi.net.': '217.70.184.14'
[58499][iter] <= using glue for 'dns3.gandi.net.': '2001:4b98:c:13::14'
[58499][iter] <= rcode: NOERROR
[58499][resl] <= server: '217.70.186.184' rtt: 15 ms
[34114][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[34114][resl] => querying: '2604:3400:abcc::1' score: 10 zone cut: 'h4ck.space.' m12n: 'Ns2.h4CK.spAcE.' type: 'AAAA' proto: 'udp'
[34114][iter] <= rcode: NOERROR
[34114][iter] <= cname chain, following
[17671][plan] plan 'dns2.h4ck.space.' type 'AAAA'
[34114][resl] <= server: '2604:3400:abcc::1' rtt: 15 ms
[47406][iter] 'dns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[47406][ rc ] => satisfied from cache
[47406][iter] <= rcode: NOERROR
[47406][vldr] <= cached insecure response, going insecure
[18264][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[18264][plan] plan 'ns2.h4ck.space.' type 'A'
[54751][iter] 'ns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[54751][ rc ] => satisfied from cache
[54751][iter] <= rcode: NOERROR
[54751][iter] <= cname chain, following
[18264][plan] plan 'dns2.h4ck.space.' type 'A'
[54751][vldr] <= cached insecure response, going insecure
[61256][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[61256][resl] => NS is provably without DS, going insecure
[ 5367][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[ 5367][resl] => querying: '2604:3400:abcc::1' score: 15 zone cut: 'h4ck.space.' m12n: 'dns2.H4cK.spacE.' type: 'A' proto: 'udp'
[ 5367][iter] <= rcode: NOERROR
[ 5367][resl] <= server: '2604:3400:abcc::1' rtt: 18 ms
[16899][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[16899][resl] => unresolvable NS address, bailing out
[16899][resl] => querying: '2a01:7a0:10:151:236:17:139:1' score: 10 zone cut: 'fiber.consulting.' m12n: 'fibEr.conSulTINg.' type: 'DNSKEY' proto: 'udp'
[16899][iter] <= rcode: NOERROR
[16899][vldr] <= parent: updating DNSKEY
[16899][vldr] <= answer valid, OK
[16899][resl] <= server: '2a01:7a0:10:151:236:17:139:1' rtt: 16 ms
[55906][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[55906][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[14359][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 55906
[14359][ rc ] => satisfied from cache
[14359][iter] <= rcode: NOERROR
[14359][iter] <= cname chain, following
[14359][iter] <= cname chain loop
[ 0][resl] finished: 8, queries: 12, mempool: 98400 B
[ 0][plan] plan '.' type 'DNSKEY'
[31350][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[31350][ rc ] => satisfied from cache
[31350][iter] <= rcode: NOERROR
[ 0][resl] finished: 4, queries: 1, mempool: 163952 B
[ ta ] key: 19036 state: Valid
[ ta ] next refresh: 86400000
[ 0][plan] plan '.' type 'NS'
[11586][iter] '.' type 'NS' id was assigned, parent id 0
[11586][resl] => using root hints
[ 9182][iter] '.' type 'NS' id was assigned, parent id 0
[ 9182][plan] plan '.' type 'DNSKEY'
[63993][iter] '.' type 'DNSKEY' id was assigned, parent id 9182
[63993][ rc ] => satisfied from cache
[63993][iter] <= rcode: NOERROR
[63993][vldr] <= parent: updating DNSKEY
[63993][vldr] <= answer valid, OK
[12456][iter] '.' type 'NS' id was assigned, parent id 0
[12456][resl] => querying: '2001:7fe::53' score: 10 zone cut: '.' m12n: '.' type: 'NS' proto: 'udp'
[12456][iter] <= rcode: NOERROR
[12456][vldr] <= answer valid, OK
[12456][resl] <= server: '2001:7fe::53' rtt: 7 ms
[ 0][resl] finished: 4, queries: 2, mempool: 98352 B
```
Second attempt:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[ 7101][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1393][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1393][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[ 6625][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 1393
[ 6625][ rc ] => satisfied from cache
[ 6625][iter] <= rcode: NOERROR
[ 6625][iter] <= cname chain, following
[ 1393][plan] plan 'dns2.h4ck.space.' type 'AAAA'
[ 6625][vldr] <= cached insecure response, going insecure
[62761][iter] 'dns2.h4ck.space.' type 'AAAA' id was assigned, parent id 1393
[62761][ rc ] => satisfied from cache
[62761][iter] <= rcode: NOERROR
[62761][vldr] <= cached insecure response, going insecure
[54779][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[54779][plan] plan 'ns2.h4ck.space.' type 'A'
[22497][iter] 'ns2.h4ck.space.' type 'A' id was assigned, parent id 54779
[22497][ rc ] => satisfied from cache
[22497][iter] <= rcode: NOERROR
[22497][iter] <= cname chain, following
[54779][plan] plan 'dns2.h4ck.space.' type 'A'
[22497][vldr] <= cached insecure response, going insecure
[21038][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 54779
[21038][ rc ] => satisfied from cache
[21038][iter] <= rcode: NOERROR
[21038][vldr] <= cached insecure response, going insecure
[42668][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[42668][resl] => unresolvable NS address, bailing out
[42668][resl] => querying: '151.236.17.139' score: 10 zone cut: 'fiber.consulting.' m12n: 'PyPI.fIbER.cONsUlTING.' type: 'A' proto: 'udp'
[42668][iter] <= rcode: NOERROR
[42668][iter] <= cname chain, following
[ 0][plan] plan 'epsilon.rammhold.de.' type 'A'
[42668][vldr] <= answer valid, OK
[42668][resl] <= server: '151.236.17.139' rtt: 19 ms
[30661][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[30661][plan] plan 'm.root-servers.net.' type 'AAAA'
[18825][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[18825][resl] >< TA: '.'
[18825][resl] => querying: '2001:500:9f::42' score: 11 zone cut: '.' m12n: 'NEt.' type: 'NS' proto: 'udp'
[18825][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[18825][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[18825][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[18825][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[18825][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[18825][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[18825][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[18825][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[18825][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[18825][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[18825][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[18825][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[18825][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[18825][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[18825][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[18825][iter] <= referral response, follow
[18825][vldr] <= DS: OK
[18825][vldr] <= answer valid, OK
[18825][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[36046][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[36046][plan] plan 'net.' type 'DNSKEY'
[43294][iter] 'net.' type 'DNSKEY' id was assigned, parent id 36046
[43294][ rc ] => satisfied from cache
[43294][iter] <= rcode: NOERROR
[43294][vldr] <= parent: updating DNSKEY
[43294][vldr] <= answer valid, OK
[47963][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[47963][resl] => querying: '192.52.178.30' score: 10 zone cut: 'net.' m12n: 'rOOt-SerVErs.nET.' type: 'NS' proto: 'udp'
[47963][resl] => querying: '192.48.79.30' score: 10 zone cut: 'net.' m12n: 'rOOt-SerVErs.nET.' type: 'NS' proto: 'udp'
[47963][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[47963][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[47963][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[47963][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[47963][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[47963][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[47963][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[47963][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[47963][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[47963][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[47963][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[47963][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[47963][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[47963][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[47963][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[47963][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[47963][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[47963][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[47963][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[47963][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[47963][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[47963][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[47963][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[47963][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[47963][iter] <= referral response, follow
[47963][vldr] <= DS doesn't exist, going insecure
[47963][vldr] <= parent: updating DS
[47963][vldr] <= answer valid, OK
[47963][resl] <= server: '192.52.178.30' rtt: 264 ms
[47963][resl] <= server: '192.48.79.30' rtt: >=14 ms
[56807][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[56807][resl] => querying: '202.12.27.33' score: 10 zone cut: 'root-servers.net.' m12n: 'M.RoOT-sErVeRs.net.' type: 'AAAA' proto: 'udp'
[56807][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[56807][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[56807][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[56807][iter] <= using glue for 'g.root-servers.net.': '2001:500:12::d0d'
[56807][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[56807][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[56807][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[56807][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[56807][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[56807][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[56807][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[56807][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[56807][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[56807][iter] <= using glue for 'e.root-servers.net.': '2001:500:a8::e'
[56807][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[56807][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[56807][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[56807][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[56807][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[56807][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[56807][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[56807][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[56807][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[56807][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[56807][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[56807][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[56807][iter] <= rcode: NOERROR
[56807][resl] <= server: '202.12.27.33' rtt: 18 ms
[58965][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[58965][resl] => querying: '2001:dc3::35' score: 19 zone cut: '.' m12n: 'dE.' type: 'NS' proto: 'udp'
[58965][iter] <= using glue for 'l.de.net.': '77.67.63.105'
[58965][iter] <= using glue for 'l.de.net.': '2001:668:1f:11::105'
[58965][iter] <= using glue for 'f.nic.de.': '81.91.164.5'
[58965][iter] <= using glue for 'f.nic.de.': '2a02:568:0:2::53'
[58965][iter] <= using glue for 'a.nic.de.': '194.0.0.53'
[58965][iter] <= using glue for 'a.nic.de.': '2001:678:2::53'
[58965][iter] <= using glue for 'n.de.net.': '194.146.107.6'
[58965][iter] <= using glue for 'n.de.net.': '2001:67c:1011:1::53'
[58965][iter] <= using glue for 'z.nic.de.': '194.246.96.1'
[58965][iter] <= using glue for 's.de.net.': '195.243.137.26'
[58965][iter] <= referral response, follow
[58965][vldr] <= DS: OK
[58965][vldr] <= answer valid, OK
[58965][resl] <= server: '2001:dc3::35' rtt: 18 ms
[63087][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[63087][plan] plan 'de.' type 'DNSKEY'
[42419][iter] 'de.' type 'DNSKEY' id was assigned, parent id 63087
[42419][resl] => querying: '194.246.96.1' score: 10 zone cut: 'de.' m12n: 'DE.' type: 'DNSKEY' proto: 'udp'
[42419][iter] <= rcode: NOERROR
[42419][vldr] <= parent: updating DNSKEY
[42419][vldr] <= answer valid, OK
[42419][resl] <= server: '194.246.96.1' rtt: 121 ms
[ 7766][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[ 7766][resl] => querying: '195.243.137.26' score: 10 zone cut: 'de.' m12n: 'RaMmhoLD.dE.' type: 'NS' proto: 'udp'
[ 7766][iter] <= using glue for 'ns1.quarxconnect.de.': '94.186.151.136'
[ 7766][iter] <= referral response, follow
[ 7766][vldr] <= DS doesn't exist, going insecure
[ 7766][vldr] <= answer valid, OK
[ 7766][resl] <= server: '195.243.137.26' rtt: 23 ms
[19955][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[19955][resl] => querying: '94.186.151.136' score: 10 zone cut: 'rammhold.de.' m12n: 'EPsIloN.RaMMholD.De.' type: 'A' proto: 'udp'
[19955][iter] <= referral response, follow
[19955][resl] <= server: '94.186.151.136' rtt: 38 ms
[49323][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[49323][plan] plan 'ns2.quarxconnect.org.' type 'AAAA'
[12824][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[12824][resl] >< TA: '.'
[12824][resl] => querying: '2001:500:1::53' score: 10 zone cut: '.' m12n: 'OrG.' type: 'NS' proto: 'udp'
[12824][iter] <= using glue for 'a0.org.afilias-nst.info.': '2001:500:e::1'
[12824][iter] <= using glue for 'a0.org.afilias-nst.info.': '199.19.56.1'
[12824][iter] <= using glue for 'a2.org.afilias-nst.info.': '2001:500:40::1'
[12824][iter] <= using glue for 'a2.org.afilias-nst.info.': '199.249.112.1'
[12824][iter] <= using glue for 'b0.org.afilias-nst.org.': '2001:500:c::1'
[12824][iter] <= using glue for 'b0.org.afilias-nst.org.': '199.19.54.1'
[12824][iter] <= using glue for 'b2.org.afilias-nst.org.': '2001:500:48::1'
[12824][iter] <= using glue for 'b2.org.afilias-nst.org.': '199.249.120.1'
[12824][iter] <= using glue for 'c0.org.afilias-nst.info.': '2001:500:b::1'
[12824][iter] <= using glue for 'c0.org.afilias-nst.info.': '199.19.53.1'
[12824][iter] <= using glue for 'd0.org.afilias-nst.org.': '2001:500:f::1'
[12824][iter] <= using glue for 'd0.org.afilias-nst.org.': '199.19.57.1'
[12824][iter] <= referral response, follow
[12824][vldr] <= DS: OK
[12824][vldr] <= answer valid, OK
[12824][resl] <= server: '2001:500:1::53' rtt: 94 ms
[21499][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[21499][plan] plan 'org.' type 'DNSKEY'
[42662][iter] 'org.' type 'DNSKEY' id was assigned, parent id 21499
[42662][resl] => querying: '2001:500:f::1' score: 10 zone cut: 'org.' m12n: 'orG.' type: 'DNSKEY' proto: 'udp'
[42662][iter] <= rcode: NOERROR
[42662][vldr] <= parent: updating DNSKEY
[42662][vldr] <= answer valid, OK
[42662][resl] <= server: '2001:500:f::1' rtt: 165 ms
[58832][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[58832][resl] => querying: '199.19.57.1' score: 10 zone cut: 'org.' m12n: 'QuarxconNECT.ORg.' type: 'NS' proto: 'udp'
[58832][iter] <= using glue for 'ns2.quarxconnect.org.': '89.238.77.2'
[58832][iter] <= referral response, follow
[58832][vldr] <= DS doesn't exist, going insecure
[58832][vldr] <= parent: updating DS
[58832][vldr] <= answer valid, OK
[58832][resl] <= server: '199.19.57.1' rtt: 95 ms
[ 3403][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[ 3403][resl] => querying: '89.238.77.2' score: 10 zone cut: 'quarxconnect.org.' m12n: 'ns2.QuaRXCOnnect.orG.' type: 'AAAA' proto: 'udp'
[ 3403][iter] <= rcode: NOERROR
[ 3403][ pc ] => answer cached for TTL=900
[ 3403][resl] <= server: '89.238.77.2' rtt: 24 ms
[20474][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[20474][ rc ] => satisfied from cache
[20474][iter] <= rcode: NOERROR
[ 0][resl] finished: 4, queries: 11, mempool: 98400 B
```
1.2.0 release
Ivana Krumlova
Ivana Krumlova
https://gitlab.nic.cz/knot/knot-resolver/-/issues/119
[vld-refactoring] Fails to resolve ftp.tu-graz.ac.at
2017-08-22T13:33:34+02:00
Ondřej Surý
[vld-refactoring] Fails to resolve ftp.tu-graz.ac.at
vld-refactoring snapshot from this morning:
```
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'ftp.tu-graz.ac.at.' type 'A'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score...
vld-refactoring snapshot from this morning:
```
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'ftp.tu-graz.ac.at.' type 'A'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 22 zone cut: 'at.' m12n: 'aC.AT.' type: 'NS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= found cut, retrying with non-minimized name
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 17 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 19 zone cut: 'at.' m12n: 'FTP.tu-GraZ.aC.at.' type: 'A' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns1.tu-graz.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns5.univie.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns2.tu-graz.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns10.univie.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= referral response, follow
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [vldr] <= DS\NSEC was not found, querying for DS
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 18 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'tu-graz.ac.at.' type 'DS'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 18 zone cut: 'at.' m12n: 'aC.aT.' type: 'NS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= found cut, retrying with non-minimized name
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 17 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 17 zone cut: 'at.' m12n: 'TU-GRAz.ac.AT.' type: 'DS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [vldr] <= bad NODATA proof
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] finished: 8, queries: 0, mempool: 16400 B
```
But it looks ok according to dnsviz: http://dnsviz.net/d/ftp.tu-graz.ac.at/dnssec/
1.2.0 release
Štěpán Balážik
Štěpán Balážik
https://gitlab.nic.cz/knot/knot-resolver/-/issues/118
[vld-refactoring] Fails to revalidate .org
2017-08-22T13:33:34+02:00
Ondřej Surý
[vld-refactoring] Fails to revalidate .org
This happens on two independent knot resolvers. The version is 1.2.0~20161222-1+0~201612220911 which is based on `vld-refactoring` branch as of 2016-12-22 state.
It needs cache purge to make the resolving work again for those.
I am...
This happens on two independent knot resolvers. The version is 1.2.0~20161222-1+0~201612220911 which is based on `vld-refactoring` branch as of 2016-12-22 state.
It needs cache purge to make the resolving work again for those.
I am going to upgrade both machines to the todays state to see whether it helps.
Happened with anything under `rfc1925.org` yesterday (and cache purge helped).
```
root@milkyway:~# host ftp.cz.debian.org
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'A'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 30 zone cut: '.' m12n: 'ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'a2.org.afilias-nst.info.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFIliAS-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIliaS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLias-nsT.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiliaS-nsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AFiLiAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfilIAs-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLias-nST.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLIAS-nst.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AfiLIAs-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 96 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFILias-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAs-nSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLIas-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAs-nst.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLias-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFilIAs-nSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AFIlIaS-NST.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 94 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFILias-NSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiliAS-NSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIaS-nST.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afilias-nsT.OrG.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type A error: SERVFAIL
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AfILiAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLIAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'AAAA'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 27 zone cut: '.' m12n: 'orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'a2.org.afilias-nst.info.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLiAS-nst.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILiaS-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAS-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAs-nsT.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiliAS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAs-NST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiliaS-nST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILIAs-nST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AFiLiAs-nsT.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILias-NSt.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfilIAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLIaS-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AFilias-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 94 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAS-NST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afiLias-NST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAS-Nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afiLIaS-Nst.oRg.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type AAAA error: SERVFAIL
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'aFilIaS-NSt.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFilIAS-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAS-nST.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAS-NsT.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLIas-NsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'MX'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 25 zone cut: '.' m12n: 'org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIlias-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFIlIaS-NSt.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIas-NSt.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIlIaS-nst.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIAS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAs-nsT.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliAS-nST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLiaS-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIas-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 10 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILias-NsT.oRG.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type MX error: SERVFAIL
root@milkyway:~# Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFilIAS-nSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLIas-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliaS-nst.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLiaS-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 10 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIas-NSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLIAs-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliAS-NsT.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAs-NSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiliAs-nsT.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afILIaS-NSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
```
1.2.0 release
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/58
dnssec bug: resolver fails to validate answers
2018-11-12T16:15:57+01:00
Ondřej Surý
dnssec bug: resolver fails to validate answers
This is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rco...
This is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[iter] <= rcode: NOERROR
[vldr] <= couldn't validate RRSIGs
```
One of the nameservers for cmu.edu is misconfigured and returns `REFUSED`:
```
$ dig IN A www.cmu.edu @ny-server-03.net.cmu.edu.
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 61298
;; Flags: qr rd; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:04 CEST
;; From 38.96.147.4@53(UDP) in 98.5 ms
```
kresd should try harder and not return `REFUSED`, but retry with different nameservers.
```
$ dig IN A www.cmu.edu @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 60007
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:46 CEST
;; From 127.0.0.1@53(UDP) in 165.3 ms
```
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/41
Program received signal SIGSEGV, Segmentation fault. 0x00007ffff66b48ed in ??...
2022-04-08T16:14:00+02:00
Ondřej Surý
Program received signal SIGSEGV, Segmentation fault. 0x00007ffff66b48ed in ?? () from /lib/x86_64-linux-gnu/libc.so.6
Version v1.0.0-beta1-96-gc7e8224
And it's something in the config as it doesn't crash when config is empty:
config:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2...
Version v1.0.0-beta1-96-gc7e8224
And it's something in the config as it doesn't crash when config is empty:
config:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2001:1488:ffff:64:ffff:ffff::',
tinyweb = {
addr = '127.0.0.1:8053',
geoip = '/root'
}
}
```
```
#0 0x00007ffff66b48ed in ?? () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1 0x00007ffff6d0bd92 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#2 0x00007ffff6d0d0aa in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#3 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#4 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#5 0x000000000041049f in l_ffi_call (argc=2, L=0x40000378) at daemon/ffimodule.c:84
status = <optimized out>
#6 l_ffi_layer_begin (ctx=0x7fffffffe2e0, module_param=<optimized out>) at daemon/ffimodule.c:153
cb_slot = <optimized out>
L = 0x40000378
#7 0x0000000000414ab8 in resolve_query (packet=0x6a07a0, request=0x6a07a0) at lib/resolve.c:390
layer = {node = {next = 0x0, prev = 0x0}, state = 2, mm = 0x0, data = 0x6a07a0, api = 0x662640}
mod = <optimized out>
i = 4
rplan = 0x6a0800
qtype = <optimized out>
negative_anchors = 0x7fffffffea20
trust_anchors = 0x7fffffffea00
answer = <optimized out>
qname = <optimized out>
qclass = <optimized out>
qry = 0x6a2b90
#8 kr_resolve_consume (request=request@entry=0x6a07a0, src=src@entry=0x0, packet=packet@entry=0x6965b0) at lib/resolve.c:407
rplan = 0x6a0800
ctx = 0x7fffffffe9f0
qry = <optimized out>
tried_tcp = <optimized out>
#9 0x000000000040de58 in qr_task_step (task=0x6a07a0, packet_source=packet_source@entry=0x0, packet=0x6965b0) at daemon/worker.c:449
sock_type = -1
state = <optimized out>
choice = <optimized out>
#10 0x000000000040e5d8 in worker_resolve (worker=worker@entry=0x7ffff7f95010, query=<optimized out>, options=options@entry=0, on_complete=<optimized out>, baton=<optimized out>)
at daemon/worker.c:616
task = <optimized out>
#11 0x000000000040fc0c in wrk_resolve (L=0x40000378) at daemon/bindings.c:658
worker = 0x7ffff7f95010
pkt = 0x6965b0
dname = '\000' <repeats 80 times>, "\270\003\000@\000\000\000\000x\003\000@\000\000\000\000\220\344\377\377\377\177\000\000\b\032\003@\000\000\000\000\210\345\001@\000\000\000\000\310\324\000@\000\000\000\000HN\001@\000\000\000\000\200\345\001@\000\000\000\000\324\344\377\377\377\177\000\000_\317\320\366\377\177\000\000X\237\000@\000\000\000\000\330\344\377\377\377\177\000\000\210\344\377\377\377\177\000\000\204\344\377\377\377\177\000\000x\003\000@\001\000\000\000"...
rrtype = 2
rrclass = <optimized out>
ret = 0
options = 0
#12 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#13 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#14 0x000000000040c11c in engine_pcall (L=<optimized out>, argc=<optimized out>) at daemon/engine.c:469
No locals.
#15 0x000000000040fe03 in execute_callback (L=0x40000378, argc=1) at daemon/bindings.c:476
ret = <optimized out>
#16 0x000000000040d611 in qr_task_complete (handle=<optimized out>) at daemon/worker.c:280
task = 0x697750
worker = 0x7ffff7f95010
#17 0x00007ffff7787698 in uv_run () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#18 0x00000000004087c6 in run_worker (engine=0x7fffffffe9f0, loop=0x7ffff799f980) at daemon/main.c:193
sock_file = 0x62f250 "tty/29364"
pipe = {data = 0x7fffffffe9f0, loop = 0x7ffff799f980, type = UV_NAMED_PIPE, close_cb = 0x0, handle_queue = {0x697878, 0x662270}, u = {fd = 5, reserved = {0x5, 0x17, 0x7ffff7feacb8,
0x7ffff7de55ce}}, next_closing = 0x0, flags = 24576, write_queue_size = 0, alloc_cb = 0x0, read_cb = 0x0, connect_req = 0x0, shutdown_req = 0x0, io_watcher = {cb = 0x7ffff7790540,
pending_queue = {0x7fffffffe970, 0x7fffffffe970}, watcher_queue = {0x7fffffffe980, 0x7fffffffe980}, pevents = 1, events = 1, fd = 21}, write_queue = {0x7fffffffe9a0, 0x7fffffffe9a0},
write_completed_queue = {0x7fffffffe9b0, 0x7fffffffe9b0}, connection_cb = 0x411010 <tty_accept>, delayed_error = 0, accepted_fd = -1, queued_fds = 0x0, ipc = 0,
pipe_fname = 0x62f3f0 "tty/29364"}
#19 main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:350
forks = <optimized out>
addr_set = {at = 0x648470, len = 2, cap = <optimized out>}
keyfile = 0x6289c0 <keyfile_buf> "/usr/share/dns/root.key"
config = 0x0
keyfile_buf = "/usr/share/dns/root.key", '\000' <repeats 4073 times>
c = <optimized out>
li = 0
ret = 0
opts = {{name = 0x42000d "addr", has_arg = 1, flag = 0x0, val = 97}, {name = 0x41e96c "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x420422 "keyfile", has_arg = 1, flag = 0x0,
val = 107}, {name = 0x42042a "forks", has_arg = 1, flag = 0x0, val = 102}, {name = 0x41e9ae "verbose", has_arg = 0, flag = 0x0, val = 118}, {name = 0x420430 "version", has_arg = 0,
flag = 0x0, val = 86}, {name = 0x41e99b "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
loop = 0x7ffff799f980
sigint = {data = 0x7ffff7feacb8, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x97a26e6c, handle_queue = {0x7fffffffe760, 0x7ffff799fa50}, u = {fd = -134304584, reserved = {
0x7ffff7feacb8, 0x7ffff7de55ce, 0x7ffff7ff8160, 0x7fffffffe720}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 2, tree_entry = {rbe_left = 0x0,
rbe_right = 0x7fffffffe740, rbe_parent = 0x0, rbe_color = 0}, caught_signals = 0, dispatched_signals = 0}
sigterm = {data = 0x7ffff5ec1438, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x1000000ab, handle_queue = {0x6616e0, 0x7fffffffe6c0}, u = {fd = -5952, reserved = {0x7fffffffe8c0,
0x7ffff7de4c5c, 0x7fffffffe8e8, 0xd82b830}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 15, tree_entry = {rbe_left = 0x0, rbe_right = 0x0,
rbe_parent = 0x7fffffffe6a0, rbe_color = 1}, caught_signals = 0, dispatched_signals = 0}
pool = {ctx = 0x648530, alloc = 0x411830 <mp_alloc>, free = 0x0}
engine = {resolver = {options = 0, opt_rr = 0x6485a0, trust_anchors = {root = 0x634f30, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, negative_anchors = {
root = 0x0, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, root_hints = {name = 0x6485d8 "", nsset = {root = 0x6486a1, malloc = 0x7ffff7bcb7b0 <mm_alloc>,
free = 0x7ffff7bcb7d0 <mm_free>, baton = 0x7fffffffe680}, key = 0x0, trust_anchor = 0x0, parent = 0x0, pool = 0x7fffffffe680}, cache = {db = 0x648cb8, api = 0x7ffff7dda300,
stats = {hit = 26, miss = 2, insert = 2, delete = 0, txn_read = 1, txn_write = 3}}, cache_rtt = 0x649550, cache_rep = 0x659590, modules = 0x7fffffffeaf8, pool = 0x7fffffffe680},
net = {loop = 0x7ffff799f980, endpoints = {root = 0x62b911, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}}, modules = {at = 0x662750, len = 9, cap = 10},
storage_registry = {at = 0x661930, len = 1, cap = 5}, pool = 0x7fffffffe680, L = 0x40000378}
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/93
Implement DNS round-robin in the RRSets on response to client
2017-08-22T13:33:34+02:00
Horigome Yoshihito
Implement DNS round-robin in the RRSets on response to client
There are still some services that rely on DNS Round-Robin of RRs in the RRSets returned to such client. Thus there should be an option to enable round-robin of RRSets.
This could be implemented in number of ways:
- persistent determ...
There are still some services that rely on DNS Round-Robin of RRs in the RRSets returned to such client. Thus there should be an option to enable round-robin of RRSets.
This could be implemented in number of ways:
- persistent deterministic round-robin, e.g. keep the current HEAD in the cache backend; the advantage here is that the round-robin ordering is kept across all instances using shared cache, but the disadvantage is writing into the cache at every read access
- shuffle the output for the client, possible options: random, pseudo-random, time-based (e.g. pick `timestamp%<n>` order)?
In any case this might have an impact on the performance because it usually applies to the records that are already in the cache.
Vladimír Čunát
vladimir.cunat@nic.cz
Vladimír Čunát
vladimir.cunat@nic.cz
https://gitlab.nic.cz/knot/knot-resolver/-/issues/49
DNS over TLS
2017-08-22T13:33:34+02:00
Ondřej Surý
DNS over TLS
https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls/ has been Submitted to IESG for Publication
https://datatracker.ietf.org/doc/draft-ietf-dprive-dns-over-tls/ has been Submitted to IESG for Publication
2016.Q3
https://gitlab.nic.cz/knot/knot-resolver/-/issues/18
daemon: implement REDO log
2017-12-08T11:24:16+01:00
Ghost User
daemon: implement REDO log
### Problem
Configuration changes in CLI [are not persistent](http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration) if the program stops.
### Expected outcome
It would be nice if the daemon kept a redo log of...
### Problem
Configuration changes in CLI [are not persistent](http://knot-resolver.readthedocs.org/en/latest/daemon.html#configuration) if the program stops.
### Expected outcome
It would be nice if the daemon kept a redo log of changes with the possibility to commit them into configuration. This could be simple as it is just a sequence of commands that needs to be appended to the configuration.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/17
daemon: improve tty interface
2022-04-08T16:13:58+02:00
Ghost User
daemon: improve tty interface
### Problem
The CLI interface is based on reading stdin lines, not a TTY, so it doesn't support text cursor, tab completion or multiline commands.
### Expected outcome
Basically it should behave like a Lua interpreter, but inte...
### Problem
The CLI interface is based on reading stdin lines, not a TTY, so it doesn't support text cursor, tab completion or multiline commands.
### Expected outcome
Basically it should behave like a Lua interpreter, but integrated in libuv loop.
There is already TTY code in libuv, and Lua interpreters around so we might want to reuse something.
* [ ] Real TTY, support for arrows
* [ ] Basic introspection
* [ ] Tab completion
2015 Q3
https://gitlab.nic.cz/knot/knot-resolver/-/issues/16
lib: implement subset of getdns API
2017-12-08T11:24:16+01:00
Ghost User
lib: implement subset of getdns API
### Problem
I'd like the library to be reuseable by clients. [getdns](https://getdnsapi.net/) is a way to do that.
### Expected outcome
* [ ] Download the latest header
* [ ] Implement simple query resolution
* [ ] Implement b...
### Problem
I'd like the library to be reuseable by clients. [getdns](https://getdnsapi.net/) is a way to do that.
### Expected outcome
* [ ] Download the latest header
* [ ] Implement simple query resolution
* [ ] Implement basic options (TCP, EDNS...)
* [ ] Implement unit tests (some possibly exist in other implementations!)
https://gitlab.nic.cz/knot/knot-resolver/-/issues/10
library: dnssec validation (module, APIs, prep)
2018-09-14T14:41:07+02:00
Ghost User
library: dnssec validation (module, APIs, prep)
## Idea
wip
## Steps
* [x] Fetch/store RRSIGs in the record cache
* [ ] Put this in cache unit test
* [ ] Obstacle 1
* [ ] Make a generic crypto API for signature verification
* [ ] Look at different crypto backends and assess the...
## Idea
wip
## Steps
* [x] Fetch/store RRSIGs in the record cache
* [ ] Put this in cache unit test
* [ ] Obstacle 1
* [ ] Make a generic crypto API for signature verification
* [ ] Look at different crypto backends and assess them (CC @jvcelak)
* [ ] Select a crypto backend and implement verification for it
* [ ] Make a unit test for mock signature verification
* [ ] Validate RRSIGs in packet (if required)
* [ ] Start playing with the `tests/testdata/test_notimpl` DNSSEC tests
* [ ] Validate trust chain
* [ ] Obstacle 2
* [ ] Process `DS` records
* [ ] RFC5011 for root trust anchor management
* [ ] Integration tests should pass now
^ fixme @kslany
2015 Q3
https://gitlab.nic.cz/knot/knot-resolver/-/issues/9
daemon: RPC interface (json-based, possibly unbound-rpc/rndc wrapper)
2021-04-16T19:20:19+02:00
Ghost User
daemon: RPC interface (json-based, possibly unbound-rpc/rndc wrapper)
2015 Q1
https://gitlab.nic.cz/knot/knot-resolver/-/issues/8
daemon: configuration parser/interface
2021-04-16T19:20:19+02:00
Ghost User
daemon: configuration parser/interface
2015 Q1
https://gitlab.nic.cz/knot/knot-resolver/-/issues/7
cache: garbage collection scheme / aging
2021-04-16T19:20:19+02:00
Ghost User
cache: garbage collection scheme / aging
2015 Q1
https://gitlab.nic.cz/knot/knot-resolver/-/issues/6
tests: CMocka-based unit tests for current APIs
2021-04-16T19:20:19+02:00
Ghost User
tests: CMocka-based unit tests for current APIs
library:
* resolution
* cache
* zone cuts
* utils
daemon:
* tcp
* udp
* worker
library:
* resolution
* cache
* zone cuts
* utils
daemon:
* tcp
* udp
* worker
2015 Q1
https://gitlab.nic.cz/knot/knot-resolver/-/issues/5
tests: test binary using socket_wrapper (cwrap)
2021-04-16T19:20:19+02:00
Ghost User
tests: test binary using socket_wrapper (cwrap)
Things missing:
* [x] Wrap I/O syscalls instead of libknot library calls (more portable, generic)
* [ ] Make Python test server listen on all addresses listed in the test
* [ ] use socket_wrapper to isolate it in a test environmen...
Things missing:
* [x] Wrap I/O syscalls instead of libknot library calls (more portable, generic)
* [ ] Make Python test server listen on all addresses listed in the test
* [ ] use socket_wrapper to isolate it in a test environment https://cwrap.org/socket_wrapper.html
* [ ] isolate the binary as well and test if it connects to the faked servers
* [ ] prepare configuration for binary in the test cases
* [ ] check that all tests pass on the binary!
* [ ] Documentation (may reference to the https://www.unbound.net/documentation/doxygen/replay_8h.html#details)
* [ ] Publish this as a tool to test recursive/auth DNS compliance
2015 Q3
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/137
Resolution of www.bbc.com fails with 1.2rc2
2017-08-22T13:33:34+02:00
Michal Čihař
Resolution of www.bbc.com fails with 1.2rc2
This is followup from testing #132.
Resolving of www-bbc-com.bbc.net.uk fails with 1.2rc2:
```
; <<>> DiG 9.9.8-P4 <<>> -p 1053 www-bbc-com.bbc.net.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, sta...
This is followup from testing #132.
Resolving of www-bbc-com.bbc.net.uk fails with 1.2rc2:
```
; <<>> DiG 9.9.8-P4 <<>> -p 1053 www-bbc-com.bbc.net.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 52499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www-bbc-com.bbc.net.uk. IN A
;; Query time: 1783 msec
;; SERVER: 127.0.0.1#1053(127.0.0.1)
;; WHEN: Tue Jan 24 11:34:09 CET 2017
;; MSG SIZE rcvd: 51
```
While it works fine with 1.1.1:
```
; <<>> DiG 9.9.8-P4 <<>> -p 1053 www-bbc-com.bbc.net.uk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43603
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www-bbc-com.bbc.net.uk. IN A
;; ANSWER SECTION:
www-bbc-com.bbc.net.uk. 300 IN A 212.58.246.54
www-bbc-com.bbc.net.uk. 300 IN A 212.58.244.26
;; Query time: 391 msec
;; SERVER: 127.0.0.1#1053(127.0.0.1)
;; WHEN: Tue Jan 24 11:35:05 CET 2017
;; MSG SIZE rcvd: 83
```
Logs for both versions:
[kresd-1.1.1.log](/uploads/a8b5c7ae3e73d37cfec67e6176303feb/kresd-1.1.1.log)
[kresd-1.2-rc2.log](/uploads/9392d7535936a81838f57321c573d6a9/kresd-1.2-rc1.log)
PS: I was testing with rc2, but the originally reported rc1 version, sorry for confusion.
1.2.0 release
Ivana Krumlova
Ivana Krumlova
https://gitlab.nic.cz/knot/knot-resolver/-/issues/132
s0[1234]..se.prima-vod-prep-sec.service.cdn.cra.cz. fails to resolve with alr...
2017-08-22T13:33:36+02:00
Ondřej Surý
s0[1234]..se.prima-vod-prep-sec.service.cdn.cra.cz. fails to resolve with already cached subqueries
This is definitely broken upstream implementation, but we should be able to work around that. @nijel, I would also suggest submitting this to CRA, if you have any relationship to them.
The clear cache behaviour:
```
[ 0][plan] plan...
This is definitely broken upstream implementation, but we should be able to work around that. @nijel, I would also suggest submitting this to CRA, if you have any relationship to them.
The clear cache behaviour:
```
[ 0][plan] plan 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A'
[54465][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[54465][plan] plan 'm.root-servers.net.' type 'AAAA'
[37257][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 54465
[37257][resl] >< TA: '.'
[37257][resl] => querying: '2001:dc3::35' score: 40 zone cut: '.' m12n: 'NEt.' type: 'NS' proto: 'udp'
[37257][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[37257][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[37257][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[37257][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[37257][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[37257][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[37257][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[37257][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[37257][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[37257][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[37257][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[37257][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[37257][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[37257][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[37257][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[37257][iter] <= referral response, follow
[37257][vldr] <= DS: OK
[37257][vldr] <= answer valid, OK
[37257][resl] <= server: '2001:dc3::35' rtt: 32 ms
[35585][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 54465
[35585][plan] plan 'net.' type 'DNSKEY'
[ 1566][iter] 'net.' type 'DNSKEY' id was assigned, parent id 35585
[ 1566][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'nET.' type: 'DNSKEY' proto: 'udp'
[ 1566][iter] <= rcode: NOERROR
[ 1566][vldr] <= parent: updating DNSKEY
[ 1566][vldr] <= answer valid, OK
[ 1566][resl] <= server: '192.55.83.30' rtt: 58 ms
[61036][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 54465
[61036][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'rOOT-seRVERS.net.' type: 'NS' proto: 'udp'
[61036][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[61036][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[61036][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[61036][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[61036][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[61036][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[61036][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[61036][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[61036][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[61036][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[61036][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[61036][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[61036][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[61036][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[61036][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[61036][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[61036][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[61036][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[61036][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[61036][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[61036][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[61036][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[61036][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[61036][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[61036][iter] <= referral response, follow
[61036][vldr] <= DS doesn't exist, going insecure
[61036][vldr] <= parent: updating DS
[61036][vldr] <= answer valid, OK
[61036][resl] <= server: '192.41.162.30' rtt: 119 ms
[34940][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 54465
[34940][resl] => querying: '2001:500:9f::42' score: 10 zone cut: 'root-servers.net.' m12n: 'm.rOoT-SERVERS.neT.' type: 'AAAA' proto: 'udp'
[34940][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[34940][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[34940][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[34940][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[34940][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[34940][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[34940][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[34940][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[34940][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[34940][iter] <= using glue for 'e.root-servers.net.': '2001:500:a8::e'
[34940][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[34940][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[34940][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[34940][iter] <= using glue for 'g.root-servers.net.': '2001:500:12::d0d'
[34940][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[34940][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[34940][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[34940][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[34940][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[34940][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[34940][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[34940][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[34940][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[34940][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[34940][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[34940][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[34940][iter] <= rcode: NOERROR
[34940][resl] <= server: '2001:500:9f::42' rtt: 12 ms
[46566][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[46566][resl] => querying: '2001:dc3::35' score: 36 zone cut: '.' m12n: 'cz.' type: 'NS' proto: 'udp'
[46566][iter] <= using glue for 'c.ns.nic.cz.': '194.0.14.1'
[46566][iter] <= using glue for 'c.ns.nic.cz.': '2001:678:11::1'
[46566][iter] <= using glue for 'b.ns.nic.cz.': '194.0.13.1'
[46566][iter] <= using glue for 'b.ns.nic.cz.': '2001:678:10::1'
[46566][iter] <= using glue for 'a.ns.nic.cz.': '194.0.12.1'
[46566][iter] <= using glue for 'a.ns.nic.cz.': '2001:678:f::1'
[46566][iter] <= using glue for 'd.ns.nic.cz.': '193.29.206.1'
[46566][iter] <= using glue for 'd.ns.nic.cz.': '2001:678:1::1'
[46566][iter] <= referral response, follow
[46566][vldr] <= DS: OK
[46566][vldr] <= answer valid, OK
[46566][resl] <= server: '2001:dc3::35' rtt: 31 ms
[63190][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[63190][plan] plan 'cz.' type 'DNSKEY'
[17095][iter] 'cz.' type 'DNSKEY' id was assigned, parent id 63190
[17095][resl] => querying: '2001:678:1::1' score: 10 zone cut: 'cz.' m12n: 'cZ.' type: 'DNSKEY' proto: 'udp'
[17095][iter] <= rcode: NOERROR
[17095][vldr] <= parent: updating DNSKEY
[17095][vldr] <= answer valid, OK
[17095][resl] <= server: '2001:678:1::1' rtt: 22 ms
[62591][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[62591][resl] => querying: '2001:678:11::1' score: 10 zone cut: 'cz.' m12n: 'Cra.Cz.' type: 'NS' proto: 'udp'
[62591][resl] => querying: '194.0.14.1' score: 10 zone cut: 'cz.' m12n: 'Cra.Cz.' type: 'NS' proto: 'udp'
[62591][iter] <= using glue for 'ns.bluetone.cz.': '212.158.128.12'
[62591][iter] <= using glue for 'ns.bluetone.cz.': '2a02:a40:2::12'
[62591][iter] <= using glue for 'ns1.bluetone.cz.': '212.158.128.13'
[62591][iter] <= using glue for 'ns1.bluetone.cz.': '2a02:a40:2::13'
[62591][iter] <= using glue for 'ns2.bluetone.cz.': '85.207.207.75'
[62591][iter] <= using glue for 'ns2.bluetone.cz.': '2a02:a40:2:200::2:200'
[62591][iter] <= referral response, follow
[62591][vldr] <= DS doesn't exist, going insecure
[62591][vldr] <= answer valid, OK
[62591][resl] <= server: '2001:678:11::1' rtt: 271 ms
[62591][resl] <= server: '194.0.14.1' rtt: >=21 ms
[47400][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[47400][resl] => querying: '2a02:a40:2:200::2:200' score: 10 zone cut: 'cra.cz.' m12n: 'CDN.CrA.CZ.' type: 'NS' proto: 'udp'
[47400][iter] <= rcode: NOERROR
[47400][iter] <= found cut, retrying with non-minimized name
[47400][resl] <= server: '2a02:a40:2:200::2:200' rtt: 13 ms
[42137][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[42137][resl] => querying: '2a02:a40:2::13' score: 10 zone cut: 'cra.cz.' m12n: 'sE04.SE.PrImA-vod-PrEp-Sec.SERvicE.CdN.cRa.cZ.' type: 'A' proto: 'udp'
[42137][iter] <= using glue for 'sr02.cdn.cra.cz.': '84.244.72.20'
[42137][iter] <= using glue for 'sr01.cdn.cra.cz.': '82.99.164.132'
[42137][iter] <= referral response, follow
[42137][resl] <= server: '2a02:a40:2::13' rtt: 12 ms
[40236][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[40236][resl] => querying: '84.244.72.20' score: 10 zone cut: 'service.cdn.cra.cz.' m12n: 'SE04.Se.PRiMA-VoD-PreP-sec.ServICE.cDN.cRA.CZ.' type: 'A' proto: 'udp'
[40236][iter] <= rcode: NOERROR
[40236][resl] <= server: '84.244.72.20' rtt: 14 ms
[ 0][resl] finished: 4, queries: 4, mempool: 65600 B
```
and returns:
```
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 9055
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; se04.se.prima-vod-prep-sec.service.cdn.cra.cz. IN A
;; ANSWER SECTION:
se04.se.prima-vod-prep-sec.service.cdn.cra.cz. 60 IN A 84.244.95.23
;; Received 90 B
;; Time 2017-01-21 07:37:45 CET
;; From ::1@51596(UDP) in 588.8 ms
```
On a second attempt it fails:
```
[ 0][plan] plan 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A'
[30178][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[30178][resl] => NS is provably without DS, going insecure
[29832][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[29832][plan] plan 'sr02.cdn.cra.cz.' type 'AAAA'
[56699][iter] 'sr02.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 29832
[41635][iter] 'sr02.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 29832
[41635][plan] plan 'ns2.bluetone.cz.' type 'AAAA'
[17422][iter] 'ns2.bluetone.cz.' type 'AAAA' id was assigned, parent id 41635
[20659][iter] 'ns2.bluetone.cz.' type 'AAAA' id was assigned, parent id 41635
[20659][resl] => querying: '2001:678:10::1' score: 10 zone cut: 'cz.' m12n: 'BlueTONE.Cz.' type: 'NS' proto: 'udp'
[20659][iter] <= using glue for 'ns.bluetone.cz.': '212.158.128.12'
[20659][iter] <= using glue for 'ns.bluetone.cz.': '2a02:a40:2::12'
[20659][iter] <= using glue for 'ns1.bluetone.cz.': '212.158.128.13'
[20659][iter] <= using glue for 'ns1.bluetone.cz.': '2a02:a40:2::13'
[20659][iter] <= using glue for 'ns2.bluetone.cz.': '85.207.207.75'
[20659][iter] <= using glue for 'ns2.bluetone.cz.': '2a02:a40:2:200::2:200'
[20659][iter] <= referral response, follow
[20659][resl] <= server: '2001:678:10::1' rtt: 22 ms
[11105][iter] 'ns2.bluetone.cz.' type 'AAAA' id was assigned, parent id 41635
[11105][resl] => querying: '2a02:a40:2::12' score: 10 zone cut: 'bluetone.cz.' m12n: 'ns2.blUeTOnE.cZ.' type: 'AAAA' proto: 'udp'
[11105][iter] <= using glue for 'ns.bluetone.cz.': '212.158.128.12'
[11105][iter] <= using glue for 'ns.bluetone.cz.': '2a02:a40:2::12'
[11105][iter] <= using glue for 'ns1.bluetone.cz.': '212.158.128.13'
[11105][iter] <= using glue for 'ns1.bluetone.cz.': '2a02:a40:2::13'
[11105][iter] <= using glue for 'ns2.bluetone.cz.': '2a02:a40:2:200::2:200'
[11105][iter] <= using glue for 'ns2.bluetone.cz.': '85.207.207.75'
[11105][iter] <= rcode: NOERROR
[11105][resl] <= server: '2a02:a40:2::12' rtt: 11 ms
[23289][iter] 'sr02.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 29832
[23289][resl] => querying: '2a02:a40:2:200::2:200' score: 13 zone cut: 'cra.cz.' m12n: 'Cdn.Cra.Cz.' type: 'NS' proto: 'udp'
[23289][iter] <= rcode: NOERROR
[23289][iter] <= found cut, retrying with non-minimized name
[23289][resl] <= server: '2a02:a40:2:200::2:200' rtt: 13 ms
[55206][iter] 'sr02.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 29832
[55206][resl] => querying: '2a02:a40:2:200::2:200' score: 13 zone cut: 'cra.cz.' m12n: 'SR02.cDN.cRa.cz.' type: 'AAAA' proto: 'udp'
[55206][iter] <= rcode: NOERROR
[55206][ pc ] => answer cached for TTL=900
[55206][resl] <= server: '2a02:a40:2:200::2:200' rtt: 13 ms
[ 1608][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[ 1608][plan] plan 'sr02.cdn.cra.cz.' type 'A'
[11065][iter] 'sr02.cdn.cra.cz.' type 'A' id was assigned, parent id 1608
[22035][iter] 'sr02.cdn.cra.cz.' type 'A' id was assigned, parent id 1608
[22035][resl] => querying: '2a02:a40:2::12' score: 11 zone cut: 'cra.cz.' m12n: 'CDn.CRa.CZ.' type: 'NS' proto: 'udp'
[22035][iter] <= rcode: NOERROR
[22035][iter] <= found cut, retrying with non-minimized name
[22035][resl] <= server: '2a02:a40:2::12' rtt: 11 ms
[12861][iter] 'sr02.cdn.cra.cz.' type 'A' id was assigned, parent id 1608
[12861][resl] => querying: '2a02:a40:2::13' score: 12 zone cut: 'cra.cz.' m12n: 'sR02.cdn.cRA.Cz.' type: 'A' proto: 'udp'
[12861][iter] <= referral response, follow
[12861][resl] <= server: '2a02:a40:2::13' rtt: 12 ms
[48703][iter] 'sr02.cdn.cra.cz.' type 'A' id was assigned, parent id 1608
[48703][plan] plan 'ns2.bluetone.cz.' type 'AAAA'
[32274][iter] 'ns2.bluetone.cz.' type 'AAAA' id was assigned, parent id 48703
[32274][ rc ] => satisfied from cache
[32274][iter] <= rcode: NOERROR
[32274][vldr] <= cached insecure response, going insecure
[ 4634][iter] 'sr02.cdn.cra.cz.' type 'A' id was assigned, parent id 1608
[ 4634][ rc ] => satisfied from cache
[ 4634][iter] <= rcode: NOERROR
[ 4634][vldr] <= cached insecure response, going insecure
[30962][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[30962][resl] => querying: '84.244.72.20' score: 14 zone cut: 'service.cdn.cra.cz.' m12n: 'PRIMa-VOD-prep-SEC.ServICe.cdn.cRA.Cz.' type: 'NS' proto: 'udp'
[30962][iter] <= malformed response
[14962][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[14962][resl] => querying: '84.244.72.20' score: 14 zone cut: 'service.cdn.cra.cz.' m12n: 'prima-vod-prep-sec.service.cdn.cra.cz.' type: 'NS' proto: 'udp'
[14962][iter] <= rcode: NOTIMPL
[14962][resl] => server: '84.244.72.20' flagged as 'bad'
[30025][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[30025][plan] plan 'sr01.cdn.cra.cz.' type 'AAAA'
[58302][iter] 'sr01.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 30025
[42496][iter] 'sr01.cdn.cra.cz.' type 'AAAA' id was assigned, parent id 30025
[42496][resl] => querying: '2a02:a40:2::13' score: 12 zone cut: 'cdn.cra.cz.' m12n: 'Sr01.Cdn.cra.Cz.' type: 'AAAA' proto: 'udp'
[42496][iter] <= rcode: NOERROR
[42496][ pc ] => answer cached for TTL=900
[42496][resl] <= server: '2a02:a40:2::13' rtt: 11 ms
[22193][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[22193][plan] plan 'sr01.cdn.cra.cz.' type 'A'
[ 4642][iter] 'sr01.cdn.cra.cz.' type 'A' id was assigned, parent id 22193
[28261][iter] 'sr01.cdn.cra.cz.' type 'A' id was assigned, parent id 22193
[28261][resl] => querying: '2a02:a40:2::13' score: 11 zone cut: 'cdn.cra.cz.' m12n: 'sr01.CDN.CRa.cZ.' type: 'A' proto: 'udp'
[28261][iter] <= rcode: NOERROR
[28261][resl] <= server: '2a02:a40:2::13' rtt: 11 ms
[61912][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[61912][resl] => querying: '82.99.164.132' score: 10 zone cut: 'service.cdn.cra.cz.' m12n: 'prima-vod-prep-sec.service.cdn.cra.cz.' type: 'NS' proto: 'udp'
[61912][iter] <= rcode: NOTIMPL
[61912][resl] => server: '82.99.164.132' flagged as 'bad'
[ 3184][iter] 'se04.se.prima-vod-prep-sec.service.cdn.cra.cz.' type 'A' id was assigned, parent id 0
[ 3184][resl] => unresolvable NS address, bailing out
[ 3184][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 7, mempool: 65600 B
```
and returns:
```
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 14060
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; se04.se.prima-vod-prep-sec.service.cdn.cra.cz. IN A
;; Received 74 B
;; Time 2017-01-21 07:40:44 CET
;; From ::1@51596(UDP) in 149.8 ms
```
Perhaps treating `NOTIMPL` same as `NXDOMAIN` in qname minimization path would fix that?
1.2.0 release
Štěpán Balážik
Štěpán Balážik
https://gitlab.nic.cz/knot/knot-resolver/-/issues/130
www.vutbr.cz fails (again)
2017-08-22T13:33:36+02:00
Vladimír Čunát
vladimir.cunat@nic.cz
www.vutbr.cz fails (again)
I swear it did work somewhere on `vld-refactoring`...
I swear it did work somewhere on `vld-refactoring`...
1.2.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/129
forwarding: some problems
2017-08-22T13:33:36+02:00
Vladimír Čunát
vladimir.cunat@nic.cz
forwarding: some problems
- [ ] fix CNAMEs
(maybe more will be discovered)
- [ ] fix CNAMEs
(maybe more will be discovered)
1.2.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/124
Don't return AUTHORITY section on a first answers
2017-08-22T13:33:36+02:00
Ondřej Surý
Don't return AUTHORITY section on a first answers
Compare first query:
```
$ dig pir.org +dnssec +multi
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59384
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 4; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do;...
Compare first query:
```
$ dig pir.org +dnssec +multi
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59384
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 4; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; pir.org. IN A
;; ANSWER SECTION:
pir.org. 300 IN A 97.107.141.235
;; AUTHORITY SECTION:
pir.org. 300 IN NS ns1.ams1.afilias-nst.info.
pir.org. 300 IN NS ns1.mia1.afilias-nst.info.
pir.org. 300 IN NS ns1.sea1.afilias-nst.info.
pir.org. 300 IN NS ns1.yyz1.afilias-nst.info.
;; Received 160 B
;; Time 2017-01-13 13:45:57 CET
;; From ::1@53(UDP) in 626.9 ms
```
and all next queries answered from cache:
```
$ dig +dnssec +multi pir.org +dnssec
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 39881
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; pir.org. IN A
;; ANSWER SECTION:
pir.org. 287 IN A 97.107.141.235
;; Received 52 B
;; Time 2017-01-13 13:46:10 CET
;; From ::1@53(UDP) in 0.1 ms
```
1.2.0 release
Ivana Krumlova
Ivana Krumlova
https://gitlab.nic.cz/knot/knot-resolver/-/issues/123
When +DO bit is set, return DNSSEC related records in answers
2017-08-22T13:33:36+02:00
Ondřej Surý
When +DO bit is set, return DNSSEC related records in answers
Compare Knot Resolver:
```
$ dig +noall +answer +dnssec +multi pir.org +dnssec @::1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59946
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTI...
Compare Knot Resolver:
```
$ dig +noall +answer +dnssec +multi pir.org +dnssec @::1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59946
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; ANSWER SECTION:
pir.org. 211 IN A 97.107.141.235
;; Received 52 B
;; Time 2017-01-13 13:47:26 CET
;; From ::1@53(UDP) in 0.1 ms
```
vs Google PDNS:
```
$ dig +noall +answer +dnssec +multi pir.org +dnssec @8.8.8.8
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 42672
;; Flags: qr rd ra ad; QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
;; ANSWER SECTION:
pir.org. 299 IN A 97.107.141.235
pir.org. 299 IN RRSIG A 5 2 300 20170127084000 (
20170113084000 12020 pir.org.
ictBcdN3BDiX3z4w6VHmJYHZQoRONbxqITAc8EQS
vXXI20BA9vsrKjJdrCtY6U8iMGBqS+uV9hWO+38k
lVBRBnW5NB53m47g2cJ1de4GDphjhVWg/G9HhTs2
lPfKXsBKvZVWYQgM1ArSTYjzGa45V8Enb7DETjuI
Z7Sr1noI6mM=
)
;; Received 219 B
;; Time 2017-01-13 13:47:33 CET
;; From 8.8.8.8@53(UDP) in 48.4 ms
```
1.2.0 release
Štěpán Balážik
Štěpán Balážik
https://gitlab.nic.cz/knot/knot-resolver/-/issues/121
nic.mx fails to validate (on current master)
2017-08-22T13:33:37+02:00
Vladimír Čunát
vladimir.cunat@nic.cz
nic.mx fails to validate (on current master)
DNSSEC data seems OK, according to other resolvers and http://dnsviz.net/d/nic.mx/dnssec/
```
[resl] => querying: '200.23.1.1' score: 10 zone cut: 'mx.' m12n: 'nIC.Mx.' type: 'A' proto: 'udp'
[iter] <= using glue for 'i.mx-ns.mx.': '...
DNSSEC data seems OK, according to other resolvers and http://dnsviz.net/d/nic.mx/dnssec/
```
[resl] => querying: '200.23.1.1' score: 10 zone cut: 'mx.' m12n: 'nIC.Mx.' type: 'A' proto: 'udp'
[iter] <= using glue for 'i.mx-ns.mx.': '207.248.68.1'
[iter] <= using glue for 'x.mx-ns.mx.': '201.131.252.1'
[iter] <= using glue for 'e.mx-ns.mx.': '189.201.244.1'
[iter] <= using glue for 'o.mx-ns.mx.': '200.23.1.1'
[iter] <= using glue for 'c.mx-ns.mx.': '192.100.224.1'
[iter] <= using glue for 'c.mx-ns.mx.': '2001:1258::1'
[iter] <= using glue for 'm.mx-ns.mx.': '200.94.176.1'
[iter] <= using glue for 'm.mx-ns.mx.': '2001:13c7:7000::1'
[iter] <= referral response, follow
[vldr] <= couldn't validate RRSIGs
```
It tries to validate even though the delegation is insecure. The query for `nic.mx. DS +dnssec` is correctly validated as NODATA, but interestingly the AD flag is **not** set in this case.
1.2.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/117
IPv6 only query not sent
2017-08-22T13:33:37+02:00
Horigome Yoshihito
IPv6 only query not sent
We confirmed that only IPv6 query will not be sent when configuring interface by config as below.
`net.listen ({net.lo, net.eth0}, 53, {tls = true})`
It is confirmed that specifying the interface as below does not cause a problem.
`ne...
We confirmed that only IPv6 query will not be sent when configuring interface by config as below.
`net.listen ({net.lo, net.eth0}, 53, {tls = true})`
It is confirmed that specifying the interface as below does not cause a problem.
`net.listen ({'127.0.0.1', ':: 1', '192.168.1.223', '240b:xxxx:xxxx:xxxx:10::223'}, 53, true)`
As far as netstat sees, it confirms that it is bound to the interface.
```
$ sudo netstat -antp | grep kresd
Tcp 0 0 192.168.122.223: 53 0.0.0.0: LISTEN 6627 / kresd
Tcp 0 0 192.168.122.223: 53 0.0.0.0: LISTEN 6626 / kresd
Tcp 0 0 127.0.0.1: 53 0.0.0.0: LISTEN 6627 / kresd
Tcp 0 0 127.0.0.1: 53 0.0.0.0: LISTEN 6626 / kresd
Tcp 6 0 0 240 b: 11: 8500: 3900: 10: 53 ::: * LISTEN 6627 / kresd
Tcp 6 0 0 240 b: 11: 8500: 3900: 10: 53 ::: * LISTEN 6626 / kresd
Tcp 6 0 0 :: 1: 53 ::: * LISTEN 6627 / kresd
Tcp 6 0 0 :: 1: 53 ::: * LISTEN 6626 / kresd
```
However, if you check with drill, it will result in an error.
```
$ drill @ 192.168.122.223 ariel.kometch.local AAAA
Error: error sending query: Could not send or receive, because of network error
```
`net.listen ({'127.0.0.1', ':: 1', '192.168.1.223', '240b:xxxx:xxxx:xxxx:10::223'}, 53, true`
In the above case there is no problem and the query is sent.
```
$ drill @ 192.168.1.223 ariel.kometch.local AAAA
;; - >> HEADER << - opcode: QUERY, rcode: NOERROR, id: 6348
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 0
;; QUESTION SECTION:
;; ariel.kometch.local. IN AAAA
;; ANSWER SECTION:
ariel.kometch.local. 300 IN AAAA 240b:xxxx:xxxx:xxxx:10::30
;; AUTHORITY SECTION:
kometch.local. 300 IN NS dns01.Kometch.
kometch.local. 300 IN NS dns02.kometch.
kometch.local. 300 IN NS dns03.kometch.
;; ADDITIONAL SECTION:
;; Query time: 2 msec
;; SERVER: 192.168.122.223
;; WHEN: Sun Jan 1 20: 31: 33 2017
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/116
Not bind to localhost
2017-08-22T13:33:37+02:00
Horigome Yoshihito
Not bind to localhost
I started up with config as described below and confirmed that it is not bind to localhost.
`net.listen({net.eth0, '127.0.0.1'}, 53, {tls = true})`
```
kometch@dns02:~$ sudo netstat -antp | grep kresd
tcp 0 0 192.168.122.223...
I started up with config as described below and confirmed that it is not bind to localhost.
`net.listen({net.eth0, '127.0.0.1'}, 53, {tls = true})`
```
kometch@dns02:~$ sudo netstat -antp | grep kresd
tcp 0 0 192.168.122.223:53 0.0.0.0:* LISTEN 21905/kresd
tcp 0 0 192.168.122.223:53 0.0.0.0:* LISTEN 21904/kresd
```
Error messages such as "bind can not bind" are not output to log.
```
Dec 24 20:17:09 dns02 systemd[1]: Starting Knot DNS Resolver daemon...
Dec 24 20:17:09 dns02 kresd[21904]: [system] bind to 'fe80::6047:82ff:fea7:226d#53' Invalid argument
Dec 24 20:17:09 dns02 kresd[21904]: [system] bind to 'fe80::6047:82ff:fea7:226d#53' Invalid argument
Dec 24 20:17:10 dns02 systemd[1]: Started Knot DNS Resolver daemon.
Dec 24 20:17:10 dns02 systemd[1]: kresd.service: Got notification message from PID 21905, but reception o
```
```
kometch@dns02:~$ kresd -V
Knot DNS Resolver, version 1.2.0-dev
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/115
The interface becomes permission denied.
2017-08-22T13:33:37+02:00
Horigome Yoshihito
The interface becomes permission denied.
With knot-resolver in the following environment, if the interface is bind
I can not do an error.
```
Dec 22 23:41:08 dns02 systemd[1]: Starting Knot DNS Resolver daemon...
Dec 22 23:41:08 dns02 kresd[2310]: [system] bind to '192.168.122....
With knot-resolver in the following environment, if the interface is bind
I can not do an error.
```
Dec 22 23:41:08 dns02 systemd[1]: Starting Knot DNS Resolver daemon...
Dec 22 23:41:08 dns02 kresd[2310]: [system] bind to '192.168.122.223#53' Permission denied
Dec 22 23:41:08 dns02 kresd[2310]: [system] bind to '192.168.122.223#53' Permission denied
Dec 22 23:41:09 dns02 kresd[2310]: [ ta ] warning: root anchor bootstrapped, you SHOULD check the key man
Dec 22 23:41:09 dns02 kresd[2310]: [system] bind to '127.0.0.1#53' Permission denied
Dec 22 23:41:09 dns02 kresd[2310]: [system] bind to '::1#53' Permission denied
Dec 22 23:41:09 dns02 systemd[1]: kresd.service: Got notification message from PID 2311, but reception on
Dec 22 23:41:09 dns02 kresd[2310]: [ ta ] warning: root anchor bootstrapped, you SHOULD check the key man
Dec 22 23:41:09 dns02 kresd[2310]: [system] bind to '127.0.0.1#53' Permission denied
Dec 22 23:41:09 dns02 kresd[2310]: [system] bind to '::1#53' Permission denied
```
It seems to work by changing user in the systemctl file to root, is this a mistake in the Systemctl file?
```
kometch@dns02:~$ kresd -V
Knot DNS Resolver, version 1.2.0-dev
```
```
kometch@dns02:~$ cat /etc/os-release
NAME="Ubuntu"
VERSION="16.04.1 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.1 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/114
vld-refactoring - missing typedef for uint in lru.h
2017-08-22T13:33:37+02:00
Jan Pavlinec
vld-refactoring - missing typedef for uint in lru.h
openwrt reports error unknown type uint in lib/generic/lru.h
openwrt reports error unknown type uint in lib/generic/lru.h
https://gitlab.nic.cz/knot/knot-resolver/-/issues/113
master and vld-refactoring fails to resolve www.zive.cz
2017-08-22T13:33:37+02:00
Ondřej Surý
master and vld-refactoring fails to resolve www.zive.cz
`www.zive.cz` has four nameservers in the GLUE:
```
$ dig IN NS zive.cz @a.ns.nic.cz
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 63624
;; Flags: qr rd; QUERY: 1; ANSWER: 0; AUTHORITY: 4; ADDITIONAL: 3
;; QUESTION SECTION:
;; ziv...
`www.zive.cz` has four nameservers in the GLUE:
```
$ dig IN NS zive.cz @a.ns.nic.cz
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 63624
;; Flags: qr rd; QUERY: 1; ANSWER: 0; AUTHORITY: 4; ADDITIONAL: 3
;; QUESTION SECTION:
;; zive.cz. IN NS
;; AUTHORITY SECTION:
zive.cz. 18000 IN NS ns1.mfgroup.cz.
zive.cz. 18000 IN NS ns2.mfonline.cz.
zive.cz. 18000 IN NS ns3.jnp.cz.
zive.cz. 18000 IN NS ns4.connect.cz.
;; ADDITIONAL SECTION:
ns1.mfgroup.cz. 18000 IN A 5.198.129.4
ns3.jnp.cz. 18000 IN A 95.173.213.57
ns4.connect.cz. 18000 IN A 95.173.213.58
;; Received 174 B
;; Time 2016-12-21 11:24:28 CET
;; From 2001:678:f::1@53(UDP) in 0.7 ms
```
And just two nameservers in zone:
```
$ dig IN NS zive.cz @95.173.213.57
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 3047
;; Flags: qr aa rd; QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 2
;; QUESTION SECTION:
;; zive.cz. IN NS
;; ANSWER SECTION:
zive.cz. 300 IN NS ns3.jnp.cz.
zive.cz. 300 IN NS ns4.connect.cz.
;; ADDITIONAL SECTION:
ns3.jnp.cz. 300 IN A 95.173.213.57
ns4.connect.cz. 300 IN A 95.173.213.58
;; Received 105 B
;; Time 2016-12-21 11:24:57 CET
;; From 95.173.213.57@53(UDP) in 10.3 ms
```
`ns1.mfgroup.cz.` and `ns2.mfonline.cz.` timeout, but kresd keeps asking them even though it marks `5.198.129.4` as `bad`. `ns4.connect.cz.` returns SERVFAILs on legitimate queries.
This is `master` branch:
```
[plan] plan 'www.zive.cz.' type 'A'
[resl] => using root hints
[plan] plan '.' type 'DNSKEY'
[resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:dc3::35' rtt: 18 ms
[resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'CZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'a.ns.nic.cz.'
[iter] <= using glue for 'b.ns.nic.cz.'
[iter] <= using glue for 'c.ns.nic.cz.'
[iter] <= using glue for 'd.ns.nic.cz.'
[iter] <= referral response, follow
[vldr] <= DS: OK
[vldr] <= answer valid, OK
[resl] <= server: '2001:500:9f::42' rtt: 1 ms
[plan] plan 'cz.' type 'DNSKEY'
[resl] => querying: '2001:678:1::1' score: 10 zone cut: 'cz.' m12n: 'cZ.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:1::1' rtt: 1 ms
[resl] => querying: '2001:678:11::1' score: 10 zone cut: 'cz.' m12n: 'ZIVe.cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:11::1' rtt: 11 ms
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'wWW.ZIVE.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'wWW.ZIVE.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'wWW.ZIVE.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'wWW.ZIVE.cZ.' type: 'A' proto: 'udp'
[wrkr] => server: '5.198.129.4' flagged as 'bad'
[plan] plan 'ns4.connect.cz.' type 'AAAA'
[resl] => querying: '2001:678:10::1' score: 10 zone cut: 'cz.' m12n: 'coNNECt.CZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns4.connect.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:10::1' rtt: 1 ms
[resl] => querying: '95.173.213.58' score: 10 zone cut: 'connect.cz.' m12n: 'ns4.COnnecT.Cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 111 zone cut: 'connect.cz.' m12n: 'ns4.conNeCT.cZ.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 161 zone cut: 'connect.cz.' m12n: 'NS4.connECT.CZ.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 186 zone cut: 'connect.cz.' m12n: 'ns4.cOnnECT.CZ.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] => server: '95.173.213.58' flagged as 'bad'
[plan] plan 'ns3.jnp.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 10 zone cut: 'cz.' m12n: 'jnP.cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= using glue for 'ns3.jnp.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 1 ms
[resl] => querying: '95.173.213.57' score: 10 zone cut: 'jnp.cz.' m12n: 'ns3.Jnp.cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=300
[resl] <= server: '95.173.213.57' rtt: 10 ms
[plan] plan 'ns3.jnp.cz.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[vldr] <= cached insecure response, going insecure
[resl] => querying: '95.173.213.57' score: 11 zone cut: 'connect.cz.' m12n: 'Ns4.cOnneCT.cZ.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=300
[resl] <= server: '95.173.213.57' rtt: 10 ms
[plan] plan 'ns4.connect.cz.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[vldr] <= cached insecure response, going insecure
[resl] => querying: '95.173.213.58' score: 2850 zone cut: 'zive.cz.' m12n: 'wWw.zive.Cz.' type: 'A' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 10 ms
[resl] => querying: '95.173.213.58' score: 1530 zone cut: 'zive.cz.' m12n: 'wwW.ziVE.CZ.' type: 'A' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 10 ms
[resl] => querying: '95.173.213.58' score: 870 zone cut: 'zive.cz.' m12n: 'WWW.zIve.cz.' type: 'A' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 540 zone cut: 'zive.cz.' m12n: 'wWW.zIve.cz.' type: 'A' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] => server: '95.173.213.58' flagged as 'bad'
[resl] => unresolvable NS address, bailing out
[plan] plan 'ns2.mfonline.cz.' type 'AAAA'
[resl] => querying: '2001:678:1::1' score: 11 zone cut: 'cz.' m12n: 'MFoNliNE.CZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:1::1' rtt: 12 ms
[resl] => querying: '95.168.195.129' score: 10 zone cut: 'mfonline.cz.' m12n: 'ns2.mFoNliNE.Cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=900
[resl] <= server: '95.168.195.129' rtt: 9 ms
[plan] plan 'ns2.mfonline.cz.' type 'A'
[resl] => NS is provably without DS, going insecure
[plan] plan 'ns2.superhosting.cz.' type 'AAAA'
[resl] => querying: '2001:678:1::1' score: 11 zone cut: 'cz.' m12n: 'SuperHoSTiNG.cZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= using glue for 'ns2.superhosting.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:1::1' rtt: 0 ms
[resl] => querying: '88.86.116.42' score: 10 zone cut: 'superhosting.cz.' m12n: 'ns2.SupERHoSTing.cZ.' type: 'AAAA' proto: 'udp'
[iter] <= using glue for 'ns2.superhosting.cz.'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= using glue for 'ns3.superhosting.cz.'
[iter] <= rcode: NOERROR
[resl] <= server: '88.86.116.42' rtt: 9 ms
[resl] => querying: '2a01:28:aa:44::2' score: 10 zone cut: 'mfonline.cz.' m12n: 'Ns2.MfonliNe.Cz.' type: 'A' proto: 'udp'
[iter] <= rcode: NOERROR
[resl] <= server: '2a01:28:aa:44::2' rtt: 1 ms
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'zive.cz.' m12n: 'WwW.ZivE.CZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'zive.cz.' m12n: 'WwW.ZivE.CZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'zive.cz.' m12n: 'WwW.ZivE.CZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'zive.cz.' m12n: 'WwW.ZivE.CZ.' type: 'A' proto: 'udp'
[wrkr] => server: '5.198.131.4' flagged as 'bad'
[resl] => unresolvable NS address, bailing out
[plan] plan 'ns3.jnp.cz.' type 'AAAA'
[resl] finished: 8, queries: 9, mempool: 49200 B
```
This is `vld-refactoring` branch, clean cache:
```
[plan] plan 'www.zive.cz.' type 'A'
[resl] => using root hints
[plan] plan '.' type 'DNSKEY'
[resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:dc3::35' rtt: 18 ms
[resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'cZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'a.ns.nic.cz.'
[iter] <= using glue for 'b.ns.nic.cz.'
[iter] <= using glue for 'c.ns.nic.cz.'
[iter] <= using glue for 'd.ns.nic.cz.'
[iter] <= referral response, follow
[vldr] <= DS: OK
[vldr] <= answer valid, OK
[resl] <= server: '2001:500:9f::42' rtt: 1 ms
[plan] plan 'cz.' type 'DNSKEY'
[resl] => querying: '2001:678:1::1' score: 10 zone cut: 'cz.' m12n: 'cZ.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:1::1' rtt: 12 ms
[resl] => querying: '2001:678:1::1' score: 12 zone cut: 'cz.' m12n: 'zivE.cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:1::1' rtt: 12 ms
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'WWw.zIVE.cz.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'WWw.zIVE.cz.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'WWw.zIVE.cz.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 10 zone cut: 'zive.cz.' m12n: 'WWw.zIVE.cz.' type: 'A' proto: 'udp'
[wrkr] => server: '5.198.129.4' flagged as 'bad'
[plan] plan 'ns4.connect.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 10 zone cut: 'cz.' m12n: 'CONNecT.cZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= using glue for 'ns4.connect.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 0 ms
[resl] => querying: '95.173.213.58' score: 10 zone cut: 'connect.cz.' m12n: 'nS4.cONNeCT.cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 111 zone cut: 'connect.cz.' m12n: 'NS4.cOnNecT.CZ.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 9 ms
[resl] => querying: '95.173.213.58' score: 161 zone cut: 'connect.cz.' m12n: 'Ns4.ConneCt.cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] <= server: '95.173.213.58' rtt: 10 ms
[resl] => querying: '95.173.213.58' score: 186 zone cut: 'connect.cz.' m12n: 'NS4.cOnnecT.cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: SERVFAIL
[resl] => server: '95.173.213.58' flagged as 'bad'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'connect.cz.' m12n: 'NS4.coNNeCt.CZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'connect.cz.' m12n: 'NS4.coNNeCt.CZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'connect.cz.' m12n: 'NS4.coNNeCt.CZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'connect.cz.' m12n: 'NS4.coNNeCt.CZ.' type: 'AAAA' proto: 'udp'
[wrkr] => server: '5.198.129.4' flagged as 'bad'
[plan] plan 'ns3.jnp.cz.' type 'AAAA'
[resl] finished: 8, queries: 2, mempool: 32800 B
```
It repeats to ask `5.198.129.4` even when marked as bad. Sometimes it resolves the address in the end, sometimes it just keeps asking the nameserver that timeouts
This is `master` branch, repeated query:
```
[plan] plan 'www.zive.cz.' type 'A'
[resl] => NS is provably without DS, going insecure
[resl] => querying: '95.173.213.57' score: 11 zone cut: 'zive.cz.' m12n: 'www.ZIve.Cz.' type: 'A' proto: 'udp'
[iter] <= rcode: NOERROR
[resl] <= server: '95.173.213.57' rtt: 10 ms
[resl] finished: 4, queries: 1, mempool: 49200 B
```
This is `vld-refactoring` branch, repeated query:
```
[plan] plan 'www.zive.cz.' type 'A'
[resl] => NS is provably without DS, going insecure
[plan] plan 'ns4.connect.cz.' type 'AAAA'
[resl] => NS is provably without DS, going insecure
[plan] plan 'ns4.connect.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 11 zone cut: 'cz.' m12n: 'coNnECT.cZ.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns4.connect.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 11 ms
[plan] plan 'ns3.jnp.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 11 zone cut: 'cz.' m12n: 'jNP.Cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= using glue for 'ns3.jnp.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 0 ms
[resl] => querying: '95.173.213.57' score: 10 zone cut: 'jnp.cz.' m12n: 'NS3.jnP.Cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=300
[resl] <= server: '95.173.213.57' rtt: 10 ms
[plan] plan 'ns3.jnp.cz.' type 'A'
[resl] => NS is provably without DS, going insecure
[resl] => unresolvable NS address, bailing out
[plan] plan 'ns2.mfonline.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 11 zone cut: 'cz.' m12n: 'mFonLINE.Cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 1 ms
[resl] => querying: '95.168.195.129' score: 10 zone cut: 'mfonline.cz.' m12n: 'ns2.mFONLInE.Cz.' type: 'AAAA' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=900
[resl] <= server: '95.168.195.129' rtt: 0 ms
[plan] plan 'ns2.mfonline.cz.' type 'A'
[resl] => NS is provably without DS, going insecure
[plan] plan 'ns2.superhosting.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 11 zone cut: 'cz.' m12n: 'sUPErHOStING.Cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns2.superhosting.cz.'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 0 ms
[resl] => querying: '88.86.116.42' score: 10 zone cut: 'superhosting.cz.' m12n: 'ns2.SUPERHoStinG.cz.' type: 'AAAA' proto: 'udp'
[iter] <= using glue for 'ns2.superhosting.cz.'
[iter] <= using glue for 'ns1.superhosting.cz.'
[iter] <= using glue for 'ns3.superhosting.cz.'
[iter] <= rcode: NOERROR
[resl] <= server: '88.86.116.42' rtt: 9 ms
[resl] => querying: '2a01:28:aa:44::2' score: 10 zone cut: 'mfonline.cz.' m12n: 'NS2.MFoNLiNE.cz.' type: 'A' proto: 'udp'
[iter] <= rcode: NOERROR
[resl] <= server: '2a01:28:aa:44::2' rtt: 1 ms
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'jnp.cz.' m12n: 'NS3.jNp.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'jnp.cz.' m12n: 'NS3.jNp.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'jnp.cz.' m12n: 'NS3.jNp.cZ.' type: 'A' proto: 'udp'
[resl] => querying: '5.198.131.4' score: 10 zone cut: 'jnp.cz.' m12n: 'NS3.jNp.cZ.' type: 'A' proto: 'udp'
[wrkr] => server: '5.198.131.4' flagged as 'bad'
[resl] => unresolvable NS address, bailing out
[plan] plan 'ns1.mfgroup.cz.' type 'AAAA'
[resl] => querying: '2001:678:f::1' score: 11 zone cut: 'cz.' m12n: 'mfGrOUP.cz.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns1.mfgroup.cz.'
[iter] <= referral response, follow
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:f::1' rtt: 0 ms
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'mfgroup.cz.' m12n: 'Ns1.mfgROup.cZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'mfgroup.cz.' m12n: 'Ns1.mfgROup.cZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'mfgroup.cz.' m12n: 'Ns1.mfgROup.cZ.' type: 'AAAA' proto: 'udp'
[resl] => querying: '5.198.129.4' score: 2850 zone cut: 'mfgroup.cz.' m12n: 'Ns1.mfgROup.cZ.' type: 'AAAA' proto: 'udp'
[wrkr] => server: '5.198.129.4' flagged as 'bad'
[resl] => unresolvable NS address, bailing out
[plan] plan 'ns2.mfonline.cz.' type 'AAAA'
[resl] finished: 8, queries: 4, mempool: 32800 B
```
The `master` was able to resolve the `IN A www.zive.cz` on second retry, although it also tries to contact unreachable namerver after flagging it as bad. The `vld-refactoring` is just keep on going contacting `5.198.129.4` over and over.
1.2.0 release
Štěpán Balážik
Štěpán Balážik
https://gitlab.nic.cz/knot/knot-resolver/-/issues/111
hints module - feature request for del function
2017-08-22T13:33:37+02:00
Jan Pavlinec
hints module - feature request for del function
It would be nice to have del function in hints module for removing of old hints record.
http://knot-resolver.readthedocs.io/en/latest/modules.html#static-hints
It would be nice to have del function in hints module for removing of old hints record.
http://knot-resolver.readthedocs.io/en/latest/modules.html#static-hints
Vladimír Čunát
vladimir.cunat@nic.cz
Vladimír Čunát
vladimir.cunat@nic.cz
https://gitlab.nic.cz/knot/knot-resolver/-/issues/103
use EDNS0 padding for traffic analysis obfuscation on TLS connections
2017-08-22T13:33:37+02:00
Daniel Kahn Gillmor
use EDNS0 padding for traffic analysis obfuscation on TLS connections
See RFC 7830 for a description of this option.
I propose to add a config option: `net.tls_padding(NUMBER)`, which will pad the cleartext of all DNS responses sent over TLS to a multiple of NUMBER.
See RFC 7830 for a description of this option.
I propose to add a config option: `net.tls_padding(NUMBER)`, which will pad the cleartext of all DNS responses sent over TLS to a multiple of NUMBER.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/102
opt-out validation problems
2017-08-22T13:33:37+02:00
Vladimír Čunát
vladimir.cunat@nic.cz
opt-out validation problems
(Moved out of [a different issue](https://github.com/CZ-NIC/knot-resolver/issues/34).)
Running `kdig @::1 -p 5353 ns10.univie.ac.at` after clearing cache returns SERVFAIL:
```
[plan] plan 'ns10.univie.ac.at.' type 'A'
[resl] =>...
(Moved out of [a different issue](https://github.com/CZ-NIC/knot-resolver/issues/34).)
Running `kdig @::1 -p 5353 ns10.univie.ac.at` after clearing cache returns SERVFAIL:
```
[plan] plan 'ns10.univie.ac.at.' type 'A'
[resl] => using root hints
[plan] plan '.' type 'DNSKEY'
[resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:dc3::35' rtt: 30 ms
[resl] => querying: '202.12.27.33' score: 10 zone cut: '.' m12n: 'AT.' type: 'NS' proto: 'udp'
[resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'AT.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'j.ns.at.'
[iter] <= using glue for 'ns1.univie.ac.at.'
[iter] <= using glue for 'ns9.univie.ac.at.'
[iter] <= using glue for 'n.ns.at.'
[iter] <= using glue for 'r.ns.at.'
[iter] <= using glue for 'u.ns.at.'
[iter] <= using glue for 'd.ns.at.'
[iter] <= using glue for 'ns2.univie.ac.at.'
[iter] <= referral response, follow
[vldr] <= DS: OK
[vldr] <= answer valid, OK
[resl] <= server: '202.12.27.33' rtt: 286 ms
[resl] <= server: '2001:500:9f::42' rtt: >=36 ms
[plan] plan 'at.' type 'DNSKEY'
[resl] => querying: '2001:678:d::cafe' score: 10 zone cut: 'at.' m12n: 'AT.' type: 'DNSKEY' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[resl] <= server: '2001:678:d::cafe' rtt: 5 ms
[resl] => querying: '2001:678:1c::2' score: 10 zone cut: 'at.' m12n: 'AC.AT.' type: 'NS' proto: 'udp'
[iter] <= rcode: NOERROR
[iter] <= found cut, retrying with non-minimized name
[resl] <= server: '2001:678:1c::2' rtt: 15 ms
[resl] => querying: '2001:678:1c::2' score: 15 zone cut: 'at.' m12n: 'NS10.uNIvIe.ac.At.' type: 'A' proto: 'udp'
[iter] <= using glue for 'ns7.univie.ac.at.'
[iter] <= using glue for 'ns10.univie.ac.at.'
[iter] <= using glue for 'ns4.univie.ac.at.'
[iter] <= using glue for 'ns5.univie.ac.at.'
[iter] <= using glue for 'ns3.univie.ac.at.'
[iter] <= using glue for 'ns8.univie.ac.at.'
[iter] <= referral response, follow
[vldr] >< cut changed, needs revalidation
[resl] <= server: '2001:678:1c::2' rtt: 15 ms
[plan] plan 'univie.ac.at.' type 'DS'
[plan] plan 'ac.at.' type 'DS'
[resl] => querying: '2001:628:2030:4301::2' score: 10 zone cut: 'at.' m12n: 'aC.aT.' type: 'DS' proto: 'udp'
[iter] <= rcode: NOERROR
[vldr] <= can't prove NODATA due to optout, going insecure
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[ pc ] => answer cached for TTL=900
[resl] <= server: '2001:628:2030:4301::2' rtt: 15 ms
[resl] => querying: '2a02:568:281::130' score: 10 zone cut: 'ac.at.' m12n: 'UNIViE.Ac.at.' type: 'DS' proto: 'udp'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=900
[resl] <= server: '2a02:568:281::130' rtt: 19 ms
[plan] plan 'univie.ac.at.' type 'DS'
[ pc ] => satisfied from cache
[iter] <= rcode: NOERROR
[vldr] <= bogus proof of DS non-existence
[resl] finished: 8, queries: 4, mempool: 49200 B
```
... and running the same immediately again succeeds:
```
[plan] plan 'ns10.univie.ac.at.' type 'A'
[plan] plan 'ac.at.' type 'DS'
[ pc ] => satisfied from cache
[iter] <= rcode: NOERROR
[vldr] <= DS doesn't exist, going insecure
[vldr] <= parent: updating DS
[vldr] <= answer valid, OK
[resl] => querying: '2a02:568:20:1::d' score: 10 zone cut: 'ac.at.' m12n: 'UNivIe.Ac.aT.' type: 'NS' proto: 'udp'
[iter] <= using glue for 'ns7.univie.ac.at.'
[iter] <= using glue for 'ns8.univie.ac.at.'
[iter] <= using glue for 'ns10.univie.ac.at.'
[iter] <= using glue for 'ns3.univie.ac.at.'
[iter] <= using glue for 'ns5.univie.ac.at.'
[iter] <= using glue for 'ns4.univie.ac.at.'
[iter] <= referral response, follow
[resl] <= server: '2a02:568:20:1::d' rtt: 19 ms
[resl] => querying: '2001:67c:133c::2' score: 10 zone cut: 'univie.ac.at.' m12n: 'NS10.UNIviE.Ac.At.' type: 'A' proto: 'udp'
[iter] <= using glue for 'ns5.univie.ac.at.'
[iter] <= using glue for 'ns3.univie.ac.at.'
[iter] <= using glue for 'ns4.univie.ac.at.'
[iter] <= using glue for 'ns10.univie.ac.at.'
[iter] <= using glue for 'ns8.univie.ac.at.'
[iter] <= using glue for 'ns7.univie.ac.at.'
[iter] <= rcode: NOERROR
[resl] <= server: '2001:67c:133c::2' rtt: 15 ms
[resl] finished: 4, queries: 2, mempool: 49200 B
```
This is on master; I tried on `dns-oarc` branch but it looks the same. EDIT: it also looks the same on 1.0.0 (with knot-2.2.1).
https://gitlab.nic.cz/knot/knot-resolver/-/issues/101
Missing support for link-local addresses
2022-02-22T00:48:32+01:00
Ondřej Caletka
Missing support for link-local addresses
1. Binding to [IPv6 link-local addresses](https://en.wikipedia.org/wiki/IPv6_address#Local_addresses) isn't possible in kresd (it isn't counted on).
2. Consequence: whenever I run `kresd` on Turris Omnia with forwarding turned on, it ...
1. Binding to [IPv6 link-local addresses](https://en.wikipedia.org/wiki/IPv6_address#Local_addresses) isn't possible in kresd (it isn't counted on).
2. Consequence: whenever I run `kresd` on Turris Omnia with forwarding turned on, it crashes with following error:
`/usr/lib/kdns_modules/policy.lua:60: FORWARD target 'fe80::92f6:52ff:fef6:1ce4%eth1" is not a valid IP address`
Vladimír Čunát
vladimir.cunat@nic.cz
Vladimír Čunát
vladimir.cunat@nic.cz
https://gitlab.nic.cz/knot/knot-resolver/-/issues/100
New g. root-servers. net. for about the AAAA addresses
2017-08-22T13:33:37+02:00
Horigome Yoshihito
New g. root-servers. net. for about the AAAA addresses
Hello,
10/20/2016 with g. root-servers. net. for AAAA address was updated.
This will be updated in the knot-resolver?
https://www.internic.net/domain/named.root
Or if there is how to load external hint files, please let me kn...
Hello,
10/20/2016 with g. root-servers. net. for AAAA address was updated.
This will be updated in the knot-resolver?
https://www.internic.net/domain/named.root
Or if there is how to load external hint files, please let me know.
As far as the check in command to become error.
```
> hints.config("/etc/knot-resolver/named.root")
[string "return table_print(hints.config("/etc/knot-re..."]:1: attempt to index global 'hints' (a nil value)
>
```
```
$ kresd -V
Knot DNS Resolver, version 1.1.1
```
Thanks.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/99
lmdb missing from the documentation
2017-08-22T13:33:37+02:00
Stéphane Bortzmeyer
lmdb missing from the documentation
According to "make info" against today's git HEAD, lmdb is mandatory:
```
Dependencies
------------
[yes] libknot (lib)
[no] lmdb (lib)
[yes] luajit (daemon)
[yes] libuv (daemon)
[yes] libgnutls (daemon)
[yes] nettle (DNS cookies)
```
...
According to "make info" against today's git HEAD, lmdb is mandatory:
```
Dependencies
------------
[yes] libknot (lib)
[no] lmdb (lib)
[yes] luajit (daemon)
[yes] libuv (daemon)
[yes] libgnutls (daemon)
[yes] nettle (DNS cookies)
```
But it is not listed in the packages at https://knot-resolver.readthedocs.io/en/latest/build.html
https://gitlab.nic.cz/knot/knot-resolver/-/issues/98
Knot Resolver on Turris Omnia sets AD flag on insecure domains
2017-08-22T13:33:37+02:00
Ondřej Surý
Knot Resolver on Turris Omnia sets AD flag on insecure domains
As reported by sbortzmeyer:
> The Knot resolver on my Turris Omnia always set the AD flag, even for
> unsigned domains:
```
% dig @192.168.2.254 twitter.com
; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> @192.168.2.254 twitter.com
; (...
As reported by sbortzmeyer:
> The Knot resolver on my Turris Omnia always set the AD flag, even for
> unsigned domains:
```
% dig @192.168.2.254 twitter.com
; <<>> DiG 9.9.5-9+deb8u6-Debian <<>> @192.168.2.254 twitter.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65123
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;twitter.com. IN A
;; ANSWER SECTION:
twitter.com. 1426 IN A 104.244.42.65
twitter.com. 1426 IN A 104.244.42.1
;; Query time: 12 msec
;; SERVER: 192.168.2.254#53(192.168.2.254)
;; WHEN: Wed Oct 19 15:41:01 CEST 2016
;; MSG SIZE rcvd: 72
```
1.2.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/97
Honour and process CD flag (checking disabled)
2017-08-22T13:33:37+02:00
Ondřej Surý
Honour and process CD flag (checking disabled)
Knot Resolver doesn't process CD flag on incoming queries. A WIP is in https://gitlab.labs.nic.cz/knot/resolver/tree/cd_proc
Knot Resolver doesn't process CD flag on incoming queries. A WIP is in https://gitlab.labs.nic.cz/knot/resolver/tree/cd_proc
1.2.0 release
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/96
Bind permission denied - Debian 8
2017-08-22T13:33:37+02:00
Lubomir Spacek
Bind permission denied - Debian 8
Hello,
I tried kresd 1.1.1 on clear Debian 8. After configure /etc/knot-resolver/kresd.conf kresd not start with permission denied for public IP address.
```
...
Oct 2 03:11:09 rdns2 kresd[2202]: [system] bind to 'xxx.xxx.xxx.xxx#53'...
Hello,
I tried kresd 1.1.1 on clear Debian 8. After configure /etc/knot-resolver/kresd.conf kresd not start with permission denied for public IP address.
```
...
Oct 2 03:11:09 rdns2 kresd[2202]: [system] bind to 'xxx.xxx.xxx.xxx#53' Permission denied
...
```
After some time I found problem with directory permission:
```
root@rdns2:~# ls -l /run/ | grep knot
drwxr-x--x 3 root root 80 Oct 2 03:37 knot-resolver
```
When I change directory permission to the 'knot-resolver' kresd working fine but after reboot is root:root permission back.
I found another solution, change User from 'knot-resolver' on 'root' directly in kresd.service file:
```
root@rdns2:~# cat /lib/systemd/system/kresd.service
[Unit]
Description=Knot DNS Resolver daemon
Documentation=man:kresd(8)
## This is a socket-activated service:
RefuseManualStart=true
[Service]
Type=notify
WorkingDirectory=/run/knot-resolver/cache
EnvironmentFile=-/etc/default/kresd
ExecStart=/usr/sbin/kresd $KRESD_ARGS
User=root
Restart=on-failure
[Install]
WantedBy=sockets.target
```
Sorry for this, but is here another or better solution ?
https://gitlab.nic.cz/knot/knot-resolver/-/issues/70
tinyweb crash on armhf
2017-08-22T13:33:40+02:00
Ondřej Surý
tinyweb crash on armhf
```
[ ta ] next refresh: 86400000
[New Thread 0x836ff360 (LWP 30745)]
fatal error: concurrent map read and map write
goroutine 23 [running]:
runtime.throw(0xb675f9c8, 0x21)
/usr/lib/go/src/runtime/panic.go:547 +0x80 fp=0x...
```
[ ta ] next refresh: 86400000
[New Thread 0x836ff360 (LWP 30745)]
fatal error: concurrent map read and map write
goroutine 23 [running]:
runtime.throw(0xb675f9c8, 0x21)
/usr/lib/go/src/runtime/panic.go:547 +0x80 fp=0x95a2eb6c sp=0x95a2eb60
runtime.mapaccess2(0xb6688740, 0x95a56de0, 0x95a5c940, 0xb64b5ea8, 0x95a58500)
/usr/lib/go/src/runtime/hashmap.go:343 +0x64 fp=0x95a2eb90 sp=0x95a2eb6c
reflect.mapaccess(0xb6688740, 0x95a56de0, 0x95a5c940, 0x95a56de0)
/usr/lib/go/src/runtime/hashmap.go:993 +0x30 fp=0x95a2eba8 sp=0x95a2eb90
reflect.Value.MapIndex(0xb6688740, 0x95a56de0, 0x15, 0xb66875a8, 0x95a5c940, 0x98, 0x0, 0x0, 0x0)
/usr/lib/go/src/reflect/value.go:1041 +0xec fp=0x95a2ebec sp=0x95a2eba8
encoding/json.(*mapEncoder).encode(0x95a5c6d0, 0x95a58500, 0xb6688740, 0x95a56de0, 0x15, 0x0)
/usr/lib/go/src/encoding/json/encode.go:622 +0x248 fp=0x95a2ec64 sp=0x95a2ebec
encoding/json.(*mapEncoder).(encoding/json.encode)-fm(0x95a58500, 0xb6688740, 0x95a56de0, 0x15, 0x95a56d00)
/usr/lib/go/src/encoding/json/encode.go:632 +0x44 fp=0x95a2ec80 sp=0x95a2ec64
encoding/json.(*encodeState).reflectValue(0x95a58500, 0xb6688740, 0x95a56de0, 0x15)
/usr/lib/go/src/encoding/json/encode.go:301 +0x64 fp=0x95a2ec98 sp=0x95a2ec80
encoding/json.(*encodeState).marshal(0x95a58500, 0xb6688740, 0x95a56de0, 0x0, 0x0)
/usr/lib/go/src/encoding/json/encode.go:274 +0xa0 fp=0x95a2ecbc sp=0x95a2ec98
encoding/json.Marshal(0xb6688740, 0x95a56de0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/encoding/json/encode.go:139 +0x70 fp=0x95a2ecd8 sp=0x95a2ecbc
main.serve_json(0x85833448, 0x95a9ca00, 0x95ad3dc0, 0xb6688740, 0x95a56de0)
/usr/src/build-area/knot-resolver-1.0.0~beta3-78-g3429619/modules/tinyweb/tinyweb.go:78 +0x24 fp=0x95a2ed14 sp=0x95a2ecd8
main.serve_geo(0x85833448, 0x95a9ca00, 0x95ad3dc0)
/usr/src/build-area/knot-resolver-1.0.0~beta3-78-g3429619/modules/tinyweb/tinyweb.go:88 +0x50 fp=0x95a2ed34 sp=0x95a2ed14
net/http.HandlerFunc.ServeHTTP(0xb67899c0, 0x85833448, 0x95a9ca00, 0x95ad3dc0)
/usr/lib/go/src/net/http/server.go:1618 +0x34 fp=0x95a2ed44 sp=0x95a2ed34
net/http.(*ServeMux).ServeHTTP(0x95a56880, 0x85833448, 0x95a9ca00, 0x95ad3dc0)
/usr/lib/go/src/net/http/server.go:1910 +0x170 fp=0x95a2ed70 sp=0x95a2ed44
net/http.serverHandler.ServeHTTP(0x95a12050, 0x85833448, 0x95a9ca00, 0x95ad3dc0)
/usr/lib/go/src/net/http/server.go:2081 +0x1b8 fp=0x95a2eda0 sp=0x95a2ed70
net/http.(*conn).serve(0x95a54700)
/usr/lib/go/src/net/http/server.go:1472 +0xfe0 fp=0x95a2efcc sp=0x95a2eda0
runtime.goexit()
/usr/lib/go/src/runtime/asm_arm.s:990 +0x4 fp=0x95a2efcc sp=0x95a2efcc
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
goroutine 19 [IO wait]:
net.runtime_pollWait(0x8586fff8, 0x72, 0x0)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a140b8, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a140b8, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).accept(0x95a14080, 0x0, 0x85870090, 0x95a99a10)
/usr/lib/go/src/net/fd_unix.go:426 +0x228
net.(*TCPListener).AcceptTCP(0x95a20040, 0x95a18ef8, 0x0, 0x0)
/usr/lib/go/src/net/tcpsock_posix.go:254 +0x4c
net/http.tcpKeepAliveListener.Accept(0x95a20040, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:2427 +0x3c
net/http.(*Server).Serve(0x95a12050, 0x85870070, 0x95a20040, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:2117 +0x100
net/http.(*Server).ListenAndServe(0x95a12050, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:2098 +0x140
net/http.ListenAndServe(0x95a997b0, 0xc, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:2195 +0x9c
created by main.tinyweb_config
/usr/src/build-area/knot-resolver-1.0.0~beta3-78-g3429619/modules/tinyweb/tinyweb.go:185 +0x530
goroutine 17 [runnable, locked to thread]:
runtime.goexit()
/usr/lib/go/src/runtime/asm_arm.s:990 +0x4
goroutine 34 [syscall, locked to thread]:
runtime.goexit()
/usr/lib/go/src/runtime/asm_arm.s:990 +0x4
goroutine 20 [IO wait]:
net.runtime_pollWait(0x8586ff80, 0x72, 0x95a9f000)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a54378, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a54378, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).Read(0x95a54340, 0x95a9f000, 0x1000, 0x1000, 0x0, 0x8582f000, 0x95a5a000)
/usr/lib/go/src/net/fd_unix.go:250 +0x1cc
net.(*conn).Read(0x95a5c4a8, 0x95a9f000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/net.go:172 +0xd4
net/http.(*connReader).Read(0x95a56ea0, 0x95a9f000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:526 +0x1e4
bufio.(*Reader).fill(0x95a60240)
/usr/lib/go/src/bufio/bufio.go:97 +0x1cc
bufio.(*Reader).ReadSlice(0x95a60240, 0x959df70a, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:328 +0x26c
bufio.(*Reader).ReadLine(0x95a60240, 0x0, 0x0, 0x0, 0xb64c2f00, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:357 +0x60
net/textproto.(*Reader).readLineSlice(0x95b6e2e0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:55 +0x58
net/textproto.(*Reader).ReadLine(0x95b6e2e0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:36 +0x34
net/http.readRequest(0x95a60240, 0x0, 0x95c08070, 0x0, 0x0)
/usr/lib/go/src/net/http/request.go:721 +0x84
net/http.(*conn).readRequest(0x95a543c0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:705 +0x3e4
net/http.(*conn).serve(0x95a543c0)
/usr/lib/go/src/net/http/server.go:1425 +0x9a8
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
goroutine 22 [IO wait]:
net.runtime_pollWait(0x8586ff08, 0x72, 0x95b63000)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a545b8, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a545b8, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).Read(0x95a54580, 0x95b63000, 0x1000, 0x1000, 0x0, 0x8582f000, 0x95a5a000)
/usr/lib/go/src/net/fd_unix.go:250 +0x1cc
net.(*conn).Read(0x95a5c568, 0x95b63000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/net.go:172 +0xd4
net/http.(*connReader).Read(0x95a57900, 0x95b63000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:526 +0x1e4
bufio.(*Reader).fill(0x95a604b0)
/usr/lib/go/src/bufio/bufio.go:97 +0x1cc
bufio.(*Reader).ReadSlice(0x95a604b0, 0x959df70a, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:328 +0x26c
bufio.(*Reader).ReadLine(0x95a604b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:357 +0x60
net/textproto.(*Reader).readLineSlice(0x95b6e320, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:55 +0x58
net/textproto.(*Reader).ReadLine(0x95b6e320, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:36 +0x34
net/http.readRequest(0x95a604b0, 0x0, 0x95c08150, 0x0, 0x0)
/usr/lib/go/src/net/http/request.go:721 +0x84
net/http.(*conn).readRequest(0x95a54600, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:705 +0x3e4
net/http.(*conn).serve(0x95a54600)
/usr/lib/go/src/net/http/server.go:1425 +0x9a8
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
goroutine 24 [IO wait]:
net.runtime_pollWait(0x8586fe18, 0x72, 0x95b69000)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a547f8, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a547f8, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).Read(0x95a547c0, 0x95b69000, 0x1000, 0x1000, 0x0, 0x8582f000, 0x95a5a000)
/usr/lib/go/src/net/fd_unix.go:250 +0x1cc
net.(*conn).Read(0x95a5c578, 0x95b69000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/net.go:172 +0xd4
net/http.(*connReader).Read(0x95a57c60, 0x95b69000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:526 +0x1e4
bufio.(*Reader).fill(0x95a607b0)
/usr/lib/go/src/bufio/bufio.go:97 +0x1cc
bufio.(*Reader).ReadSlice(0x95a607b0, 0x959f070a, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:328 +0x26c
bufio.(*Reader).ReadLine(0x95a607b0, 0x0, 0x0, 0x0, 0xb63acd00, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:357 +0x60
net/textproto.(*Reader).readLineSlice(0x95a56ee0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:55 +0x58
net/textproto.(*Reader).ReadLine(0x95a56ee0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:36 +0x34
net/http.readRequest(0x95a607b0, 0xb6893e00, 0x95af83f0, 0x0, 0x0)
/usr/lib/go/src/net/http/request.go:721 +0x84
net/http.(*conn).readRequest(0x95a54840, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:705 +0x3e4
net/http.(*conn).serve(0x95a54840)
/usr/lib/go/src/net/http/server.go:1425 +0x9a8
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
goroutine 25 [IO wait]:
net.runtime_pollWait(0x8586fda0, 0x72, 0x95b71000)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a548f8, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a548f8, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).Read(0x95a548c0, 0x95b71000, 0x1000, 0x1000, 0x0, 0x8582f000, 0x95a5a000)
/usr/lib/go/src/net/fd_unix.go:250 +0x1cc
net.(*conn).Read(0x95a5c580, 0x95b71000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/net.go:172 +0xd4
net/http.(*connReader).Read(0x95a57e60, 0x95b71000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:526 +0x1e4
bufio.(*Reader).fill(0x95a60930)
/usr/lib/go/src/bufio/bufio.go:97 +0x1cc
bufio.(*Reader).ReadSlice(0x95a60930, 0x959f2c0a, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:328 +0x26c
bufio.(*Reader).ReadLine(0x95a60930, 0x0, 0x0, 0x0, 0x858bf200, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:357 +0x60
net/textproto.(*Reader).readLineSlice(0x95b840a0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:55 +0x58
net/textproto.(*Reader).ReadLine(0x95b840a0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:36 +0x34
net/http.readRequest(0x95a60930, 0x0, 0x95ad36c0, 0x0, 0x0)
/usr/lib/go/src/net/http/request.go:721 +0x84
net/http.(*conn).readRequest(0x95a54940, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:705 +0x3e4
net/http.(*conn).serve(0x95a54940)
/usr/lib/go/src/net/http/server.go:1425 +0x9a8
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
goroutine 26 [IO wait]:
net.runtime_pollWait(0x8586fd28, 0x72, 0x95afb000)
/usr/lib/go/src/runtime/netpoll.go:160 +0x60
net.(*pollDesc).Wait(0x95a549f8, 0x72, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:73 +0x34
net.(*pollDesc).WaitRead(0x95a549f8, 0x0, 0x0)
/usr/lib/go/src/net/fd_poll_runtime.go:78 +0x30
net.(*netFD).Read(0x95a549c0, 0x95afb000, 0x1000, 0x1000, 0x0, 0x8582f000, 0x95a5a000)
/usr/lib/go/src/net/fd_unix.go:250 +0x1cc
net.(*conn).Read(0x95a5c588, 0x95afb000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/net.go:172 +0xd4
net/http.(*connReader).Read(0x95a57740, 0x95afb000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:526 +0x1e4
bufio.(*Reader).fill(0x95a603f0)
/usr/lib/go/src/bufio/bufio.go:97 +0x1cc
bufio.(*Reader).ReadSlice(0x95a603f0, 0x959f2c0a, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:328 +0x26c
bufio.(*Reader).ReadLine(0x95a603f0, 0x0, 0x0, 0x0, 0xb63acd00, 0x0, 0x0)
/usr/lib/go/src/bufio/bufio.go:357 +0x60
net/textproto.(*Reader).readLineSlice(0x95a57ec0, 0x0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:55 +0x58
net/textproto.(*Reader).ReadLine(0x95a57ec0, 0x0, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/textproto/reader.go:36 +0x34
net/http.readRequest(0x95a603f0, 0xb6893e00, 0x95ad3650, 0x0, 0x0)
/usr/lib/go/src/net/http/request.go:721 +0x84
net/http.(*conn).readRequest(0x95a54a40, 0x0, 0x0, 0x0)
/usr/lib/go/src/net/http/server.go:705 +0x3e4
net/http.(*conn).serve(0x95a54a40)
/usr/lib/go/src/net/http/server.go:1425 +0x9a8
created by net/http.(*Server).Serve
/usr/lib/go/src/net/http/server.go:2137 +0x3d8
Program received signal SIGABRT, Aborted.
[Switching to Thread 0x846ff360 (LWP 30741)]
runtime.raise () at /usr/lib/go/src/runtime/sys_linux_arm.s:137
137 RET
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/94
adding a parameter to the interface to listen on error;
2017-08-22T13:33:40+02:00
Horigome Yoshihito
adding a parameter to the interface to listen on error;
Configures the following documents, such as the following error.
https://knot-resolver.readthedocs.io/en/latest/daemon.html?highlight=tls#network-configuration
`net.listen({'net.eth0', 'net.lo'}, 53, true)`
```
$ sudo /usr/sbin/kresd ...
Configures the following documents, such as the following error.
https://knot-resolver.readthedocs.io/en/latest/daemon.html?highlight=tls#network-configuration
`net.listen({'net.eth0', 'net.lo'}, 53, true)`
```
$ sudo /usr/sbin/kresd -c /etc/knot-resolver/kresd.conf -f 1 /run/knot-resolver/cache -v
[system] bind to 'net.eth0#53' Invalid argument
[system] bind to 'net.lo#53' Invalid argument
[ ta ] key: 19036 state: Valid
[hint] reading '/etc/hosts'
[hint] loaded 10 hints
[string "config"]:5: bind to 127.0.0.1#53 error: Permission denied
[system] worker failed: Bad file descriptor
```
Set shown below, and the error does not occur.
`net.listen({'127.0.0.1', '::1', '192.168.122.223'}, 53, true)`
My document read wrong?
```
$ kresd -V
Knot DNS Resolver, version 1.1.1
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/69
crash on armhf
2017-08-22T13:33:40+02:00
Ondřej Surý
crash on armhf
Running resperf in look results in (after some time):
```
Thread 1 (Thread 0xb6a22350 (LWP 23978)):
#0 __libc_do_syscall () at ../ports/sysdeps/unix/sysv/linux/arm/libc-do-syscall.S:44
No locals.
#1 0xb6d1eee6 in __GI_raise (sig=s...
Running resperf in look results in (after some time):
```
Thread 1 (Thread 0xb6a22350 (LWP 23978)):
#0 __libc_do_syscall () at ../ports/sysdeps/unix/sysv/linux/arm/libc-do-syscall.S:44
No locals.
#1 0xb6d1eee6 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
_a1 = 0
_a3tmp = 6
_a1tmp = 0
_a3 = 6
_nametmp = 268
_a2tmp = 23978
_a2 = 23978
_name = 268
_sys_result = <optimized out>
pd = 0xb6a22350
pid = 0
selftid = 23978
#2 0xb6d1fbee in __GI_abort () at abort.c:89
save_stage = 2
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {7302446, 0, 3204429464, 4294967295, 0, 3067896272, 4294967295, 4294967295, 3067080888, 115, 4, 3204429448, 3064080400, 0, 0, 3068022784,
3067925360, 0, 3068022784, 1, 3068933148, 204, 1, 3067350857, 3068025160, 0, 3067896308, 3070185472, 4294967295, 3068025160, 3068928720, 3067896308}}, sa_flags = -1226034148, sa_restorer = 0xcc}
sigs = {__val = {32, 0 <repeats 31 times>}}
#3 0xb6d1a210 in __assert_fail_base (fmt=0x1 <error: Cannot access memory at address 0x1>, assertion=0xb6ec22d0 "w->fd >= 0", assertion@entry=0x0, file=0xb6ec341c "src/unix/linux-core.c", file@entry=0xb6a22350 "", line=204,
line@entry=3068027044, function=function@entry=0xb6ec33c4 "uv__io_poll") at assert.c:92
str = 0x8184c810 "\230\225f\177\020U\336\266rc/unix/linux-core.c:204: uv__io_poll: Assertion `w->fd >= 0' failed.\n"
total = 4096
#4 0xb6d1a2a6 in __GI___assert_fail (assertion=0x0, file=0xb6a22350 "", line=3068027044, function=0xb6ec33c4 "uv__io_poll") at assert.c:101
No locals.
#5 0xb6ebfe84 in ?? () from /usr/lib/arm-linux-gnueabihf/libuv.so.1
No symbol table info available.
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/92
Wrong version number v1.1.1
2017-08-22T13:33:40+02:00
Horigome Yoshihito
Wrong version number v1.1.1
Have introduced the following package is wrong version number of the process.
```
$ dpkg -l | grep knot-resolver
ii knot-resolver 1.1.1-1+xenial+1 arm64 caching, DNSSEC-validating DNS reso...
Have introduced the following package is wrong version number of the process.
```
$ dpkg -l | grep knot-resolver
ii knot-resolver 1.1.1-1+xenial+1 arm64 caching, DNSSEC-validating DNS resolver
```
```
$ kresd -V
Knot DNS Resolver, version 1.1.0
```
1.2.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/68
memory bug in cache unit tests
2017-08-22T13:33:40+02:00
Marek Vavrusa
memory bug in cache unit tests
```
==37349==ERROR: AddressSanitizer: heap-use-after-free on address 0x61200000bb38 at pc 0x000101ad78d2 bp 0x7fff5e2a15d0 sp 0x7fff5e2a0d90
WRITE of size 8 at 0x61200000bb38 thread T0
#0 0x101ad78d1 in wrap_memcpy (libclang_rt.as...
```
==37349==ERROR: AddressSanitizer: heap-use-after-free on address 0x61200000bb38 at pc 0x000101ad78d2 bp 0x7fff5e2a15d0 sp 0x7fff5e2a0d90
WRITE of size 8 at 0x61200000bb38 thread T0
#0 0x101ad78d1 in wrap_memcpy (libclang_rt.asan_osx_dynamic.dylib+0x408d1)
#1 0x101a2b718 in mdb_txn_renew0 mdb.c:2715
#2 0x101a2bde3 in mdb_txn_begin mdb.c:2850
#3 0x101a199b7 in txn_begin db_lmdb.c:265
#4 0x101996967 in kr_cache_txn_begin cache.c:134
#5 0x10196095f in test_clear (test_cache+0x10000295f)
#6 0x101a8cfb0 in _run_test (libcmocka.0.dylib+0x3fb0)
#7 0x101a8d77c in _run_group_tests (libcmocka.0.dylib+0x477c)
#8 0x10195f438 in main (test_cache+0x100001438)
#9 0x7fff8f4b45ac in start (libdyld.dylib+0x35ac)
#10 0x0 (<unknown module>)
0x61200000bb38 is located 248 bytes inside of 258-byte region [0x61200000ba40,0x61200000bb42)
freed by thread T0 here:
#0 0x101adfb89 in wrap_free (libclang_rt.asan_osx_dynamic.dylib+0x48b89)
#1 0x101996ac8 in kr_cache_txn_commit cache.c:157
#2 0x10196085b in test_fill (test_cache+0x10000285b)
#3 0x101a8cfb0 in _run_test (libcmocka.0.dylib+0x3fb0)
#4 0x101a8d77c in _run_group_tests (libcmocka.0.dylib+0x477c)
#5 0x10195f438 in main (test_cache+0x100001438)
#6 0x7fff8f4b45ac in start (libdyld.dylib+0x35ac)
#7 0x0 (<unknown module>)
previously allocated by thread T0 here:
#0 0x101adff27 in wrap_calloc (libclang_rt.asan_osx_dynamic.dylib+0x48f27)
#1 0x101a436f4 in mdb_env_open (libknot.2.dylib+0x2f6f4)
#2 0x101a197b8 in init db_lmdb.c:156
#3 0x1019966a7 in kr_cache_open cache.c:108
#4 0x10195fef9 in test_open_conventional_api (test_cache+0x100001ef9)
#5 0x101a8cfb0 in _run_test (libcmocka.0.dylib+0x3fb0)
#6 0x101a8d6f6 in _run_group_tests (libcmocka.0.dylib+0x46f6)
#7 0x10195f438 in main (test_cache+0x100001438)
#8 0x7fff8f4b45ac in start (libdyld.dylib+0x35ac)
#9 0x0 (<unknown module>)
```
It crashes at the end, looks like improper use in the test case.
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/90
rtt value for nameserver includes timeouts for all previous addresses
2017-08-22T13:33:40+02:00
Ondřej Surý
rtt value for nameserver includes timeouts for all previous addresses
While debugging the DROP + TC issue, I found out that effective RTT for address set via `kr_nsrep_update_rtt` in `kr_resolve_produce()` is calculated as a sum of timeouts for all previous addresses. Thus if there's 4 address in total an...
While debugging the DROP + TC issue, I found out that effective RTT for address set via `kr_nsrep_update_rtt` in `kr_resolve_produce()` is calculated as a sum of timeouts for all previous addresses. Thus if there's 4 address in total and only the last responds, the score fed to kr_nsrep_update_rtt will be 3*KR_CONN_RETRY + + real RTT (f.e. 901) instead of just the real RTT for the address (f.e. 1).
It can be seen here:
```
**[nsrep] updating reputation for 194.0.12.1 from 0 to 90**
[resl] <= server: '194.0.12.1' rtt: 90 ms
[resl] => querying: '193.29.206.1' score: 10 zone cut: 'cz.' m12n: 'TurRIs.cZ.' type: 'DNSKEY'
[resl] optional: '194.0.14.1' score: 10 zone cut: 'cz.' m12n: 'TurRIs.cZ.' type: 'DNSKEY'
[resl] optional: '194.0.13.1' score: 10 zone cut: 'cz.' m12n: 'TurRIs.cZ.' type: 'DNSKEY'
[resl] optional: '194.0.12.1' score: 10 zone cut: 'cz.' m12n: 'TurRIs.cZ.' type: 'DNSKEY'
[iter] <= truncated response, failover to TCP
**[nsrep] updating reputation for 194.0.12.1 from 90 to 90**
[resl] <= server: '194.0.12.1' rtt: 91 ms
[resl] kr_resolve_consume requery over TCP
[resl] => retrying over TCP, electing (d.ns.nic.cz.)
[resl] => querying: '193.29.206.1' score: 10 zone cut: 'cz.' m12n: 'tuRRIs.Cz.' type: 'DNSKEY'
[resl] => querying: '194.0.14.1' score: 10 zone cut: 'cz.' m12n: 'TURriS.cZ.' type: 'DNSKEY'
[resl] optional: '194.0.13.1' score: 10 zone cut: 'cz.' m12n: 'TURriS.cZ.' type: 'DNSKEY'
[resl] optional: '194.0.12.1' score: 10 zone cut: 'cz.' m12n: 'TURriS.cZ.' type: 'DNSKEY'
[iter] <= truncated response, failover to TCP
**[nsrep] updating reputation for 194.0.12.1 from 90 to 75**
[resl] <= server: '194.0.12.1' rtt: 61 ms
[resl] kr_resolve_consume requery over TCP
[resl] => retrying over TCP, electing (c.ns.nic.cz.)
[resl] => querying: '194.0.14.1' score: 10 zone cut: 'cz.' m12n: 'TURRIs.cz.' type: 'DNSKEY'
[resl] => querying: '194.0.13.1' score: 10 zone cut: 'cz.' m12n: 'tURrIS.cz.' type: 'DNSKEY'
[resl] optional: '194.0.12.1' score: 10 zone cut: 'cz.' m12n: 'tURrIS.cz.' type: 'DNSKEY'
[iter] <= truncated response, failover to TCP
**[nsrep] updating reputation for 194.0.12.1 from 75 to 53**
[resl] <= server: '194.0.12.1' rtt: 31 ms
[resl] kr_resolve_consume requery over TCP
[resl] => retrying over TCP, electing (b.ns.nic.cz.)
[resl] => querying: '194.0.13.1' score: 10 zone cut: 'cz.' m12n: 'tuRRIS.Cz.' type: 'DNSKEY'
[resl] => querying: '194.0.12.1' score: 53 zone cut: 'cz.' m12n: 'TurRIs.Cz.' type: 'DNSKEY'
[iter] <= truncated response, failover to TCP
**[nsrep] updating reputation for 194.0.12.1 from 53 to 32**
[resl] <= server: '194.0.12.1' rtt: 1 ms
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/67
duplicated non-existence proof with +dnssec
2017-08-22T13:33:40+02:00
Marek Vavrusa
duplicated non-existence proof with +dnssec
When the answer comes from the upstream, it's good.
```bash
$ kdig @127.0.0.1 -p 6667 A notexists.org
...
;; AUTHORITY SECTION:
org. 684 IN SOA a0.org.afilias-nst.info. noc.afilias-nst.info. 2011985870 1800 900 604800 86400
org...
When the answer comes from the upstream, it's good.
```bash
$ kdig @127.0.0.1 -p 6667 A notexists.org
...
;; AUTHORITY SECTION:
org. 684 IN SOA a0.org.afilias-nst.info. noc.afilias-nst.info. 2011985870 1800 900 604800 86400
org. 684 IN SOA a0.org.afilias-nst.info. noc.afilias-nst.info. 2011985870 1800 900 604800 86400
org. 684 IN RRSIG SOA 7 1 900 20160531233745 20160510223745 52860 org. LbwYB0WF9A1e3+t+OAqbrBArFGqoXXHsTN3MCzT5AM0rALYqc4+5dL1F MPgMTsTr5SqHgptPrbIwzumUdmJ9aFwBOXfFvATSrZr7k6lixTnx++zq Wv9P51ggVPb060Jdjb5yXwHpGXuqFsJ/Zvh0TVvkT5qmNKOvobaMel7+ cYc=
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86184 IN NSEC3 1 1 1 D399EAAB H9PARR669T6U8O1GSG9E1LMITK4DEM0T NS SOA RRSIG DNSKEY NSEC3PARAM
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86184 IN RRSIG NSEC3 7 2 86400 20160531233745 20160510223745 52860 org. VRmFqGWjHW21CSn8LS0XcqhDvdvNzS88//QOSNJXYB8IQXpi6w5PyzEr 1IRsZ7akeeGA8oFuIIosnnbkHHATNcFKIIZiDhfqlqUciYoQolxonu6K /d5+yX8l3DSU4ezpzZQr/SrkO1sNitzezDihgsxhXBFpd7+dwYqErKkh WzI=
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86184 IN NSEC3 1 1 1 D399EAAB SGL6846A77U7AF5TJ7UL5GHNNP64MF8L
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86184 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. 1WpIKnpy0/rdrK9zNxKAYHvqdSGphjX1HFl9+TAFN1gqOPfErGGz6vPP YHuFDrSrfcziUw+Mu7udX/He9UHRMntV07w2TnNlOntJIG74dHDWo919 f1ZM0ZVXNQFEFOdFwnJM/wF6z75mpSSPekbNvHpBHfHYWTDs7LCuBTt0 bPg=
vaittv1g2ies9s3920soaumh73klnhs5.org. 86184 IN NSEC3 1 1 1 D399EAAB VAJSHJ9G9U88NEFMNIS1LOG48CM6L9LO NS DS RRSIG
vaittv1g2ies9s3920soaumh73klnhs5.org. 86184 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. I/Aa7E+iKFaeez8Tt65npGcQMqqGB8sJkdQzZdCvH3UHsChq3aJ7ksd6 aJh+lbvxqbB9XHtLKF7NY4i3Vcr5l5/jc4N9UysrGY3zJ3Q3VeUk6X6G ireOcEdCQ7MFVS0Zw+6rW7S5Via8va0nQj57HJs5n4YIy7SYZURixJI0 j5A=
```
When I query with +dnssec again, it doubles. I think this was introduced with the wildcard non-existence proof patch.
```bash
$ kdig @127.0.0.1 -p 6667 A notexists.org +dnssec
...
;; AUTHORITY SECTION:
org. 631 IN SOA a0.org.afilias-nst.info. noc.afilias-nst.info. 2011985870 1800 900 604800 86400
org. 631 IN RRSIG SOA 7 1 900 20160531233745 20160510223745 52860 org. LbwYB0WF9A1e3+t+OAqbrBArFGqoXXHsTN3MCzT5AM0rALYqc4+5dL1F MPgMTsTr5SqHgptPrbIwzumUdmJ9aFwBOXfFvATSrZr7k6lixTnx++zq Wv9P51ggVPb060Jdjb5yXwHpGXuqFsJ/Zvh0TVvkT5qmNKOvobaMel7+ cYc=
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86131 IN NSEC3 1 1 1 D399EAAB H9PARR669T6U8O1GSG9E1LMITK4DEM0T NS SOA RRSIG DNSKEY NSEC3PARAM
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86131 IN RRSIG NSEC3 7 2 86400 20160531233745 20160510223745 52860 org. VRmFqGWjHW21CSn8LS0XcqhDvdvNzS88//QOSNJXYB8IQXpi6w5PyzEr 1IRsZ7akeeGA8oFuIIosnnbkHHATNcFKIIZiDhfqlqUciYoQolxonu6K /d5+yX8l3DSU4ezpzZQr/SrkO1sNitzezDihgsxhXBFpd7+dwYqErKkh WzI=
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86131 IN NSEC3 1 1 1 D399EAAB SGL6846A77U7AF5TJ7UL5GHNNP64MF8L
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86131 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. 1WpIKnpy0/rdrK9zNxKAYHvqdSGphjX1HFl9+TAFN1gqOPfErGGz6vPP YHuFDrSrfcziUw+Mu7udX/He9UHRMntV07w2TnNlOntJIG74dHDWo919 f1ZM0ZVXNQFEFOdFwnJM/wF6z75mpSSPekbNvHpBHfHYWTDs7LCuBTt0 bPg=
vaittv1g2ies9s3920soaumh73klnhs5.org. 86131 IN NSEC3 1 1 1 D399EAAB VAJSHJ9G9U88NEFMNIS1LOG48CM6L9LO NS DS RRSIG
vaittv1g2ies9s3920soaumh73klnhs5.org. 86131 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. I/Aa7E+iKFaeez8Tt65npGcQMqqGB8sJkdQzZdCvH3UHsChq3aJ7ksd6 aJh+lbvxqbB9XHtLKF7NY4i3Vcr5l5/jc4N9UysrGY3zJ3Q3VeUk6X6G ireOcEdCQ7MFVS0Zw+6rW7S5Via8va0nQj57HJs5n4YIy7SYZURixJI0 j5A=
org. 631 IN SOA a0.org.afilias-nst.info. noc.afilias-nst.info. 2011985870 1800 900 604800 86400
org. 631 IN RRSIG SOA 7 1 900 20160531233745 20160510223745 52860 org. LbwYB0WF9A1e3+t+OAqbrBArFGqoXXHsTN3MCzT5AM0rALYqc4+5dL1F MPgMTsTr5SqHgptPrbIwzumUdmJ9aFwBOXfFvATSrZr7k6lixTnx++zq Wv9P51ggVPb060Jdjb5yXwHpGXuqFsJ/Zvh0TVvkT5qmNKOvobaMel7+ cYc=
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86131 IN NSEC3 1 1 1 D399EAAB H9PARR669T6U8O1GSG9E1LMITK4DEM0T NS SOA RRSIG DNSKEY NSEC3PARAM
h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86131 IN RRSIG NSEC3 7 2 86400 20160531233745 20160510223745 52860 org. VRmFqGWjHW21CSn8LS0XcqhDvdvNzS88//QOSNJXYB8IQXpi6w5PyzEr 1IRsZ7akeeGA8oFuIIosnnbkHHATNcFKIIZiDhfqlqUciYoQolxonu6K /d5+yX8l3DSU4ezpzZQr/SrkO1sNitzezDihgsxhXBFpd7+dwYqErKkh WzI=
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86131 IN NSEC3 1 1 1 D399EAAB SGL6846A77U7AF5TJ7UL5GHNNP64MF8L
sgkmag4eddlk9u0gdg4rijrgaablvuce.org. 86131 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. 1WpIKnpy0/rdrK9zNxKAYHvqdSGphjX1HFl9+TAFN1gqOPfErGGz6vPP YHuFDrSrfcziUw+Mu7udX/He9UHRMntV07w2TnNlOntJIG74dHDWo919 f1ZM0ZVXNQFEFOdFwnJM/wF6z75mpSSPekbNvHpBHfHYWTDs7LCuBTt0 bPg=
vaittv1g2ies9s3920soaumh73klnhs5.org. 86131 IN NSEC3 1 1 1 D399EAAB VAJSHJ9G9U88NEFMNIS1LOG48CM6L9LO NS DS RRSIG
vaittv1g2ies9s3920soaumh73klnhs5.org. 86131 IN RRSIG NSEC3 7 2 86400 20160530150327 20160509140327 52860 org. I/Aa7E+iKFaeez8Tt65npGcQMqqGB8sJkdQzZdCvH3UHsChq3aJ7ksd6 aJh+lbvxqbB9XHtLKF7NY4i3Vcr5l5/jc4N9UysrGY3zJ3Q3VeUk6X6G ireOcEdCQ7MFVS0Zw+6rW7S5Via8va0nQj57HJs5n4YIy7SYZURixJI0 j5A=
```
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/89
When you install the knot-resolver, init will occupy the port.
2017-08-22T13:33:40+02:00
Horigome Yoshihito
When you install the knot-resolver, init will occupy the port.
Hi, all
When was introduced the following in the environment knot-resolver, the port 53 init is now ready to be occupied.
version
```
$ sudo kresd --version
Knot DNS Resolver, version 1.1.0
```
env
```
$ hostnamectl
Sta...
Hi, all
When was introduced the following in the environment knot-resolver, the port 53 init is now ready to be occupied.
version
```
$ sudo kresd --version
Knot DNS Resolver, version 1.1.0
```
env
```
$ hostnamectl
Static hostname: dns02.kometch.local
Icon name: computer
Machine ID: 3b25a16e9bf3f76dc79aa03c571c77e3
Boot ID: f1f44e1e4bab4d73adcd1e8d4dadde92
Operating System: Ubuntu 16.04.1 LTS
Kernel: Linux 3.10.102-2-pine64-longsleep
Architecture: arm64
```
issue
```
$ sudo netstat -antp | grep init
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 1/init
tcp6 0 0 ::1:53 :::* LISTEN 1/init
tcp6 0 0 :::853 :::* LISTEN 1/init
```
```
$ sudo kresd
[string "config"]:5: bind to 127.0.0.1#53 error: Address already in use
[system] worker failed: No such file or directory
```
For from the very beginning the installation is port election, it will also fail to start the knot-resolver.
Is this a known problem?
Best regards .
https://gitlab.nic.cz/knot/knot-resolver/-/issues/66
tcp-ooo kresd stuck at feeds.feedburner.com.
2017-08-22T13:33:40+02:00
Ondřej Surý
tcp-ooo kresd stuck at feeds.feedburner.com.
Original report from gitter:
> Maxime Hadjinlian @maximeh 11:56
> Hi there
> I have started using kresd-resolver (the package from Debian) to play around a little bit
> I have a "strange" issues, there's a few dns query that are stuc...
Original report from gitter:
> Maxime Hadjinlian @maximeh 11:56
> Hi there
> I have started using kresd-resolver (the package from Debian) to play around a little bit
> I have a "strange" issues, there's a few dns query that are stuck.
> I have a knot-resolver daemon running on my machine, I have a scripts that does a bunch of requests, some requests get stuck, if I shutdown kresd, they keep going
> I don't know how I could debug that, so any help is really appreciated
> I did not have that problem with the earlier version
>
> Maxime Hadjinlian @maximeh 12:13
> Here's the log from the failing request: http://pastebin.com/jeF7n3eT
> The program at the other ends get stuck on the requests to feeds.feedburner.com, if I quit kresd, it goes on.
And the data from pastebin for reference:
```
[plan] plan 'feeds.feedburner.com.' type 'A'
[resl] => NS is provably without DS, going insecure
[resl] => querying: '216.239.38.10' score: 10 zone cut: 'feedburner.com.' m12n: 'fEedS.fEeDBuRNEr.com.' type: 'A'
[resl] optional: '216.239.36.10' score: 10 zone cut: 'feedburner.com.' m12n: 'fEedS.fEeDBuRNEr.com.' type: 'A'
[resl] optional: '216.239.34.10' score: 10 zone cut: 'feedburner.com.' m12n: 'fEedS.fEeDBuRNEr.com.' type: 'A'
[resl] optional: '216.239.32.10' score: 10 zone cut: 'feedburner.com.' m12n: 'fEedS.fEeDBuRNEr.com.' type: 'A'
[plan] plan 'feeds.feedburner.com.' type 'AAAA'
[resl] => NS is provably without DS, going insecure
[resl] => querying: '216.239.38.10' score: 10 zone cut: 'feedburner.com.' m12n: 'FEEds.FEEdburner.cOM.' type: 'AAAA'
[resl] optional: '216.239.36.10' score: 10 zone cut: 'feedburner.com.' m12n: 'FEEds.FEEdburner.cOM.' type: 'AAAA'
[resl] optional: '216.239.34.10' score: 10 zone cut: 'feedburner.com.' m12n: 'FEEds.FEEdburner.cOM.' type: 'AAAA'
[resl] optional: '216.239.32.10' score: 10 zone cut: 'feedburner.com.' m12n: 'FEEds.FEEdburner.cOM.' type: 'AAAA'
[iter] <= rcode: NOERROR
[resl] <= server: '216.239.38.10' rtt: 32 ms
[resl] finished: 4, queries: 1, mempool: 32800 B
[plan] plan 'feeds.feedburner.com.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[iter] <= cname chain, following
[plan] plan 'www4.l.google.com.' type 'A'
[resl] => NS is provably without DS, going insecure
[resl] => querying: '216.239.38.10' score: 10 zone cut: 'l.google.com.' m12n: 'WWW4.l.GooGLe.cOm.' type: 'A'
[resl] optional: '216.239.36.10' score: 10 zone cut: 'l.google.com.' m12n: 'WWW4.l.GooGLe.cOm.' type: 'A'
[resl] optional: '216.239.34.10' score: 10 zone cut: 'l.google.com.' m12n: 'WWW4.l.GooGLe.cOm.' type: 'A'
[resl] optional: '216.239.32.10' score: 10 zone cut: 'l.google.com.' m12n: 'WWW4.l.GooGLe.cOm.' type: 'A'
[iter] <= rcode: NOERROR
[resl] <= server: '216.239.38.10' rtt: 34 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
[iter] <= rcode: NOERROR
[resl] <= server: '216.239.38.10' rtt: 32 ms
[resl] finished: 4, queries: 2, mempool: 163904 B
```
Local test reveals when the record is not in cache:
```
$ dig IN AAAA feeds.feedburner.com. @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 1059
;; Flags: qr rd ra; QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; feeds.feedburner.com. IN AAAA
;; ANSWER SECTION:
feeds.feedburner.com. 300 IN CNAME www4.l.google.com.
www4.l.google.com. 300 IN AAAA 2a00:1450:4001:80a::200e
www4.l.google.com. 300 IN AAAA 2a00:1450:4001:80a::200e
;; Received 150 B
;; Time 2016-05-10 13:44:59 CEST
;; From 127.0.0.1@53(UDP) in 171.1 ms
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/65
Resolving darujspravne.cz
2017-08-22T13:33:40+02:00
Martin Vician
Resolving darujspravne.cz
I cannot resolve [darujspravne.cz](http://darujspravne.cz) with knot-resolver.
One of their DNS servers (ns3.jetcloud.biz) returns wrong answer which causes no answer from knot-resolver.
Bind and unbound can handle this situation.
...
I cannot resolve [darujspravne.cz](http://darujspravne.cz) with knot-resolver.
One of their DNS servers (ns3.jetcloud.biz) returns wrong answer which causes no answer from knot-resolver.
Bind and unbound can handle this situation.
Request:
```
dig darujspravne.cz A @*******************
; <<>> DiG 9.10.3-P4-Ubuntu <<>> darujspravne.cz A @*******************
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 19104
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;darujspravne.cz. IN A
;; Query time: 16 msec
;; SERVER: *******************
;; WHEN: Wed Apr 27 10:11:39 CEST 2016
;; MSG SIZE rcvd: 44
```
Knot-resolver log:
```
Apr 27 10:11:39 kres kresd[1403]: [plan] plan 'darujspravne.cz.' type 'A'
Apr 27 10:11:39 kres kresd[1403]: [resl] => NS is provably without DS, going insecure
Apr 27 10:11:39 kres kresd[1403]: [resl] => querying: '46.101.203.125' score: 11 zone cut: 'darujspravne.cz.' m12n: 'DAruJsPrAvNE.cZ.' type: 'A'
Apr 27 10:11:39 kres kresd[1403]: [iter] <= rcode: REFUSED
Apr 27 10:11:39 kres kresd[1403]: [resl] <= server: '46.101.203.125' rtt: 14 ms
Apr 27 10:11:39 kres kresd[1403]: [resl] finished: 4, queries: 1, mempool: 65600 B
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/64
resolver: Feature request / Use negative caching information to detect some k...
2017-08-22T13:33:40+02:00
Toshinori Maeno
resolver: Feature request / Use negative caching information to detect some kind of poison.
qname minimisation information can help us preventing some kind of cache poisoning. I made simple explanation in the following page.
https://moin.qmail.jp/kresd/Marek/2016-04-18
qname minimisation information can help us preventing some kind of cache poisoning. I made simple explanation in the following page.
https://moin.qmail.jp/kresd/Marek/2016-04-18
https://gitlab.nic.cz/knot/knot-resolver/-/issues/86
TA boostrap works with non-existent file, but not with empty file
2017-10-31T01:10:20+01:00
Jan Pavlinec
TA boostrap works with non-existent file, but not with empty file
Bootstraping of trust anchor isn't working on turris omnia.
knot-resolver version: 4a49a83f028c3f75b71b508143b98e34cd8d4436
Omnia custom patch: https://gitlab.labs.nic.cz/turris/turris-os-packages/blob/test/net/knot-resolver/patches/re...
Bootstraping of trust anchor isn't working on turris omnia.
knot-resolver version: 4a49a83f028c3f75b71b508143b98e34cd8d4436
Omnia custom patch: https://gitlab.labs.nic.cz/turris/turris-os-packages/blob/test/net/knot-resolver/patches/remove-optional-dependencies.patch
```
-----omnia test---
root@turris:/tmp# touch root.key
root@turris:/tmp# chmod 0777 root.key
root@turris:/tmp# ls -la root.key
-rwxrwxrwx 1 root root 0 Aug 9 11:23 root.key
root@turris:/tmp# kresd -k /tmp/root.key
[system] interactive mode
> trust_anchors
[hold_down_time] => 2592000000
[keep_removed] => 0
[file_current] => /tmp/root.key
[config] => function: 0xb6a71268
[insecure] => {
}
[keyset] => {
}
[add] => function: 0xb6a71838
[update] => function: 0xb6a711d0
[set_insecure] => function: 0xb6a712d0
root@turris:/tmp# ls -la root.key
-rwxrwxrwx 1 root root 0 Aug 9 11:23 root.ke
>Croot@turris:/tmp# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=60 time=0.758 ms
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/63
in-bailiwick check ; feature or bug ?
2017-08-22T13:33:40+02:00
Toshinori Maeno
in-bailiwick check ; feature or bug ?
I found that in-bailwick check is not doing what I expected.
So I changed lib/layer/iterate.c as the patch follows:
What do you think?
```
*** /home/tmaeno/desk/iterate.c 2016-04-16 19:58:10.240860212 +0900
--- iterate.c 2016-04-1...
I found that in-bailwick check is not doing what I expected.
So I changed lib/layer/iterate.c as the patch follows:
What do you think?
```
*** /home/tmaeno/desk/iterate.c 2016-04-16 19:58:10.240860212 +0900
--- iterate.c 2016-04-16 17:35:20.905353675 +0900
***************
*** 253,259 ****
}
kr_zonecut_add(cut, ns_name, NULL);
/* Use glue only in permissive mode or when in bailiwick. */
! if ((qry->flags & QUERY_PERMISSIVE) || knot_dname_in(current_cut, ns_name)) {
fetch_glue(pkt, ns_name, qry);
}
}
--- 253,260 ----
}
kr_zonecut_add(cut, ns_name, NULL);
/* Use glue only in permissive mode or when in bailiwick. */
! if (knot_dname_in(cut->name, ns_name)) {
! DEBUG_MSG("fetching glue for cut %s, %s\n", cut->name, ns_name);
fetch_glue(pkt, ns_name, qry);
}
}
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/84
if --keyfile argument contains lua metacharacters, it can trigger arbitrary lua
2017-08-22T13:33:40+02:00
Daniel Kahn Gillmor
if --keyfile argument contains lua metacharacters, it can trigger arbitrary lua
```daemon/main.c``` has:
if (keyfile) {
auto_free char *cmd = afmt("trust_anchors.config('%s')", keyfile);
if (!cmd) {
kr_log_error("[system] not enough memory\n");
return EXIT_FAILURE;
}
engine_cmd(...
```daemon/main.c``` has:
if (keyfile) {
auto_free char *cmd = afmt("trust_anchors.config('%s')", keyfile);
if (!cmd) {
kr_log_error("[system] not enough memory\n");
return EXIT_FAILURE;
}
engine_cmd(engine.L, cmd, false);
lua_settop(engine.L, 0);
}
so if keyfile has a literal ```')``` in it, it will trigger arbitrary lua actions.
This is not a security issue, because if you can modify the filename passed to kresd you can probably do other things, but it's still not ideal. ideally, the lua stack should be manipulated directly.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/62
Knot Resolver: out-of-bailwick detection
2017-08-22T13:33:40+02:00
Toshinori Maeno
Knot Resolver: out-of-bailwick detection
If resolver detect out-of-bailiwick NS,
it should write "DEBUG_MSG("<= authority: ns outside bailiwick\n");" as in update_cut function.
----
But I could not find such output in the log of y.qmail.jp query. What am I overlooking?
If resolver detect out-of-bailiwick NS,
it should write "DEBUG_MSG("<= authority: ns outside bailiwick\n");" as in update_cut function.
----
But I could not find such output in the log of y.qmail.jp query. What am I overlooking?
https://gitlab.nic.cz/knot/knot-resolver/-/issues/83
config fails with ```unexpected symbol near '#'``` if there is a second comme...
2017-08-22T13:33:40+02:00
Daniel Kahn Gillmor
config fails with ```unexpected symbol near '#'``` if there is a second comment line
```
0 dkg@tester:~/kresd$ cat config.good
# test
net.listen("XXX.YYY.WWW.ZZZ", 5300)
0 dkg@tester:~/kresd$ /usr/sbin/kresd -c config.good
[system] interactive mode
>
```
but:
```
0 dkg@tester:~/kresd$ cat config.bad
# te...
```
0 dkg@tester:~/kresd$ cat config.good
# test
net.listen("XXX.YYY.WWW.ZZZ", 5300)
0 dkg@tester:~/kresd$ /usr/sbin/kresd -c config.good
[system] interactive mode
>
```
but:
```
0 dkg@tester:~/kresd$ cat config.bad
# test
# test2
net.listen("XXX.YYY.WWW.ZZZ", 5300)
0 dkg@tester:~/kresd$ /usr/sbin/kresd -c config.bad
config.bad:2: unexpected symbol near '#'
[system] worker failed: Success
1 dkg@tester:~/kresd$
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/61
x
2017-08-22T13:33:40+02:00
Toshinori Maeno
x
https://gitlab.nic.cz/knot/knot-resolver/-/issues/82
trust_anchors.config("/path/foo") requires write access to /path but "kresd -...
2017-08-22T13:33:40+02:00
Daniel Kahn Gillmor
trust_anchors.config("/path/foo") requires write access to /path but "kresd -k/path/foo" does not
```
user@host$ /usr/sbin/kresd -a '::1#5353'
[system] interactive mode
> trust_anchors.config("/usr/share/dns/root.key")
/usr/lib/knot-resolver/trust_anchors.lua:224: /usr/share/dns/root.key.lock: Permission denied
>
```
but:
```...
```
user@host$ /usr/sbin/kresd -a '::1#5353'
[system] interactive mode
> trust_anchors.config("/usr/share/dns/root.key")
/usr/lib/knot-resolver/trust_anchors.lua:224: /usr/share/dns/root.key.lock: Permission denied
>
```
but:
```
user@host$ /usr/sbin/kresd -a '::1#5353' --keyfile=/usr/share/dns/root.key
[system] interactive mode
>
```
i don't see in the documentation any way to get the equivalent of --keyfile from a configuration snippet.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/60
Knot Resolver : TXID reuse; suspected
2017-08-22T13:33:40+02:00
Toshinori Maeno
Knot Resolver : TXID reuse; suspected
I found these queris in my dnscache log, related with y.qmail.jp testing. I suspect kresd reuse TXID in some rare cases. (I have other examples.)
What do you think?
---
2016-04-14 13:23:46.066838500 ac382656:bf24:13ec + 0001 y.qmail....
I found these queris in my dnscache log, related with y.qmail.jp testing. I suspect kresd reuse TXID in some rare cases. (I have other examples.)
What do you think?
---
2016-04-14 13:23:46.066838500 ac382656:bf24:13ec + 0001 y.qmail.jp
2016-04-14 13:23:51.186525500 ac382656:4741:13ec + 0001 y.qmail.jp
2016-04-14 13:23:56.094262500 ac382656:be0a:13ec + 0001 y.qmail.jp
----
2016-04-15 14:18:08.319191500 d0360592:d682:0893 + 0001 Y.QmAIL.JP
2016-04-15 14:18:08.612258500 d0360592:b615:0893 + 0001 Y.QmAIL.JP
2016-04-15 14:18:08.992343500 d0360592:ed30:0893 + 0001 Y.QmAIL.JP
https://gitlab.nic.cz/knot/knot-resolver/-/issues/81
about changelog 1.1.0
2017-08-22T13:33:40+02:00
Horigome Yoshihito
about changelog 1.1.0
Hi,
Release notes for the following site has not been updated 1.1.0 is delivered in the Ubuntu repositories, so I don't know which.
https://www.not-resolver.cz
Updates do not update if possible?
My best regards.
Hi,
Release notes for the following site has not been updated 1.1.0 is delivered in the Ubuntu repositories, so I don't know which.
https://www.not-resolver.cz
Updates do not update if possible?
My best regards.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/59
failing to resolve tools.ietf.org due bogus proof of DS non-existence (probab...
2017-08-22T13:33:40+02:00
Ondřej Surý
failing to resolve tools.ietf.org due bogus proof of DS non-existence (probably only when cached)
This is current master:
```
Apr 15 10:52:21 kage kresd[10286]: [resl] => querying: '65.22.6.79' score: 10 zone cut: 'ietf.org.' m12n: 'tOols.ietf.oRG.' type: 'AAAA'
Apr 15 10:52:21 kage kresd[10286]: [iter] <= referral response,...
This is current master:
```
Apr 15 10:52:21 kage kresd[10286]: [resl] => querying: '65.22.6.79' score: 10 zone cut: 'ietf.org.' m12n: 'tOols.ietf.oRG.' type: 'AAAA'
Apr 15 10:52:21 kage kresd[10286]: [iter] <= referral response, follow
Apr 15 10:52:21 kage kresd[10286]: [vldr] <= bogus proof of DS non-existence
Apr 15 10:52:21 kage kresd[10286]: [resl] finished: 8, queries: 0, mempool: 32800 B
```
Responding from clean cache is ok:
```
$ rm *.mdb; ./daemon/kresd -a 127.0.0.1\#5353 -f 1 -v .
[plan] plan 'tools.ietf.org.' type 'AAAA'
[resl] => using root hints
[resl] => querying: '2001:dc3::500' score: 10 zone cut: '.' m12n: 'ORg.' type: 'NS'
[resl] optional: '202.12.27.33' score: 10 zone cut: '.' m12n: 'ORg.' type: 'NS'
[resl] optional: '2001:500:3::b00' score: 10 zone cut: '.' m12n: 'ORg.' type: 'NS'
[resl] optional: '199.7.83.42' score: 10 zone cut: '.' m12n: 'ORg.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '202.12.27.33' rtt: 329 ms
[resl] => querying: '2001:500:f::1' score: 10 zone cut: 'org.' m12n: 'IeTf.ORg.' type: 'NS'
[resl] optional: '199.19.57.1' score: 10 zone cut: 'org.' m12n: 'IeTf.ORg.' type: 'NS'
[resl] optional: '2001:500:b::1' score: 10 zone cut: 'org.' m12n: 'IeTf.ORg.' type: 'NS'
[resl] optional: '199.19.53.1' score: 10 zone cut: 'org.' m12n: 'IeTf.ORg.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '2001:500:f::1' rtt: 165 ms
[plan] plan 'ns1.yyz1.afilias-nst.info.' type 'AAAA'
[resl] => using root hints
[resl] => querying: '2001:dc3::500' score: 10 zone cut: '.' m12n: 'INfo.' type: 'NS'
[resl] optional: '202.12.27.33' score: 10 zone cut: '.' m12n: 'INfo.' type: 'NS'
[resl] optional: '2001:500:3::b00' score: 10 zone cut: '.' m12n: 'INfo.' type: 'NS'
[resl] optional: '199.7.83.42' score: 10 zone cut: '.' m12n: 'INfo.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '202.12.27.33' rtt: 331 ms
[resl] => querying: '2001:500:1c::1' score: 10 zone cut: 'info.' m12n: 'AFILIaS-NsT.INfo.' type: 'NS'
[resl] optional: '199.254.50.1' score: 10 zone cut: 'info.' m12n: 'AFILIaS-NsT.INfo.' type: 'NS'
[resl] optional: '2001:500:1b::1' score: 10 zone cut: 'info.' m12n: 'AFILIaS-NsT.INfo.' type: 'NS'
[resl] optional: '199.254.49.1' score: 10 zone cut: 'info.' m12n: 'AFILIaS-NsT.INfo.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '2001:500:1c::1' rtt: 177 ms
[resl] => querying: '2a01:8840:9::1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'YYz1.afiLias-nsT.INfO.' type: 'NS'
[resl] optional: '65.22.9.1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'YYz1.afiLias-nsT.INfO.' type: 'NS'
[resl] optional: '2a01:8840:8::1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'YYz1.afiLias-nsT.INfO.' type: 'NS'
[resl] optional: '65.22.8.1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'YYz1.afiLias-nsT.INfO.' type: 'NS'
[iter] <= rcode: NOERROR
[iter] <= found cut, retrying with non-minimized name
[resl] <= server: '2a01:8840:9::1' rtt: 169 ms
[resl] => querying: '65.22.9.1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'nS1.yYz1.afIlIas-nSt.InFo.' type: 'AAAA'
[resl] optional: '2a01:8840:8::1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'nS1.yYz1.afIlIas-nSt.InFo.' type: 'AAAA'
[resl] optional: '65.22.8.1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'nS1.yYz1.afIlIas-nSt.InFo.' type: 'AAAA'
[resl] optional: '2a01:8840:7::1' score: 10 zone cut: 'afilias-nst.info.' m12n: 'nS1.yYz1.afIlIas-nSt.InFo.' type: 'AAAA'
[iter] <= referral response, follow
[resl] <= server: '65.22.9.1' rtt: 164 ms
[resl] => querying: '2a01:8840:8::1' score: 10 zone cut: 'yyz1.afilias-nst.info.' m12n: 'ns1.yYz1.afiLias-NSt.inFO.' type: 'AAAA'
[resl] optional: '65.22.8.1' score: 10 zone cut: 'yyz1.afilias-nst.info.' m12n: 'ns1.yYz1.afiLias-NSt.inFO.' type: 'AAAA'
[resl] optional: '2a01:8840:7::1' score: 10 zone cut: 'yyz1.afilias-nst.info.' m12n: 'ns1.yYz1.afiLias-NSt.inFO.' type: 'AAAA'
[resl] optional: '65.22.7.1' score: 10 zone cut: 'yyz1.afilias-nst.info.' m12n: 'ns1.yYz1.afiLias-NSt.inFO.' type: 'AAAA'
[iter] <= rcode: NOERROR
[resl] <= server: '2a01:8840:8::1' rtt: 18 ms
[resl] => querying: '2a01:8840:9::1' score: 169 zone cut: 'ietf.org.' m12n: 'tOoLS.Ietf.oRg.' type: 'AAAA'
[iter] <= referral response, follow
[resl] <= server: '2a01:8840:9::1' rtt: 164 ms
[plan] plan 'zinfandel.levkowetz.com.' type 'AAAA'
[resl] => using root hints
[resl] => querying: '2001:dc3::500' score: 10 zone cut: '.' m12n: 'Com.' type: 'NS'
[resl] optional: '202.12.27.33' score: 10 zone cut: '.' m12n: 'Com.' type: 'NS'
[resl] optional: '2001:500:3::b00' score: 10 zone cut: '.' m12n: 'Com.' type: 'NS'
[resl] optional: '199.7.83.42' score: 10 zone cut: '.' m12n: 'Com.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '202.12.27.33' rtt: 329 ms
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'leVKowEtZ.coM.' type: 'NS'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'leVKowEtZ.coM.' type: 'NS'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'leVKowEtZ.coM.' type: 'NS'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'leVKowEtZ.coM.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '192.55.83.30' rtt: 74 ms
[resl] => querying: '64.170.98.42' score: 10 zone cut: 'levkowetz.com.' m12n: 'ZinFAndel.LEVKowetz.COm.' type: 'AAAA'
[resl] optional: '64.170.98.142' score: 10 zone cut: 'levkowetz.com.' m12n: 'ZinFAndel.LEVKowetz.COm.' type: 'AAAA'
[resl] optional: '77.72.230.31' score: 10 zone cut: 'levkowetz.com.' m12n: 'ZinFAndel.LEVKowetz.COm.' type: 'AAAA'
[resl] optional: '209.208.19.222' score: 10 zone cut: 'levkowetz.com.' m12n: 'ZinFAndel.LEVKowetz.COm.' type: 'AAAA'
[iter] <= rcode: NOERROR
[resl] <= server: '64.170.98.42' rtt: 187 ms
[resl] => querying: '2001:1890:123a::1:2a' score: 10 zone cut: 'tools.ietf.org.' m12n: 'tOOLs.iETF.oRG.' type: 'AAAA'
[iter] <= rcode: NOERROR
[resl] <= server: '2001:1890:123a::1:2a' rtt: 180 ms
[resl] finished: 4, queries: 3, mempool: 49200 B
[plan] plan 'tools.ietf.org.' type 'A'
[resl] => querying: '209.208.19.222' score: 10 zone cut: 'tools.ietf.org.' m12n: 'TooLS.iEtf.org.' type: 'A'
[iter] <= rcode: NOERROR
[resl] <= server: '209.208.19.222' rtt: 127 ms
[resl] finished: 4, queries: 1, mempool: 49200 B
[plan] plan 'tools.ietf.org.' type 'AAAA'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[resl] finished: 4, queries: 1, mempool: 49200 B
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/80
Listen on all addresses belonging to an interface... error
2022-01-31T17:33:42+01:00
Horigome Yoshihito
Listen on all addresses belonging to an interface... error
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
$ uname -rm
3.14.73-odroidc2 aarc...
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
$ uname -rm
3.14.73-odroidc2 aarch64
```
conf
```
net = { net.eth0 }
```
interactive mode
```
[system] interactive mode
> net.eth0
[addr] => {
[1] => 192.168.122.223
[2] => 240b:11:8500:3900:10::223
[3] => fe80::21e:6ff:fe33:4c50
}
[mac] => 00:1e:06:33:4c:50
```
issue
```
$ sudo /usr/sbin/kresd -v -c /etc/knot-resolver/kresd.conf -f 1 /run/kresd
error: Invalid argument
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/57
Duplicities when resolving gitlab.labs.nic.cz
2017-08-22T13:33:40+02:00
Ondřej Surý
Duplicities when resolving gitlab.labs.nic.cz
```
$ dig +rd IN A gitlab.labs.nic.cz @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 40903
;; Flags: qr rd ra; QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; gitlab.labs.nic.cz. IN A
...
```
$ dig +rd IN A gitlab.labs.nic.cz @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 40903
;; Flags: qr rd ra; QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; gitlab.labs.nic.cz. IN A
;; ANSWER SECTION:
gitlab.labs.nic.cz. 16 IN CNAME git.nic.cz.
git.nic.cz. 16 IN A 217.31.192.88
git.nic.cz. 16 IN A 217.31.192.88
;; Received 94 B
;; Time 2016-04-15 09:10:09 CEST
;; From 127.0.0.1@53(UDP) in 0.2 ms
```
+ something strange happens when records expire from cache:
```
$ dig +rd IN A gitlab.labs.nic.cz @127.0.0.1
;; WARNING: truncated reply from 127.0.0.1@53(UDP), retrying over TCP
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 15051
;; Flags: qr rd ra; QUERY: 1; ANSWER: 3; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; gitlab.labs.nic.cz. IN A
;; ANSWER SECTION:
gitlab.labs.nic.cz. 30 IN CNAME git.nic.cz.
git.nic.cz. 30 IN A 217.31.192.88
git.nic.cz. 30 IN A 217.31.192.88
;; Received 94 B
;; Time 2016-04-15 09:10:40 CEST
;; From 127.0.0.1@53(TCP) in 0.2 ms
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/79
You can specify the port in the query policies FORWARD do you want
2017-08-22T13:33:40+02:00
Horigome Yoshihito
You can specify the port in the query policies FORWARD do you want
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
$ uname -rm
3.14.73-...
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
$ uname -rm
3.14.73-odroidc2 aarch64
```
issue
Living in FORWARD but no IP address is the authoritative Server launches in the 10053, so specify.
My best regards.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/78
lua added a policy error occurs
2017-08-22T13:33:40+02:00
Horigome Yoshihito
lua added a policy error occurs
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
3.14.73-odroidc2 aa...
version
```
Knot DNS Resolver, version 1.1.0
```
OS
```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04 LTS
Release: 16.04
Codename: xenial
3.14.73-odroidc2 aarch64
```
issue
```
$ sudo /usr/sbin/kresd -v -c /etc/knot-resolver/kresd.conf -f 1 /run/kresd
[hint] reading '/etc/hosts'
[hint] loaded 10 hints
[ ta ] key: 19036 state: Valid
/usr/lib/knot-resolver/policy.lua:168: attempt to index local 'policy' (a function value)
```
```
-- load some modules
modules = {
'hints > iterate', -- Hints AFTER iterate
'policy > hints', -- Policy AFTER hints
'pktcache < rrcache' -- View BEFORE rrcache
}
modules.list()
policy.add(policy.suffix(policy.FORWARD('192.168.122.223'), {'\7kometch\5local'}))
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/55
Crash after torturing kresd with dnsperf
2017-08-22T13:33:40+02:00
Ondřej Surý
Crash after torturing kresd with dnsperf
```
(gdb) run -v --forks=1 --addr=127.0.0.1#53 /var/lib/kresd
Starting program: /usr/sbin/kresd -v --forks=1 --addr=127.0.0.1#53 /var/lib/kresd
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_6...
```
(gdb) run -v --forks=1 --addr=127.0.0.1#53 /var/lib/kresd
Starting program: /usr/sbin/kresd -v --forks=1 --addr=127.0.0.1#53 /var/lib/kresd
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff3a01700 (LWP 23545)]
[New Thread 0x7ffff30a0700 (LWP 23546)]
[New Thread 0x7ffff285f700 (LWP 23547)]
[New Thread 0x7ffff185d700 (LWP 23549)]
[New Thread 0x7ffff205e700 (LWP 23548)]
[tinyweb] listening on 127.0.0.1:8080
[plan] plan 'finalfantasy.jp.' type 'AAAA'
[resl] => querying: '203.119.40.1' score: 10 zone cut: 'jp.' m12n: 'FiNaLfaNTAsy.jP.' type: 'AAAA'
[resl] optional: '2001:2f8:0:100::153' score: 10 zone cut: 'jp.' m12n: 'FiNaLfaNTAsy.jP.' type: 'AAAA'
[resl] optional: '150.100.6.8' score: 10 zone cut: 'jp.' m12n: 'FiNaLfaNTAsy.jP.' type: 'AAAA'
[resl] optional: '2001:200:c000::35' score: 10 zone cut: 'jp.' m12n: 'FiNaLfaNTAsy.jP.' type: 'AAAA'
[plan] plan 'motherfuckingwebsite.com.' type 'AAAA'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'moTHeRFuckIngWeBsITE.coM.' type: 'AAAA'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'moTHeRFuckIngWeBsITE.coM.' type: 'AAAA'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'moTHeRFuckIngWeBsITE.coM.' type: 'AAAA'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'moTHeRFuckIngWeBsITE.coM.' type: 'AAAA'
[plan] plan 'islamnor.com.' type 'A'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'iSLaMNOR.Com.' type: 'A'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'iSLaMNOR.Com.' type: 'A'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'iSLaMNOR.Com.' type: 'A'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'iSLaMNOR.Com.' type: 'A'
[plan] plan 'backtweets.com.' type 'A'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'baCKTWeets.cOm.' type: 'A'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'baCKTWeets.cOm.' type: 'A'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'baCKTWeets.cOm.' type: 'A'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'baCKTWeets.cOm.' type: 'A'
[plan] plan 'schoolclipart.biz.' type 'A'
[resl] => querying: '2001:503:e239::3:2' score: 10 zone cut: 'biz.' m12n: 'ScHoolCLIpArt.biZ.' type: 'A'
[resl] optional: '156.154.128.65' score: 10 zone cut: 'biz.' m12n: 'ScHoolCLIpArt.biZ.' type: 'A'
[resl] optional: '2001:500:3682::12' score: 10 zone cut: 'biz.' m12n: 'ScHoolCLIpArt.biZ.' type: 'A'
[resl] optional: '209.173.58.66' score: 10 zone cut: 'biz.' m12n: 'ScHoolCLIpArt.biZ.' type: 'A'
[plan] plan 'hagalil.com.' type 'MX'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'haGalil.COm.' type: 'MX'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'haGalil.COm.' type: 'MX'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'haGalil.COm.' type: 'MX'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'haGalil.COm.' type: 'MX'
[plan] plan 'st-fashiony.ru.' type 'MX'
[resl] => querying: '2001:678:14:0:193:232:156:17' score: 10 zone cut: 'ru.' m12n: 'sT-fAShioNY.RU.' type: 'MX'
[resl] optional: '193.232.156.17' score: 10 zone cut: 'ru.' m12n: 'sT-fAShioNY.RU.' type: 'MX'
[resl] optional: '2001:678:15:0:193:232:142:17' score: 10 zone cut: 'ru.' m12n: 'sT-fAShioNY.RU.' type: 'MX'
[resl] optional: '193.232.142.17' score: 10 zone cut: 'ru.' m12n: 'sT-fAShioNY.RU.' type: 'MX'
[plan] plan 'nohandsseo.com.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'ignegocios.com.br.' type 'A'
[resl] => querying: '200.219.159.10' score: 10 zone cut: 'com.br.' m12n: 'IgNegOCIoS.CoM.BR.' type: 'A'
[resl] optional: '2001:12f8:1::10' score: 10 zone cut: 'com.br.' m12n: 'IgNegOCIoS.CoM.BR.' type: 'A'
[resl] optional: '200.229.248.10' score: 10 zone cut: 'com.br.' m12n: 'IgNegOCIoS.CoM.BR.' type: 'A'
[resl] optional: '2001:12f8:4::10' score: 10 zone cut: 'com.br.' m12n: 'IgNegOCIoS.CoM.BR.' type: 'A'
[plan] plan 'dolina.su.' type 'A'
[resl] => querying: '2001:678:14:0:193:232:156:17' score: 10 zone cut: 'su.' m12n: 'DOliNA.sU.' type: 'A'
[resl] optional: '193.232.156.17' score: 10 zone cut: 'su.' m12n: 'DOliNA.sU.' type: 'A'
[resl] optional: '2001:678:15:0:193:232:142:17' score: 10 zone cut: 'su.' m12n: 'DOliNA.sU.' type: 'A'
[resl] optional: '193.232.142.17' score: 10 zone cut: 'su.' m12n: 'DOliNA.sU.' type: 'A'
[plan] plan 'newsarmenia.am.' type 'MX'
[resl] => querying: '2001:500:2e::1' score: 10 zone cut: 'am.' m12n: 'NEwsArmenIA.am.' type: 'MX'
[resl] optional: '192.5.4.1' score: 10 zone cut: 'am.' m12n: 'NEwsArmenIA.am.' type: 'MX'
[resl] optional: '2001:67c:21c:53::1' score: 10 zone cut: 'am.' m12n: 'NEwsArmenIA.am.' type: 'MX'
[resl] optional: '195.43.74.53' score: 10 zone cut: 'am.' m12n: 'NEwsArmenIA.am.' type: 'MX'
[plan] plan 'balticgruppen.se.' type 'MX'
[resl] => querying: '2001:500:2c::1' score: 10 zone cut: 'se.' m12n: 'BALTicGRuppeN.SE.' type: 'MX'
[resl] optional: '199.254.63.1' score: 10 zone cut: 'se.' m12n: 'BALTicGRuppeN.SE.' type: 'MX'
[resl] optional: '2001:67c:1010:5::53' score: 10 zone cut: 'se.' m12n: 'BALTicGRuppeN.SE.' type: 'MX'
[resl] optional: '194.146.106.22' score: 10 zone cut: 'se.' m12n: 'BALTicGRuppeN.SE.' type: 'MX'
[plan] plan 'rednecknewswire.com.' type 'AAAA'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'rednECKnEWsWIRE.COM.' type: 'AAAA'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'rednECKnEWsWIRE.COM.' type: 'AAAA'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'rednECKnEWsWIRE.COM.' type: 'AAAA'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'rednECKnEWsWIRE.COM.' type: 'AAAA'
[plan] plan 'freeyounggayporn.com.' type 'A'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'frEEYoUnggAyPORN.coM.' type: 'A'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'frEEYoUnggAyPORN.coM.' type: 'A'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'frEEYoUnggAyPORN.coM.' type: 'A'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'frEEYoUnggAyPORN.coM.' type: 'A'
[plan] plan 'tourexpress.com.' type 'A'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'tOUrEXPresS.cOm.' type: 'A'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'tOUrEXPresS.cOm.' type: 'A'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'tOUrEXPresS.cOm.' type: 'A'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'tOUrEXPresS.cOm.' type: 'A'
[plan] plan 'fatehgar.org.' type 'A'
[resl] => querying: '2001:500:f::1' score: 10 zone cut: 'org.' m12n: 'fAteHGaR.org.' type: 'A'
[resl] optional: '199.19.57.1' score: 10 zone cut: 'org.' m12n: 'fAteHGaR.org.' type: 'A'
[resl] optional: '2001:500:b::1' score: 10 zone cut: 'org.' m12n: 'fAteHGaR.org.' type: 'A'
[resl] optional: '199.19.53.1' score: 10 zone cut: 'org.' m12n: 'fAteHGaR.org.' type: 'A'
[plan] plan 'referent.ru.' type 'A'
[resl] => querying: '2001:678:14:0:193:232:156:17' score: 10 zone cut: 'ru.' m12n: 'RefErent.rU.' type: 'A'
[resl] optional: '193.232.156.17' score: 10 zone cut: 'ru.' m12n: 'RefErent.rU.' type: 'A'
[resl] optional: '2001:678:15:0:193:232:142:17' score: 10 zone cut: 'ru.' m12n: 'RefErent.rU.' type: 'A'
[resl] optional: '193.232.142.17' score: 10 zone cut: 'ru.' m12n: 'RefErent.rU.' type: 'A'
[plan] plan 'azimage.com.' type 'AAAA'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'AzImAge.COm.' type: 'AAAA'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'AzImAge.COm.' type: 'AAAA'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'AzImAge.COm.' type: 'AAAA'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'AzImAge.COm.' type: 'AAAA'
[plan] plan 'tradetoolsfx.com.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'amway.com.' type 'AAAA'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'aMwAy.cOm.' type: 'AAAA'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'aMwAy.cOm.' type: 'AAAA'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'aMwAy.cOm.' type: 'AAAA'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'aMwAy.cOm.' type: 'AAAA'
[plan] plan 'tellows.co.za.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'trendbende.com.' type 'MX'
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'TreNDBENde.COM.' type: 'MX'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'TreNDBENde.COM.' type: 'MX'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'TreNDBENde.COM.' type: 'MX'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'TreNDBENde.COM.' type: 'MX'
[plan] plan 'futuri.pl.' type 'AAAA'
[resl] => querying: '156.154.100.15' score: 10 zone cut: 'pl.' m12n: 'fuTUrI.pL.' type: 'AAAA'
[resl] optional: '2001:678:4::2' score: 10 zone cut: 'pl.' m12n: 'fuTUrI.pL.' type: 'AAAA'
[resl] optional: '194.0.1.2' score: 10 zone cut: 'pl.' m12n: 'fuTUrI.pL.' type: 'AAAA'
[resl] optional: '2001:6d8:1001:1::252' score: 10 zone cut: 'pl.' m12n: 'fuTUrI.pL.' type: 'AAAA'
[iter] <= referral response, follow
[resl] <= server: '156.154.100.15' rtt: 23 ms
[plan] plan 'ns2.megapliki.info.' type 'AAAA'
[resl] => querying: '2001:500:1c::1' score: 10 zone cut: 'info.' m12n: 'MEGaPlikI.Info.' type: 'NS'
[resl] optional: '199.254.50.1' score: 10 zone cut: 'info.' m12n: 'MEGaPlikI.Info.' type: 'NS'
[resl] optional: '2001:500:1b::1' score: 10 zone cut: 'info.' m12n: 'MEGaPlikI.Info.' type: 'NS'
[resl] optional: '199.254.49.1' score: 10 zone cut: 'info.' m12n: 'MEGaPlikI.Info.' type: 'NS'
[iter] <= referral response, follow
*** Error in `/usr/sbin/kresd': double free or corruption (!prev): 0x00005555557be060 ***
Program received signal SIGABRT, Aborted.
0x00007ffff6497067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
```
And backtrace:
```
#0 0x00007ffff6497067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
resultvar = 0
pid = 23541
selftid = 23541
#1 0x00007ffff6498448 in __GI_abort () at abort.c:89
save_stage = 2
act = {__sigaction_handler = {sa_handler = 0x14, sa_sigaction = 0x14}, sa_mask = {__val = {140737488332736, 140737488332448, 140737319858966, 140736993066468, 140737319856847, 20, 140737488332784, 140737488332496,
93824995123472, 143168134112, 140737488332740, 23, 140736993066476, 140736969179136, 14580838424428381440, 140737488332816}}, sa_flags = 1433963704, sa_restorer = 0x10000}
sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007ffff64d51b4 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7ffff65ca820 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
ap = {{gp_offset = 40, fp_offset = 2003267177, overflow_arg_area = 0x7fffffffa990, reg_save_area = 0x7fffffffa920}}
fd = 21
on_2 = <optimized out>
list = <optimized out>
nlist = <optimized out>
cp = <optimized out>
written = <optimized out>
#3 0x00007ffff64da98e in malloc_printerr (action=1, str=0x7ffff65ca928 "double free or corruption (!prev)", ptr=<optimized out>) at malloc.c:4996
buf = "00005555557be060"
cp = <optimized out>
#4 0x00007ffff64db696 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3840
size = <optimized out>
fb = <optimized out>
nextchunk = <optimized out>
nextsize = <optimized out>
nextinuse = <optimized out>
prevsize = <optimized out>
bck = <optimized out>
fwd = <optimized out>
errstr = <optimized out>
locked = <optimized out>
__func__ = "_int_free"
#5 0x00007ffff7b8a92b in rrcache_stash (ctx=<optimized out>, pkt=<optimized out>) at lib/layer/rrcache.c:339
cache = 0x7fffffffe3e8
txn = {t = {db = 0x555555788cb8, txn = 0x5555557be060}, owner = 0x7fffffffe3e8}
req = 0x5555557c2ab0
qry = <optimized out>
qtype = <optimized out>
is_eligible = <optimized out>
stash = {root = 0x5555557c5c59, malloc = 0x7ffff7b8a220 <mm_alloc>, free = 0x7ffff7b8a1e0 <mm_free>, baton = 0x5555557c2b50}
ret = <optimized out>
is_auth = <optimized out>
#6 0x00007ffff7b90794 in kr_resolve_consume (request=request@entry=0x5555557c2ab0, src=src@entry=0x7fffffffacf0, packet=packet@entry=0x55555578a1c0) at lib/resolve.c:449
layer = {mm = 0x0, state = 4, data = 0x5555557c2ab0, api = 0x7ffff7d9a240 <_layer.6233>}
mod = <optimized out>
i = 2
qname_raw = <optimized out>
rplan = 0x5555557c2b10
ctx = 0x7fffffffe350
qry = 0x5555557c4f00
tried_tcp = false
#7 0x000055555555e0cd in qr_task_step (task=0x5555557c2ab0, packet_source=packet_source@entry=0x7fffffffacf0, packet=0x55555578a1c0) at daemon/worker.c:603
sock_type = -1
state = <optimized out>
choice = <optimized out>
ret = <optimized out>
#8 0x000055555555e982 in worker_exec (worker=worker@entry=0x7ffff7e5b010, handle=handle@entry=0x5555557c6a60, query=<optimized out>, addr=addr@entry=0x7fffffffacf0) at daemon/worker.c:716
task = <optimized out>
is_master_socket = <optimized out>
#9 0x000055555555a5e3 in udp_recv (handle=0x5555557c6a60, nread=<optimized out>, buf=<optimized out>, addr=0x7fffffffacf0, flags=<optimized out>) at daemon/io.c:89
loop = <optimized out>
worker = 0x7ffff7e5b010
query = <optimized out>
#10 0x00007ffff72dac19 in uv__udp_recvmsg (handle=0x5555557c6a60) at src/unix/udp.c:201
addr = <optimized out>
peer = {ss_family = 2, __ss_align = 0,
__ss_padding = "\020\256\377\377\377\177\000\000W\374\203\366\377\177\000\000\300\256\003@\373\377\377\377\200\351\206\366\377\177\000\000\020\256\377\377\377\177\000\000\315\016\204\366\377\177\000\000\300\273\377\377\377\177\000\000 \264\377\377\377\177\000\000$\257\377\377\377\177\000\000\220\255\377\377\377\177\000\000\001\000\000\000\000\000\000\000\340\255\377\377\377\177\000\000\200yN\367\377\177\000\000\v\000\000\000\000\000\000"}
buf = {base = 0x7ffff7e5b028 "\336u\200", len = 65536}
count = 32
h = {msg_name = 0x7fffffffacf0, msg_namelen = 16, msg_iov = 0x7fffffffaca0, msg_iovlen = 1, msg_control = 0x0, msg_controllen = 0, msg_flags = 0}
nread = <optimized out>
#11 uv__udp_io (loop=<optimized out>, w=0x5555557c6ae0, revents=1) at src/unix/udp.c:139
handle = 0x5555557c6a60
#12 0x00007ffff72dc75a in uv__io_poll (loop=loop@entry=0x7ffff74e7980 <default_loop_struct>, timeout=270) at src/unix/linux-core.c:346
no_epoll_pwait = 0
no_epoll_wait = 0
events = {{events = 1, data = 18446744073709551615}, {events = 32767, data = 140737488335904}, {events = 4135922194, data = 18446655150706687999}, {events = 32767, data = 140737488334528}, {events = 1073988648,
data = 18446656318937759744}, {events = 32767, data = 140737488337856}, {events = 4135996959, data = 4612746119435288575}, {events = 0, data = 18446744069414584323}, {events = 4294967295, data = 17763655642976911359}, {
events = 32767, data = 140737488337856}, {events = 4135844594, data = 824633753599}, {events = 0, data = 140737329232626}, {events = 384, data = 30064771072}, {events = 0, data = 7}, {events = 1073742712,
data = 18446669100760432640}, {events = 32767, data = 140737329232626}, {events = 192, data = 12884901888}, {events = 0, data = 3}, {events = 1073742712, data = 4612777524236124160}, {events = 0, data = 1073995864}, {
events = 1073996032, data = 17763318805871722496}, {events = 32767, data = 18446744053308472112}, {events = 1073742712, data = 18446669100760432640}, {events = 32767, data = 140737488337856}, {events = 4294949884,
data = 17764142516174618623}, {events = 32767, data = 140737488335008}, {events = 4135849677, data = 18446669032040988671}, {events = 32767, data = 140737488337872}, {events = 10, data = 18446660648264794112}, {
events = 32767, data = 140737488335300}, {events = 4294947872, data = 18446669032040988671}, {events = 32767, data = 140737329240366}, {events = 1073959296, data = 18446660652559761403}, {events = 32767,
data = 140737488335904}, {events = 4135922194, data = 18446656799974129663}, {events = 32767, data = 140737488334912}, {events = 1073959296, data = 18446658036924678144}, {events = 32767, data = 140737488337856}, {
events = 4135996959, data = 4612620053555216383}, {events = 0, data = 18446744069414584323}, {events = 4294967295, data = 17763970910756306943}, {events = 32767, data = 140737488337856}, {events = 4294947264,
data = 18446660648264826879}, {events = 32767, data = 140737329397766}, {events = 2, data = 18446658071284416512}, {events = 32767, data = 140737488335300}, {events = 1073742712, data = 18446669100760432640}, {
events = 32767, data = 140737488337856}, {events = 4294949884, data = 17764142516174618623}, {events = 32767, data = 140737488335280}, {events = 4294947872, data = 73014476799}, {events = 0, data = 140737488335296}, {
events = 2, data = 17763644922738507776}, {events = 32767, data = 140737488335296}, {events = 4294947872, data = 8589967359}, {events = 0, data = 140737488335904}, {events = 18, data = 18446658861558398976}, {events = 32767,
data = 16974397}, {events = 4294949824, data = 18446669032040988671}, {events = 32767, data = 140737329308205}, {events = 4294949824, data = 18446660648264826879}, {events = 32767, data = 140737488335296}, {
events = 4294947456, data = 18446669032040988671}, {events = 32767, data = 9}, {events = 4294949824, data = 17763316722812616703}, {events = 32767, data = 1536}, {events = 31, data = 133143986176}, {events = 0,
data = 1073742712}, {events = 1073990240, data = 4612719662436712448}, {events = 0, data = 1073990984}, {events = 4135844951, data = 4611751095771889663}, {events = 4294967291, data = 1073742712}, {events = 1073990240,
data = 17763321116564127744}, {events = 32767, data = 24}, {events = 1, data = 144398046032035840}, {events = 0, data = 4612752961318140864}, {events = 4294947520, data = 18446659754911629311}, {events = 32767, data = 32}, {
events = 1073982488, data = 0}, {events = 0, data = 0}, {events = 32, data = 17763324586897702912}, {events = 32767, data = 140737488335552}, {events = 4136009277, data = 18446659754911596545}, {events = 32767,
data = 1073742712}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0, data = 0}, {events = 0,
data = 0}, {events = 0, data = 140737488337856}, {events = 1073742712, data = 18446659754911596544}, {events = 32767, data = 140737329232498}, {events = 4294949884, data = 4611689832358379519}, {events = 0,
data = 1073752432}, {events = 4294949824, data = 18446669289739026431}, {events = 32767, data = 140737329424768}, {events = 4294949824, data = 17763318805871755263}, {events = 32767, data = 18446744053308467568}, {
events = 4294949824, data = 18446669289739026431}, {events = 32767, data = 140737329232983}, {events = 1073752432, data = 17764142520469553147}, {events = 32767, data = 140737488337856}, {events = 4135849677,
data = 18446669032040988671}, {events = 32767, data = 140737488337872}, {events = 32, data = 17763968316596027392}, {events = 32767, data = 1310771}, {events = 4294949824, data = 18446669032040988671}, {events = 32767,
data = 140737488337856}, {events = 4294948896, data = 4612737976177295359}, {events = 0, data = 140737488336816}, {events = 4294947872, data = 18446669032040988671}, {events = 32767, data = 140737329384813}, {events = 1,
data = 17764000447246368768}, {events = 32767, data = 0}, {events = 0, data = 18446660648264794112}, {events = 32767, data = 691489734657}, {events = 0, data = 21474836480}, {events = 4096, data = 1073995864}, {
events = 4294949824, data = 4611689832358379519}, {events = 0, data = 0}, {events = 4294948896, data = 111669182463}, {events = 19, data = 4294967295}, {events = 0, data = 25769803776}, {events = 161, data = 1073986928}, {
events = 106, data = 72903255918641157}, {events = 393221, data = 2814788422336519}, {events = 786443, data = 4503664052797453}, {events = 1179665, data = 1073983064}, {events = 4294948112, data = 17763317272568430591}, {
events = 32767, data = 140737488337916}, {events = 1073742712, data = 4611797859375775744}, {events = 0, data = 140737329232626}, {events = 768, data = 64424509440}, {events = 0, data = 15}, {events = 1073742712,
data = 4612724301001392128}, {events = 0, data = 1073982488}, {events = 1073983928, data = 17763318805871722496}, {events = 32767, data = 18446744053308674432}, {events = 1073742712, data = 4612724301001392128}, {events = 0,
data = 140737329233521}, {events = 4294949824, data = 17762738998171697151}, {events = 32767, data = 140737488337856}, {events = 10, data = 42949672960}, {events = 0, data = 140737329074904}, {events = 16,
data = 4612719662436712448}, {events = 0, data = 140737488337856}, {events = 4135919573, data = 68719509503}, {events = 0, data = 140737488337856}, {events = 4294949840, data = 17763959722366500863}, {events = 32767,
data = 140737488336544}, {events = 1073742712, data = 0}, {events = 0, data = 140737488337856}, {events = 4294948784, data = 18446665046311337983}, {events = 32767, data = 140737488337856}, {events = 1073745824,
data = 18446669032040955904}, {events = 32767, data = 140737329384813}, {events = 1073960224, data = 18446669032040955904}, {events = 32767, data = 140737488336816}, {events = 4136009616, data = 32767}, {events = 0,
data = 140737488336824}, {events = 4294948788, data = 4611689832358379519}, {events = 0, data = 1073756976}, {events = 4294949824, data = 18446669289739026431}, {events = 32767, data = 140737329424768}, {events = 4294949824,
data = 18446669032040988671}, {events = 32767, data = 140737488336816}, {events = 1, data = 18446669032040955904}, {events = 32767, data = 1073745824}, {events = 4294949824, data = 17764006597639569407}, {events = 32767,
data = 140737488337872}, {events = 4294949824, data = 32767}, {events = 32767, data = 140737329424768}, {events = 4294949824, data = 17763339103887196159}, {events = 32767, data = 140737488337856}, {events = 4294948896,
data = 107374215167}, {events = 0, data = 1}, {events = 131148, data = 18446669032040955904}, {events = 32767, data = 140737488337856}, {events = 4135920173, data = 17764105029700059135}, {events = 32767,
data = 140737488336928}, {events = 131148, data = 4294967296}, {events = 0, data = 140737329416040}, {events = 1073745824, data = 4611690107236253696}, {events = 0, data = 342}, {events = 1073742712, data = 68719476736}, {
events = 0, data = 1073993240}, {events = 4135796938, data = 1468878847999}, {events = 0, data = 9}, {events = 4294948896, data = 17763691540313571327}, {events = 32767, data = 140737488346336}, {events = 4294949884,
data = 4611689832358379519}, {events = 0, data = 256}, {events = 256, data = 1206885810176}, {events = 0, data = 0}, {events = 256, data = 18446744069414584320}, {events = 0, data = 140733193388204}...}
pe = 0x7fffffffae70
e = {events = 1, data = 39}
real_timeout = 270
q = <optimized out>
w = <optimized out>
sigset = {__val = {1073988648, 140737488337856, 140737488337916, 140737329424768, 140737488334624, 140737329232983, 18446744053308703784, 140737329424768, 140737488334624, 140737329237709, 140737488337856, 140737488335904,
140737488334900, 140737488335904, 140737488337856, 140737329240366}}
base = 6236040573
is_sigmasked = 0
nevents = 0
count = 48
nfds = 1
fd = <optimized out>
op = <optimized out>
i = <optimized out>
__PRETTY_FUNCTION__ = "uv__io_poll"
#13 0x00007ffff72ce7f8 in uv_run (loop=0x7ffff74e7980 <default_loop_struct>, mode=UV_RUN_DEFAULT) at src/unix/core.c:351
timeout = <optimized out>
r = 1
#14 0x000055555555a3e7 in run_worker (engine=0x7fffffffe350, loop=0x7ffff74e7980 <default_loop_struct>) at daemon/main.c:225
sock_file = 0x55555576ccb0 "tty/23541"
pipe = {data = 0x7fffffffe350, loop = 0x7ffff74e7980 <default_loop_struct>, type = UV_NAMED_PIPE, close_cb = 0x0, handle_queue = {0x5555557be930, 0x5555557bc1b0}, u = {fd = -7584, reserved = {0x7fffffffe260, 0x360ae0,
0x7fffffffe250, 0x7fffffffe180}}, next_closing = 0x0, flags = 24576, write_queue_size = 0, alloc_cb = 0x0, read_cb = 0x0, connect_req = 0x0, shutdown_req = 0x0, io_watcher = {cb = 0x7ffff72d8010 <uv__server_io>,
pending_queue = {0x7fffffffe190, 0x7fffffffe190}, watcher_queue = {0x7fffffffe1a0, 0x7fffffffe1a0}, pevents = 1, events = 1, fd = 19}, write_queue = {0x7fffffffe1c0, 0x7fffffffe1c0}, write_completed_queue = {0x7fffffffe1d0,
0x7fffffffe1d0}, connection_cb = 0x5555555618d0 <tty_accept>, delayed_error = 0, accepted_fd = -1, queued_fds = 0x0, ipc = 0, pipe_fname = 0x55555576d8e0 "tty/23541"}
#15 main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:430
forks = 0
addr_set = {at = 0x555555788470, len = 1, cap = <optimized out>}
fd_set = {at = 0x0, len = <optimized out>, cap = <optimized out>}
keyfile = 0x0
config = 0x0
keyfile_buf = <optimized out>
c = <optimized out>
li = 0
ret = 0
opts = {{name = 0x555555565d32 "addr", has_arg = 1, flag = 0x0, val = 97}, {name = 0x555555566190 "fd", has_arg = 1, flag = 0x0, val = 83}, {name = 0x55555556428e "config", has_arg = 1, flag = 0x0, val = 99}, {
name = 0x555555566193 "keyfile", has_arg = 1, flag = 0x0, val = 107}, {name = 0x55555556619b "forks", has_arg = 1, flag = 0x0, val = 102}, {name = 0x5555555642d0 "verbose", has_arg = 0, flag = 0x0, val = 118}, {
name = 0x5555555661a1 "quiet", has_arg = 0, flag = 0x0, val = 113}, {name = 0x5555555661a7 "version", has_arg = 0, flag = 0x0, val = 86}, {name = 0x5555555642bd "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x0,
has_arg = 0, flag = 0x0, val = 0}}
__PRETTY_FUNCTION__ = "main"
fork_count = <optimized out>
loop = 0x7ffff74e7980 <default_loop_struct>
sigint = {data = 0x7fffffffe368, loop = 0x7ffff74e7980 <default_loop_struct>, type = UV_SIGNAL, close_cb = 0x7ffff7de4c1c <check_match+300>, handle_queue = {0x7fffffffe080, 0x7ffff74e7a50 <default_loop_struct+208>}, u = {
fd = 11, reserved = {0xb, 0x7ffff7de4c1c <check_match+300>, 0x7ffff7fe26d8, 0xb01bca00}}, next_closing = 0x0, flags = 24576, signal_cb = 0x5555555618a0 <signal_handler>, signum = 2, tree_entry = {rbe_left = 0x0,
rbe_right = 0x7fffffffe060, rbe_parent = 0x0, rbe_color = 0}, caught_signals = 0, dispatched_signals = 0}
sigterm = {data = 0x7fffffffe190, loop = 0x7ffff74e7980 <default_loop_struct>, type = UV_SIGNAL, close_cb = 0x7ffff7de4c1c <check_match+300>, handle_queue = {0x55555578a450, 0x7fffffffdfe0}, u = {fd = -134328224, reserved = {
0x7ffff7fe5060, 0x7ffff59fd4c9, 0x7ffff59fd438, 0x7ffff59fca30}}, next_closing = 0x0, flags = 24576, signal_cb = 0x5555555618a0 <signal_handler>, signum = 15, tree_entry = {rbe_left = 0x0, rbe_right = 0x0,
rbe_parent = 0x7fffffffdfc0, rbe_color = 1}, caught_signals = 0, dispatched_signals = 0}
pool = {ctx = 0x555555788530, alloc = 0x7ffff7b95050 <mp_alloc>, free = 0x0}
engine = {resolver = {options = 0, opt_rr = 0x5555557885a0, trust_anchors = {root = 0x0, malloc = 0x7ffff7b87a10 <malloc_std>, free = 0x7ffff7b87a00 <free_std>, baton = 0x0}, negative_anchors = {root = 0x0,
malloc = 0x7ffff7b87a10 <malloc_std>, free = 0x7ffff7b87a00 <free_std>, baton = 0x0}, root_hints = {name = 0x5555557885d8 "", key = 0x0, trust_anchor = 0x0, parent = 0x0, nsset = {root = 0x5555557886a1,
malloc = 0x7ffff7b91d70 <mm_alloc>, free = 0x7ffff7b91d30 <mm_free>, baton = 0x7fffffffdfa0}, pool = 0x7fffffffdfa0}, cache = {db = 0x555555788cb8, api = 0x7ffff7b7f240, stats = {hit = 303, miss = 228, insert = 2,
delete = 1, txn_read = 66, txn_write = 4}}, cache_rtt = 0x7ffff7edd010, cache_rep = 0x7ffff7e9c010, modules = 0x7fffffffe458, pool = 0x7fffffffdfa0}, net = {loop = 0x7ffff74e7980 <default_loop_struct>, endpoints = {
root = 0x55555576c060, malloc = 0x7ffff7b87a10 <malloc_std>, free = 0x7ffff7b87a00 <free_std>, baton = 0x0}}, modules = {at = 0x5555557b2e50, len = 8, cap = 10}, storage_registry = {at = 0x5555557898b0, len = 1, cap = 5},
pool = 0x7fffffffdfa0, L = 0x40000378}
```
The kresd recovers after the lmdb cache files are deleted.
1.0.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/77
ASAN: memory leak in tty_alloc
2017-08-22T13:33:40+02:00
Jan Včelák
ASAN: memory leak in tty_alloc
1. Start server in interactive mode.
2. Press ^D to indicate EOF.
3. Press ^C to terminate.
```
% ../daemon/kresd -c config.lua
[system] interactive mode
> ^C
=================================================================
==...
1. Start server in interactive mode.
2. Press ^D to indicate EOF.
3. Press ^C to terminate.
```
% ../daemon/kresd -c config.lua
[system] interactive mode
> ^C
=================================================================
==24671==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 65536 byte(s) in 1 object(s) allocated from:
#0 0x7f7b19436d88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x55d7d3b7bea3 in tty_alloc (/home/fcelda/devel/resolver/daemon/kresd+0x1eea3)
#2 0x7f7b18a6321f (/lib64/libuv.so.1+0x22221f)
#3 0x62100001cd6f (<unknown module>)
Direct leak of 32800 byte(s) in 2 object(s) allocated from:
#0 0x7f7b19436d88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x7f7b191170a4 (/lib64/libkres.so.1+0x160a4)
SUMMARY: AddressSanitizer: 98336 byte(s) leaked in 3 allocation(s).
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/76
ASAN: memory leak when closing inactive connection
2017-08-22T13:33:40+02:00
Jan Včelák
ASAN: memory leak when closing inactive connection
Start server:
```
% ../daemon/kresd -c config.lua
[system] interactive mode
>
```
Create idle connection:
```
% (echo; sleep 5) | socat - "TCP:[::1]:5300"
%
```
Terminate server:
```
> quit()
nil
>
============...
Start server:
```
% ../daemon/kresd -c config.lua
[system] interactive mode
>
```
Create idle connection:
```
% (echo; sleep 5) | socat - "TCP:[::1]:5300"
%
```
Terminate server:
```
> quit()
nil
>
=================================================================
==24562==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 16400 byte(s) in 1 object(s) allocated from:
#0 0x7f56df401d88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x7f56df0e20a4 (/lib64/libkres.so.1+0x160a4)
SUMMARY: AddressSanitizer: 16400 byte(s) leaked in 1 allocation(s).
```
1.2.0 release
Vladimír Čunát
vladimir.cunat@nic.cz
Vladimír Čunát
vladimir.cunat@nic.cz
https://gitlab.nic.cz/knot/knot-resolver/-/issues/54
daemon: manpages
2017-08-22T13:33:40+02:00
Marek Vavrusa
daemon: manpages
It has to be done.
It has to be done.
1.0.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/75
*.cloudfrond.net couldn't be resolved
2017-08-22T13:33:40+02:00
Ondřej Surý
*.cloudfrond.net couldn't be resolved
```
$ dig IN A d2x9pgnb7vwmga.cloudfront.net
; <<>> DiG 9.10.3-P4-Debian <<>> IN A d2x9pgnb7vwmga.cloudfront.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17229
;; flags: qr rd ra...
```
$ dig IN A d2x9pgnb7vwmga.cloudfront.net
; <<>> DiG 9.10.3-P4-Debian <<>> IN A d2x9pgnb7vwmga.cloudfront.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17229
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;d2x9pgnb7vwmga.cloudfront.net. IN A
;; AUTHORITY SECTION:
d2x9pgnb7vwmga.cloudfront.net. 1688 IN NS ns-1447.awsdns-52.org.
d2x9pgnb7vwmga.cloudfront.net. 1688 IN NS ns-1705.awsdns-21.co.uk.
d2x9pgnb7vwmga.cloudfront.net. 1688 IN NS ns-297.awsdns-37.com.
d2x9pgnb7vwmga.cloudfront.net. 1688 IN NS ns-522.awsdns-01.net.
;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jun 10 07:14:24 CEST 2016
;; MSG SIZE rcvd: 195
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/53
daemon: support --fd=<X> for listening on inherited fds
2017-08-22T13:33:40+02:00
Marek Vavrusa
daemon: support --fd=<X> for listening on inherited fds
This is related to #11 but easier deliverable.
* Support the `--fd` parameter and accept fd/list of fds
* Extract the local address and add them to libuv evloop as raw sockets
This is related to #11 but easier deliverable.
* Support the `--fd` parameter and accept fd/list of fds
* Extract the local address and add them to libuv evloop as raw sockets
1.0.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/74
CNAME point on record with multiple A/AAAA addresses
2017-08-22T13:33:40+02:00
Martin Vician
CNAME point on record with multiple A/AAAA addresses
I don't know if this is a standard from RFC.
If I have CNAME which point on a record with multiple A/AAA addresses, e.q.:
```
a.example.org. IN A 1.2.3.4
a.example.org. IN A 5.6.7.8
b.example.org .IN CNAME a.example.org.
```
I...
I don't know if this is a standard from RFC.
If I have CNAME which point on a record with multiple A/AAA addresses, e.q.:
```
a.example.org. IN A 1.2.3.4
a.example.org. IN A 5.6.7.8
b.example.org .IN CNAME a.example.org.
```
I would expect answer:
```
b.example.org. IN CNAME a.example.org.
a.example.org. IN A 1.2.3.4
a.example.org. IN A 5.6.7.8
```
But resolver returns me only one A record (always the first):
```
b.example.org. IN CNAME a.example.org.
a.example.org. IN A 1.2.3.4
```
Other resolvers (bind, unbound) returns me both A records.
The behavior is the same for multiple AAAA records.
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/52
daemon: rtt cache clearing
2017-08-22T13:33:40+02:00
Marek Vavrusa
daemon: rtt cache clearing
Outcome:
* [ ] Add `cachectl.prune_rtt([subnet])` function to prune RTT cache (to be able to do it periodically) for operators
* [x] Add documentation for feature kill-switches `option()`
Outcome:
* [ ] Add `cachectl.prune_rtt([subnet])` function to prune RTT cache (to be able to do it periodically) for operators
* [x] Add documentation for feature kill-switches `option()`
1.0.0 release
https://gitlab.nic.cz/knot/knot-resolver/-/issues/73
ASAN: huge memory leaks in answering code
2017-08-22T13:33:40+02:00
Jan Včelák
ASAN: huge memory leaks in answering code
The server leaks a lot of memory when excercised by PROTOS test suite.
Configuration file:
```
trust_anchors.add(". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5")
net.listen({"::1", "127.0.0.1"},...
The server leaks a lot of memory when excercised by PROTOS test suite.
Configuration file:
```
trust_anchors.add(". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5")
net.listen({"::1", "127.0.0.1"}, 5300)
cache.size = 100 * MB
verbose(true)
-- BLACK HOLE, authoritative Knot is running on 127.0.0.2
modules.load("policy")
policy:add(policy.all(policy.FORWARD("127.0.0.2")))
```
PROTOS execution:
```
java -jar c09-dns-query-r1.jar --host 127.0.0.1 --port 5300 --timeout 250 --delay 1
```
Server log:
```
% ./_install/bin/kresd -c _server/config.lua
[system] interactive mode
>
...
(flood server with queries from PROTOS test suite)
...
quit()
nil
>
=================================================================
==2267==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 852800 byte(s) in 52 object(s) allocated from:
#0 0x7f558accfd88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x7f558a9829f4 in mp_new_big_chunk (/home/fcelda/devel/resolver/_install/lib64/libkres.so.1+0x339f4)
Direct leak of 384 byte(s) in 2 object(s) allocated from:
#0 0x7f558accff40 in calloc (/lib64/libasan.so.3+0xc6f40)
#1 0x5588420638c7 in udp_bind (/home/fcelda/devel/resolver/_install/bin/kresd+0xd8c7)
Indirect leak of 32800 byte(s) in 2 object(s) allocated from:
#0 0x7f558accfd88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x7f558a9829f4 in mp_new_big_chunk (/home/fcelda/devel/resolver/_install/lib64/libkres.so.1+0x339f4)
SUMMARY: AddressSanitizer: 885984 byte(s) leaked in 56 allocation(s).
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/51
Whitelist for NS reputation
2017-08-22T13:33:41+02:00
Marek Vavrusa
Whitelist for NS reputation
Similarly to NTA, the operator should have a knob to whitelist affected servers from reputation system.
Similarly to NTA, the operator should have a knob to whitelist affected servers from reputation system.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/72
ASAN: memory leak in udp_bind
2017-08-22T13:33:40+02:00
Jan Včelák
ASAN: memory leak in udp_bind
Configuration file:
```
trust_anchors.add(". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5")
net.listen({"::1", "127.0.0.1"}, 5300)
cache.size = 100 * MB
verbose(true)
```
Start and stop the ...
Configuration file:
```
trust_anchors.add(". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5")
net.listen({"::1", "127.0.0.1"}, 5300)
cache.size = 100 * MB
verbose(true)
```
Start and stop the server:
```
./_install/bin/kresd -c _server/config.lua
[system] interactive mode
> quit()
nil
>
=================================================================
==667==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 384 byte(s) in 2 object(s) allocated from:
#0 0x7f37a8072f40 in calloc (/lib64/libasan.so.3+0xc6f40)
#1 0x55e5bd4418c7 in udp_bind (/home/fcelda/devel/resolver/_install/bin/kresd+0xd8c7)
SUMMARY: AddressSanitizer: 384 byte(s) leaked in 2 allocation(s).
```
GCC 6.6.1, CFLAGS=-fsanitize=adress
https://gitlab.nic.cz/knot/knot-resolver/-/issues/50
rtt cache SERVFAIL handling
2017-08-22T13:33:41+02:00
Ondřej Surý
rtt cache SERVFAIL handling
```
[system] interactive mode
> [plan] plan 'spideroak.com.' type 'AAAA'
[resl] => using root hints
[resl] => querying: '2001:dc3::500' score: 10 zone cut: '.' m12n: 'COM.' type: 'NS'
[resl] optional: '202.12.27.33' score: ...
```
[system] interactive mode
> [plan] plan 'spideroak.com.' type 'AAAA'
[resl] => using root hints
[resl] => querying: '2001:dc3::500' score: 10 zone cut: '.' m12n: 'COM.' type: 'NS'
[resl] optional: '202.12.27.33' score: 10 zone cut: '.' m12n: 'COM.' type: 'NS'
[resl] optional: '2001:500:3::b00' score: 10 zone cut: '.' m12n: 'COM.' type: 'NS'
[resl] optional: '199.7.83.42' score: 10 zone cut: '.' m12n: 'COM.' type: 'NS'
[iter] <= referral response, follow
[resl] <= server: '202.12.27.33' rtt: 347 ms
[resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'sPIDeroak.coM.' type: 'AAAA'
[resl] optional: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'sPIDeroak.coM.' type: 'AAAA'
[resl] optional: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'sPIDeroak.coM.' type: 'AAAA'
[resl] optional: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'sPIDeroak.coM.' type: 'AAAA'
[iter] <= referral response, follow
[resl] <= server: '192.55.83.30' rtt: 171 ms
[resl] => querying: '38.121.104.82' score: 10 zone cut: 'spideroak.com.' m12n: 'SpIdeRoAk.com.' type: 'AAAA'
[resl] optional: '38.121.104.81' score: 10 zone cut: 'spideroak.com.' m12n: 'SpIdeRoAk.com.' type: 'AAAA'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=900
[resl] <= server: '38.121.104.82' rtt: 209 ms
[resl] finished: 4, queries: 1, mempool: 32800 B
[plan] plan 'spideroak.com.' type 'A'
[resl] => querying: '38.121.104.82' score: 209 zone cut: 'spideroak.com.' m12n: 'sPIDERoAK.com.' type: 'A'
[resl] optional: '38.121.104.81' score: 209 zone cut: 'spideroak.com.' m12n: 'sPIDERoAK.com.' type: 'A'
[iter] <= rcode: NOERROR
[resl] <= server: '38.121.104.82' rtt: 206 ms
[resl] finished: 4, queries: 1, mempool: 32800 B
[plan] plan 'www.spideroak.com.' type 'A'
[resl] => querying: '38.121.104.81' score: 10 zone cut: 'spideroak.com.' m12n: 'wWW.spiDeROaK.Com.' type: 'A'
[iter] <= rcode: SERVFAIL
[resl] => server: '38.121.104.81' flagged as 'bad'
[resl] => querying: '38.121.104.82' score: 207 zone cut: 'spideroak.com.' m12n: 'wwW.sPidEROaK.CoM.' type: 'A'
[iter] <= rcode: SERVFAIL
[resl] => server: '38.121.104.82' flagged as 'bad'
[resl] => no valid NS left
[resl] finished: 8, queries: 1, mempool: 32800 B
[plan] plan 'www.spideroak.com.' type 'AAAA'
[resl] => querying: '38.121.104.82' score: 1528 zone cut: 'spideroak.com.' m12n: 'www.sPiDeroAk.Com.' type: 'AAAA'
[iter] <= rcode: NOERROR
[ pc ] => answer cached for TTL=900
[resl] <= server: '38.121.104.82' rtt: 205 ms
[resl] finished: 4, queries: 1, mempool: 32800 B
[plan] plan 'spideroak.com.' type 'A'
[ rc ] => satisfied from cache
[iter] <= rcode: NOERROR
[resl] finished: 4, queries: 1, mempool: 32800 B
[plan] plan 'www.spideroak.com.' type 'A'
[resl] => querying: '38.121.104.82' score: 866 zone cut: 'spideroak.com.' m12n: 'wWw.sPiDEROAk.com.' type: 'A'
[iter] <= rcode: SERVFAIL
[resl] => server: '38.121.104.82' flagged as 'bad'
[resl] => no valid NS left
[resl] finished: 8, queries: 1, mempool: 32800 B
```
and also from my normal instance:
```
Mar 08 15:27:19 kage kresd[775]: [plan] plan 'spideroak.com.' type 'A'
Mar 08 15:27:19 kage kresd[775]: [resl] => NS is provably without DS, going insecure
Mar 08 15:27:19 kage kresd[775]: [resl] => no valid NS left
Mar 08 15:27:19 kage kresd[775]: [resl] finished: 8, queries: 1, mempool: 65600 B
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/71
ASAN: memory leak in test_cache
2017-08-22T13:33:41+02:00
Jan Včelák
ASAN: memory leak in test_cache
```
./tests/test_cache
[==========] Running 2 test(s).
[ RUN ] test_fake_invalid
[ OK ] test_fake_invalid
[ RUN ] test_fake_insert
[ OK ] test_fake_insert
[==========] 4 test(s) run.
[ PASSED ] 4 test(s).
...
```
./tests/test_cache
[==========] Running 2 test(s).
[ RUN ] test_fake_invalid
[ OK ] test_fake_invalid
[ RUN ] test_fake_insert
[ OK ] test_fake_insert
[==========] 4 test(s) run.
[ PASSED ] 4 test(s).
0 FAILED TEST(S)
[==========] Running 8 test(s).
[ RUN ] test_invalid
[ OK ] test_invalid
[ RUN ] test_insert_rr
[ OK ] test_insert_rr
[ RUN ] test_materialize
[ OK ] test_materialize
[ RUN ] test_query
[ OK ] test_query
[ RUN ] test_query_aged
[ OK ] test_query_aged
[ RUN ] test_remove
[ OK ] test_remove
[ RUN ] test_fill
[ OK ] test_fill
[ RUN ] test_clear
[ OK ] test_clear
[==========] 10 test(s) run.
[ PASSED ] 10 test(s).
0 FAILED TEST(S)
=================================================================
==25993==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 32816 byte(s) in 1 object(s) allocated from:
#0 0x7fa0cb022d88 in malloc (/lib64/libasan.so.3+0xc6d88)
#1 0x7fa0c9c2b6aa in opendir (/lib64/libc.so.6+0xc46aa)
SUMMARY: AddressSanitizer: 32816 byte(s) leaked in 1 allocation(s).
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/48
early awareness notification
2017-08-22T13:33:42+02:00
Marek Vavrusa
early awareness notification
Module that could call home to CZ.NIC servers and fetch information about latest Knot Resolver version.
Tasks:
## Infrastructure
* [x] set up authoritative DNS servers serving CH/IN answers with following information:
- latest ver...
Module that could call home to CZ.NIC servers and fetch information about latest Knot Resolver version.
Tasks:
## Infrastructure
* [x] set up authoritative DNS servers serving CH/IN answers with following information:
- latest version
- recent security messages
* [x] reachable both over v4/v6
* [x] can we make them dnssec-secure or wait for channel security?
## Resolver
* [x] make a module that would query the servers and display the information
* [x] compare the version to current and issue warning messages
https://gitlab.nic.cz/knot/knot-resolver/-/issues/46
lib/iterator: SIT cookies
2017-10-04T14:59:10+02:00
Marek Vavrusa
lib/iterator: SIT cookies
https://gitlab.nic.cz/knot/knot-resolver/-/issues/44
test: dns64 test
2022-04-08T16:14:02+02:00
Grigorii Demidov
test: dns64 test
write test for dns64 module using deckard
write test for dns64 module using deckard
https://gitlab.nic.cz/knot/knot-resolver/-/issues/43
ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbae36...
2022-04-08T16:13:59+02:00
Ondřej Surý
ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbae363c064 bp 0x7fff04112bf0 sp 0x7fff04112bd0 T0)
After some cycles of resperf with:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2001:1488:ffff:64:ffff:ffff::',
tinyweb = {
addr = '127.0.0....
After some cycles of resperf with:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2001:1488:ffff:64:ffff:ffff::',
tinyweb = {
addr = '127.0.0.1:8053',
geoip = '/root'
}
}
```
crashes with:
```
ASAN:SIGSEGV
=================================================================
==8681==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbae363c064 bp 0x7fff04112bf0 sp 0x7fff04112bd0 T0)
#0 0x7fbae363c063 in knot_dname_lf (/usr/lib/x86_64-linux-gnu/libknot.so.1+0xb063)
#1 0x7fbae3b32cc3 in __asan::AsanOnSIGSEGV(int, void*, void*) (/usr/sbin/kresd+0xb6cc3)
#2 0x7fbadc897b14 (/usr/lib/knot-resolver/tinyweb.so+0x31bb14)
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ??:0 knot_dname_lf
==8681==ABORTING
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/42
Program received signal SIGSEGV, Segmentation fault. 0x00007ffff6ce24d9 in ??...
2022-04-08T16:14:01+02:00
Ondřej Surý
Program received signal SIGSEGV, Segmentation fault. 0x00007ffff6ce24d9 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
```
Thread 6 (Thread 0x7ffff1f65700 (LWP 1359)):
#0 runtime.futex () at /usr/lib/go/src/runtime/sys_linux_amd64.s:289
No locals.
#1 0x00007ffff45d9913 in runtime.futexsleep (addr=0xc82005e110, val=0, ns=-1) at /usr/lib/go/src/runti...
```
Thread 6 (Thread 0x7ffff1f65700 (LWP 1359)):
#0 runtime.futex () at /usr/lib/go/src/runtime/sys_linux_amd64.s:289
No locals.
#1 0x00007ffff45d9913 in runtime.futexsleep (addr=0xc82005e110, val=0, ns=-1) at /usr/lib/go/src/runtime/os1_linux.go:39
ts = {tv_sec = 0, tv_nsec = 0}
#2 0x00007ffff45c0868 in runtime.notesleep (n=0xc82005e110) at /usr/lib/go/src/runtime/lock_futex.go:142
gp = 0xc820060180
#3 0x00007ffff45e2916 in runtime.stopm () at /usr/lib/go/src/runtime/proc1.go:1128
_g_ = 0xc820060180
#4 0x00007ffff45e3c22 in runtime.findrunnable (gp=0x7ffff7f58138, inheritTime=false) at /usr/lib/go/src/runtime/proc1.go:1530
i = 16
gp = 0x7ffff7f58138
gp = 0x7ffff45b51e5 <runtime.atomicload+5>
gp = 0x7ffff45e9cfb <runtime.runqget+75>
gp = 0xc8200185b8
gp = 0x7fff00000001
_p_ = 0x2007fff00000001
_p_ = 0xc82004a000
_p_ = 0x7ffff45e0c04 <runtime.casgstatus+340>
_g_ = 0xc820060180
#5 0x00007ffff45e42ab in runtime.schedule () at /usr/lib/go/src/runtime/proc1.go:1639
inheritTime = false
gp = 0x0
_g_ = 0xc820060180
#6 0x00007ffff45e4938 in runtime.goexit0 (gp=0xc820001500) at /usr/lib/go/src/runtime/proc1.go:1765
_g_ = 0xc820060180
#7 0x00007ffff460bbb3 in runtime.mcall () at /usr/lib/go/src/runtime/asm_amd64.s:204
No locals.
#8 0x000000c82001aa00 in ?? ()
No symbol table info available.
#9 0x0000000000000000 in ?? ()
No symbol table info available.
Thread 5 (Thread 0x7ffff2766700 (LWP 1358)):
#0 runtime.futex () at /usr/lib/go/src/runtime/sys_linux_amd64.s:289
No locals.
#1 0x00007ffff45d9913 in runtime.futexsleep (addr=0xc82002ae90, val=0, ns=-1) at /usr/lib/go/src/runtime/os1_linux.go:39
ts = {tv_sec = 0, tv_nsec = 0}
#2 0x00007ffff45c0868 in runtime.notesleep (n=0xc82002ae90) at /usr/lib/go/src/runtime/lock_futex.go:142
gp = 0xc820001080
#3 0x00007ffff45e2916 in runtime.stopm () at /usr/lib/go/src/runtime/proc1.go:1128
_g_ = 0xc820001080
#4 0x00007ffff45e3c22 in runtime.findrunnable (gp=0x7ffff7f58138, inheritTime=false) at /usr/lib/go/src/runtime/proc1.go:1530
i = 16
gp = 0x7ffff7f58138
gp = 0x7ffff45b51e5 <runtime.atomicload+5>
gp = 0x7ffff45e9cfb <runtime.runqget+75>
gp = 0xc8200185b8
gp = 0x7fff00000001
_p_ = 0x2007fff00000001
_p_ = 0xc82004a000
_p_ = 0xc820018000
_g_ = 0xc820001080
#5 0x00007ffff45e42ab in runtime.schedule () at /usr/lib/go/src/runtime/proc1.go:1639
inheritTime = false
gp = 0x0
_g_ = 0xc820001080
#6 0x00007ffff45e4938 in runtime.goexit0 (gp=0xc820001500) at /usr/lib/go/src/runtime/proc1.go:1765
_g_ = 0xc820001080
#7 0x00007ffff460bbb3 in runtime.mcall () at /usr/lib/go/src/runtime/asm_amd64.s:204
No locals.
#8 0x000000c820018000 in ?? ()
No symbol table info available.
#9 0x0000000000000000 in ?? ()
No symbol table info available.
Thread 4 (Thread 0x7ffff2f67700 (LWP 1357)):
#0 runtime.futex () at /usr/lib/go/src/runtime/sys_linux_amd64.s:289
No locals.
#1 0x00007ffff45d9913 in runtime.futexsleep (addr=0xc82002aa10, val=0, ns=-1) at /usr/lib/go/src/runtime/os1_linux.go:39
ts = {tv_sec = 0, tv_nsec = 0}
#2 0x00007ffff45c0868 in runtime.notesleep (n=0xc82002aa10) at /usr/lib/go/src/runtime/lock_futex.go:142
gp = 0xc820000d80
#3 0x00007ffff45e2916 in runtime.stopm () at /usr/lib/go/src/runtime/proc1.go:1128
_g_ = 0xc820000d80
#4 0x00007ffff45e3c22 in runtime.findrunnable (gp=0x7ffff7f5a048, inheritTime=false) at /usr/lib/go/src/runtime/proc1.go:1530
i = 16
gp = 0x7ffff7f5a048
gp = 0x7ffff45b51e5 <runtime.atomicload+5>
gp = 0x7ffff45e9cfb <runtime.runqget+75>
gp = 0xc82001afb8
gp = 0x7fff00000002
_p_ = 0x2007fff00000001
_p_ = 0xc82013e000
_p_ = 0x7ffff45e0c04 <runtime.casgstatus+340>
_g_ = 0xc820000d80
#5 0x00007ffff45e42ab in runtime.schedule () at /usr/lib/go/src/runtime/proc1.go:1639
inheritTime = false
gp = 0x0
_g_ = 0xc820000d80
#6 0x00007ffff45e4938 in runtime.goexit0 (gp=0xc820122000) at /usr/lib/go/src/runtime/proc1.go:1765
_g_ = 0xc820000d80
#7 0x00007ffff460bbb3 in runtime.mcall () at /usr/lib/go/src/runtime/asm_amd64.s:204
No locals.
#8 0x000000c820019500 in ?? ()
No symbol table info available.
#9 0x0000000000000000 in ?? ()
No symbol table info available.
Thread 3 (Thread 0x7ffff3768700 (LWP 1356)):
#0 runtime.usleep () at /usr/lib/go/src/runtime/sys_linux_amd64.s:95
No locals.
#1 0x00007ffff45e828e in runtime.sysmon () at /usr/lib/go/src/runtime/proc1.go:2994
delay = 10000
unixnow = 1447771255976941101
scavengelimit = 300000000000
nscavenge = 0
now = 512887854141937
maxsleep = 60000000000
lasttrace = 0
lastscavenge = 512880682902989
lastpoll = 0
idle = 180
forcegcperiod = 120000000000
gp = 0xc820000900
#2 0x00007ffff45e193c in runtime.mstart1 () at /usr/lib/go/src/runtime/proc1.go:721
_g_ = 0xc820000900
#3 0x00007ffff45e1844 in runtime.mstart () at /usr/lib/go/src/runtime/proc1.go:691
size = 8388608
#4 0x00007ffff45b04a3 in crosscall_amd64 () at /usr/lib/go/src/runtime/cgo/gcc_amd64.S:35
No locals.
#5 0x00007ffff3768700 in ?? ()
No symbol table info available.
#6 0x0000000000000000 in ?? ()
No symbol table info available.
Thread 2 (Thread 0x7ffff40c9700 (LWP 1355)):
#0 runtime.epollwait () at /usr/lib/go/src/runtime/sys_linux_amd64.s:420
No locals.
#1 0x00007ffff45d9736 in runtime.netpoll (block=true, ~r1=0x0) at /usr/lib/go/src/runtime/netpoll_epoll.go:68
waitms = -1
n = 0
i = 0
gp = 0
events = {{events = 0, data = "\000\000\000\000\000\000\000"} <repeats 128 times>}
#2 0x00007ffff45e3b1c in runtime.findrunnable (gp=0x7ffff7f58138, inheritTime=false) at /usr/lib/go/src/runtime/proc1.go:1512
i = 16
gp = 0x7ffff7f58138
gp = 0x7ffff45b51e5 <runtime.atomicload+5>
gp = 0x7ffff45e9cfb <runtime.runqget+75>
gp = 0xc8200185b8
gp = 0x7fff00000003
_p_ = 0x2007fff00000001
_p_ = 0xc82004a000
_p_ = 0x7ffff45e0c04 <runtime.casgstatus+340>
_g_ = 0x7ffff4d41020 <runtime.g0>
#3 0x00007ffff45e42ab in runtime.schedule () at /usr/lib/go/src/runtime/proc1.go:1639
inheritTime = false
gp = 0x0
_g_ = 0x7ffff4d41020 <runtime.g0>
#4 0x00007ffff45e4938 in runtime.goexit0 (gp=0xc820001680) at /usr/lib/go/src/runtime/proc1.go:1765
_g_ = 0x7ffff4d41020 <runtime.g0>
#5 0x00007ffff460bbb3 in runtime.mcall () at /usr/lib/go/src/runtime/asm_amd64.s:204
No locals.
#6 0x00007ffff4d41060 in runtime.g0 () from /usr/lib/knot-resolver/tinyweb.so
No symbol table info available.
#7 0x00007ffff40c8de0 in ?? ()
No symbol table info available.
#8 0x00007ffff4d41020 in __bss_start () from /usr/lib/knot-resolver/tinyweb.so
No symbol table info available.
#9 0x00007ffff45e1844 in runtime.mstart () at /usr/lib/go/src/runtime/proc1.go:691
size = 0
#10 0x00007ffff460baac in runtime.rt0_go () at /usr/lib/go/src/runtime/asm_amd64.s:120
No locals.
#11 0x00007fff00000007 in ?? ()
No symbol table info available.
#12 0x00007fffffffec58 in ?? ()
No symbol table info available.
#13 0x0000000000000007 in ?? ()
No symbol table info available.
#14 0x00007fffffffec58 in ?? ()
No symbol table info available.
#15 0x00007ffff40c9700 in ?? ()
No symbol table info available.
#16 0x00007ffff73600a4 in start_thread (arg=0x7ffff40c9700) at pthread_create.c:309
__res = <optimized out>
pd = 0x7ffff40c9700
now = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737287853824, 9002629999368315110, 1, 140737354125408, 140737300792552, 140737287853824, -9002646931782000410, -9002649315297615642},
mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
not_first_call = <optimized out>
pagesize_m1 = <optimized out>
sp = <optimized out>
freesize = <optimized out>
__PRETTY_FUNCTION__ = "start_thread"
#17 0x00007ffff670a04d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.
Thread 1 (Thread 0x7ffff7fe5840 (LWP 1354)):
#0 0x00007ffff6ce24d9 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#1 0x00007ffff6cd9cad in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#2 0x00007ffff6cfef6c in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#3 0x00007ffff6cff4a4 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#4 0x00007ffff6d0e488 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#5 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#6 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#7 0x0000000000410709 in l_ffi_call (argc=<optimized out>, L=<optimized out>) at daemon/ffimodule.c:84
status = -19824
#8 l_ffi_layer_consume (ctx=0xf, pkt=0x0) at daemon/ffimodule.c:180
L = 0x40000378
#9 0x0000000000414c78 in kr_resolve_consume (request=request@entry=0xda85d0, src=src@entry=0x7fffffffb3e0, packet=packet@entry=0x661e40) at lib/resolve.c:422
layer = {node = {next = 0x0, prev = 0x0}, state = 4, mm = 0x0, data = 0xda85d0, api = 0x662580}
mod = <optimized out>
i = 4
qname_raw = <optimized out>
rplan = 0xda8630
ctx = 0x7fffffffe9f0
qry = 0xdaa9c0
tried_tcp = false
#10 0x000000000040de58 in qr_task_step (task=0xda85d0, packet_source=packet_source@entry=0x7fffffffb3e0, packet=0x661e40) at daemon/worker.c:449
sock_type = -1
state = <optimized out>
choice = <optimized out>
#11 0x000000000040e385 in worker_exec (worker=worker@entry=0x7ffff7f94010, handle=handle@entry=0xad72c0, query=<optimized out>, addr=addr@entry=0x7fffffffb3e0) at daemon/worker.c:538
task = <optimized out>
is_master_socket = <optimized out>
#12 0x000000000040afa4 in udp_recv (handle=0xad72c0, nread=<optimized out>, buf=<optimized out>, addr=0x7fffffffb3e0, flags=<optimized out>) at daemon/io.c:65
loop = <optimized out>
worker = 0x7ffff7f94010
query = <optimized out>
#13 0x00007ffff7793139 in ?? () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#14 0x00007ffff7794c2a in ?? () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#15 0x00007ffff77875d8 in uv_run () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#16 0x00000000004087c6 in run_worker (engine=0x7fffffffe9f0, loop=0x7ffff799f980) at daemon/main.c:193
sock_file = 0x62d810 "tty/1354"
pipe = {data = 0x7fffffffe9f0, loop = 0x7ffff799f980, type = UV_NAMED_PIPE, close_cb = 0x0, handle_queue = {0x6962c0, 0x662270}, u = {fd = 5, reserved = {0x5, 0x17, 0x7ffff7fe9cb8,
0x7ffff7de55ce <do_lookup_x+2334>}}, next_closing = 0x0, flags = 24576, write_queue_size = 0, alloc_cb = 0x0, read_cb = 0x0, connect_req = 0x0, shutdown_req = 0x0, io_watcher = {
cb = 0x7ffff7790540, pending_queue = {0x7fffffffe970, 0x7fffffffe970}, watcher_queue = {0x7fffffffe980, 0x7fffffffe980}, pevents = 1, events = 1, fd = 21}, write_queue = {
0x7fffffffe9a0, 0x7fffffffe9a0}, write_completed_queue = {0x7fffffffe9b0, 0x7fffffffe9b0}, connection_cb = 0x411010 <tty_accept>, delayed_error = 0, accepted_fd = -1, queued_fds = 0x0,
ipc = 0, pipe_fname = 0x62d9b0 "tty/1354"}
#17 main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:350
forks = <optimized out>
addr_set = {at = 0x648470, len = 2, cap = <optimized out>}
keyfile = 0x6289c0 <keyfile_buf> "/usr/share/dns/root.key"
config = 0x0
keyfile_buf = "/usr/share/dns/root.key", '\000' <repeats 4073 times>
c = <optimized out>
li = 0
ret = 0
opts = {{name = 0x42000d "addr", has_arg = 1, flag = 0x0, val = 97}, {name = 0x41e96c "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x420422 "keyfile", has_arg = 1, flag = 0x0,
val = 107}, {name = 0x42042a "forks", has_arg = 1, flag = 0x0, val = 102}, {name = 0x41e9ae "verbose", has_arg = 0, flag = 0x0, val = 118}, {name = 0x420430 "version", has_arg = 0,
flag = 0x0, val = 86}, {name = 0x41e99b "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
loop = 0x7ffff799f980
sigint = {data = 0x7ffff7fe9cb8, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x97a26e6c, handle_queue = {0x7fffffffe760, 0x7ffff799fa50}, u = {fd = -134308680, reserved = {
0x7ffff7fe9cb8, 0x7ffff7de55ce <do_lookup_x+2334>, 0x7ffff7ff8160, 0x7fffffffe720}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 2,
tree_entry = {rbe_left = 0x0, rbe_right = 0x7fffffffe740, rbe_parent = 0x0, rbe_color = 0}, caught_signals = 0, dispatched_signals = 0}
sigterm = {data = 0x7ffff5ec1438, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x1000000ab, handle_queue = {0x6616e0, 0x7fffffffe6c0}, u = {fd = -5952, reserved = {0x7fffffffe8c0,
0x7ffff7de4c5c <check_match+300>, 0x7fffffffe8e8, 0xd82b830}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 15, tree_entry = {rbe_left = 0x0,
rbe_right = 0x0, rbe_parent = 0x7fffffffe6a0, rbe_color = 1}, caught_signals = 0, dispatched_signals = 0}
pool = {ctx = 0x648530, alloc = 0x411830 <mp_alloc>, free = 0x0}
engine = {resolver = {options = 0, opt_rr = 0x6485a0, trust_anchors = {root = 0x632880, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, negative_anchors = {
root = 0x0, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, root_hints = {name = 0x6485d8 "", nsset = {root = 0x6486a1, malloc = 0x7ffff7bcb7b0 <mm_alloc>,
free = 0x7ffff7bcb7d0 <mm_free>, baton = 0x7fffffffe680}, key = 0x0, trust_anchor = 0x0, parent = 0x0, pool = 0x7fffffffe680}, cache = {db = 0x648cb8, api = 0x7ffff7dda300,
stats = {hit = 12770, miss = 13602, insert = 810, delete = 0, txn_read = 4551, txn_write = 998}}, cache_rtt = 0x649550, cache_rep = 0x659590, modules = 0x7fffffffeaf8,
pool = 0x7fffffffe680}, net = {loop = 0x7ffff799f980, endpoints = {root = 0x62b911, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}}, modules = {at = 0x6634a0,
len = 8, cap = 10}, storage_registry = {at = 0x661930, len = 1, cap = 5}, pool = 0x7fffffffe680, L = 0x40000378}
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/40
runtime.raise () at /usr/lib/go/src/runtime/sys_linux_amd64.s:110
2017-08-22T13:33:42+02:00
Ondřej Surý
runtime.raise () at /usr/lib/go/src/runtime/sys_linux_amd64.s:110
```
Program received signal SIGSEGV, Segmentation fault.
runtime.raise () at /usr/lib/go/src/runtime/sys_linux_amd64.s:110
110 /usr/lib/go/src/runtime/sys_linux_amd64.s: No such file or directory.
```
```
#0 0x00007ffff66b48...
```
Program received signal SIGSEGV, Segmentation fault.
runtime.raise () at /usr/lib/go/src/runtime/sys_linux_amd64.s:110
110 /usr/lib/go/src/runtime/sys_linux_amd64.s: No such file or directory.
```
```
#0 0x00007ffff66b48ed in ?? () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1 0x00007ffff6d0bd92 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#2 0x00007ffff6d0d0aa in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#3 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#4 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#5 0x000000000041022f in l_ffi_call (argc=2, L=0x40000378) at daemon/ffimodule.c:84
status = <optimized out>
#6 l_ffi_layer_begin (ctx=0x7fffffffb280, module_param=<optimized out>) at daemon/ffimodule.c:153
cb_slot = <optimized out>
L = 0x40000378
#7 0x0000000000414918 in resolve_query (packet=0x661e40, request=0x8c2290) at lib/resolve.c:390
layer = {node = {next = 0x0, prev = 0x0}, state = 2, mm = 0x0, data = 0x8c2290, api = 0x662640}
mod = <optimized out>
i = 4
rplan = 0x8c22f0
qtype = <optimized out>
negative_anchors = <optimized out>
trust_anchors = <optimized out>
answer = <optimized out>
qname = <optimized out>
qclass = <optimized out>
qry = 0x8c3778
#8 kr_resolve_consume (request=request@entry=0x8c2290, src=src@entry=0x7fffffffb3e0, packet=packet@entry=0x661e40) at lib/resolve.c:407
rplan = 0x8c22f0
ctx = 0x7fffffffe9f0
qry = <optimized out>
tried_tcp = <optimized out>
#9 0x000000000040dbe5 in qr_task_step (task=0x8c2290, packet_source=packet_source@entry=0x7fffffffb3e0, packet=0x661e40) at daemon/worker.c:351
sock_type = -1
addr = 0x0
pktbuf = 0x8c2438
state = <optimized out>
subreq = 0x661e40
#10 0x000000000040e125 in worker_exec (worker=worker@entry=0x7ffff7f95010, handle=handle@entry=0x6616c0, query=<optimized out>, addr=addr@entry=0x7fffffffb3e0) at daemon/worker.c:438
task = <optimized out>
is_master_socket = <optimized out>
#11 0x000000000040af84 in udp_recv (handle=0x6616c0, nread=<optimized out>, buf=<optimized out>, addr=0x7fffffffb3e0, flags=<optimized out>) at daemon/io.c:65
loop = <optimized out>
worker = 0x7ffff7f95010
query = <optimized out>
#12 0x00007ffff7793139 in ?? () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#13 0x00007ffff7794c2a in ?? () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#14 0x00007ffff77875d8 in uv_run () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#15 0x00000000004087a6 in run_worker (engine=0x7fffffffe9f0, loop=0x7ffff799f980) at daemon/main.c:193
sock_file = 0x62f250 "tty/28189"
pipe = {data = 0x7fffffffe9f0, loop = 0x7ffff799f980, type = UV_NAMED_PIPE, close_cb = 0x0, handle_queue = {0x696940, 0x662270}, u = {fd = 5, reserved = {0x5, 0x17, 0x7ffff7feacb8,
0x7ffff7de55ce}}, next_closing = 0x0, flags = 24576, write_queue_size = 0, alloc_cb = 0x0, read_cb = 0x0, connect_req = 0x0, shutdown_req = 0x0, io_watcher = {cb = 0x7ffff7790540,
pending_queue = {0x7fffffffe970, 0x7fffffffe970}, watcher_queue = {0x7fffffffe980, 0x7fffffffe980}, pevents = 1, events = 1, fd = 21}, write_queue = {0x7fffffffe9a0, 0x7fffffffe9a0},
write_completed_queue = {0x7fffffffe9b0, 0x7fffffffe9b0}, connection_cb = 0x410da0 <tty_accept>, delayed_error = 0, accepted_fd = -1, queued_fds = 0x0, ipc = 0,
pipe_fname = 0x62f3f0 "tty/28189"}
#16 main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:350
forks = <optimized out>
addr_set = {at = 0x648470, len = 2, cap = <optimized out>}
keyfile = 0x6289c0 <keyfile_buf> "/usr/share/dns/root.key"
config = 0x0
keyfile_buf = "/usr/share/dns/root.key", '\000' <repeats 4073 times>
c = <optimized out>
li = 0
ret = 0
opts = {{name = 0x41fd2e "addr", has_arg = 1, flag = 0x0, val = 97}, {name = 0x41e6ac "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x420152 "keyfile", has_arg = 1, flag = 0x0,
val = 107}, {name = 0x42015a "forks", has_arg = 1, flag = 0x0, val = 102}, {name = 0x41e6ee "verbose", has_arg = 0, flag = 0x0, val = 118}, {name = 0x420160 "version", has_arg = 0,
flag = 0x0, val = 86}, {name = 0x41e6db "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
loop = 0x7ffff799f980
sigint = {data = 0x7ffff7feacb8, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x97a26e6c, handle_queue = {0x7fffffffe760, 0x7ffff799fa50}, u = {fd = -134304584, reserved = {
0x7ffff7feacb8, 0x7ffff7de55ce, 0x7ffff7ff8160, 0x7fffffffe720}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410d60 <signal_handler>, signum = 2, tree_entry = {rbe_left = 0x0,
rbe_right = 0x7fffffffe740, rbe_parent = 0x0, rbe_color = 0}, caught_signals = 0, dispatched_signals = 0}
sigterm = {data = 0x7ffff5ec1438, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x1000000ab, handle_queue = {0x6616e0, 0x7fffffffe6c0}, u = {fd = -5952, reserved = {0x7fffffffe8c0,
0x7ffff7de4c5c, 0x7fffffffe8e8, 0xd82b830}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410d60 <signal_handler>, signum = 15, tree_entry = {rbe_left = 0x0, rbe_right = 0x0,
rbe_parent = 0x7fffffffe6a0, rbe_color = 1}, caught_signals = 0, dispatched_signals = 0}
pool = {ctx = 0x648530, alloc = 0x4115c0 <mp_alloc>, free = 0x0}
engine = {resolver = {options = 0, opt_rr = 0x6485a0, trust_anchors = {root = 0x634e60, malloc = 0x411be0 <malloc_std>, free = 0x411bd0 <free_std>, baton = 0x0}, negative_anchors = {
root = 0x0, malloc = 0x411be0 <malloc_std>, free = 0x411bd0 <free_std>, baton = 0x0}, root_hints = {name = 0x6485d8 "", nsset = {root = 0x6486a1, malloc = 0x7ffff7bcb7b0 <mm_alloc>,
free = 0x7ffff7bcb7d0 <mm_free>, baton = 0x7fffffffe680}, key = 0x0, trust_anchor = 0x0, parent = 0x0, pool = 0x7fffffffe680}, cache = {db = 0x648cb8, api = 0x7ffff7dda300,
stats = {hit = 4133, miss = 2563, insert = 3802, delete = 0, txn_read = 1020, txn_write = 1316}}, cache_rtt = 0x649550, cache_rep = 0x659590, modules = 0x7fffffffeaf8,
pool = 0x7fffffffe680}, net = {loop = 0x7ffff799f980, endpoints = {root = 0x62b911, malloc = 0x411be0 <malloc_std>, free = 0x411bd0 <free_std>, baton = 0x0}}, modules = {at = 0x662750,
len = 9, cap = 10}, storage_registry = {at = 0x661930, len = 1, cap = 5}, pool = 0x7fffffffe680, L = 0x40000378}
```
https://gitlab.nic.cz/knot/knot-resolver/-/issues/39
fitbit.com doesn't load
2017-08-22T13:33:42+02:00
Ondřej Surý
fitbit.com doesn't load
`www.fitbit.com` doesn't load when kresd@127.0.0.1 is used. The `IN A` is resolved just fine, but the browser is waiting and waiting.
Simply changing the resolv.conf to use f.e. 64.6.64.6 makes the site work again.
`www.fitbit.com` doesn't load when kresd@127.0.0.1 is used. The `IN A` is resolved just fine, but the browser is waiting and waiting.
Simply changing the resolv.conf to use f.e. 64.6.64.6 makes the site work again.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/38
lib/iterate: do not trust in-bailiwick CNAME targets
2017-08-22T13:33:42+02:00
Ghost User
lib/iterate: do not trust in-bailiwick CNAME targets
The `*.name CNAME` or `DNAME` can be misused for in-bailiwick cache poisoning.
See https://tools.ietf.org/id/draft-weaver-dnsext-comprehensive-resolver-00.html
The `*.name CNAME` or `DNAME` can be misused for in-bailiwick cache poisoning.
See https://tools.ietf.org/id/draft-weaver-dnsext-comprehensive-resolver-00.html
https://gitlab.nic.cz/knot/knot-resolver/-/issues/37
lib: remember empty-nonterm as zone cuts
2022-04-08T16:14:00+02:00
Ghost User
lib: remember empty-nonterm as zone cuts
In some cases like `co.jp`, all queries below that are going to ask for it again.
They should be flagged as closest non-terminal and reuse authority's nameservers.
Example:
--------
* Query `A abcd.co.jp` (queries `jp., co.jp., a...
In some cases like `co.jp`, all queries below that are going to ask for it again.
They should be flagged as closest non-terminal and reuse authority's nameservers.
Example:
--------
* Query `A abcd.co.jp` (queries `jp., co.jp., abcd.co.jp`)
* Query `A efgh.co.jp` (queries `co.jp., efgh.co.jp`, while it should know that `co.jp` is an empty non-term)
https://gitlab.nic.cz/knot/knot-resolver/-/issues/35
daemon: fast retransmit
2022-04-08T16:14:02+02:00
Ghost User
daemon: fast retransmit
When scanning (NS score is unknown), it is likely that a server timeouts.
In this case, a query should go through the provided list and send queries in short intervals.
Once it gets an answer or TIMEOUT, it should stop.
When scanning (NS score is unknown), it is likely that a server timeouts.
In this case, a query should go through the provided list and send queries in short intervals.
Once it gets an answer or TIMEOUT, it should stop.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/34
lib: RFC2181 5.4.1. ranking rules in cache
2017-08-22T13:33:42+02:00
Ghost User
lib: RFC2181 5.4.1. ranking rules in cache
This is a step for BADCACHE and also correct solution to parent-child difference tests.
This is a step for BADCACHE and also correct solution to parent-child difference tests.
https://gitlab.nic.cz/knot/knot-resolver/-/issues/31
tests: test binary using socket_wrapper (cwrap)
2022-04-08T16:13:58+02:00
Grigorii Demidov
tests: test binary using socket_wrapper (cwrap)
Write guide to using integration tests with arbitrary dns-servers.
Write guide to using integration tests with arbitrary dns-servers.
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/30
modules/block: add qsource api, more actions (TC=1, log, ...)
2017-08-22T13:33:42+02:00
Ghost User
modules/block: add qsource api, more actions (TC=1, log, ...)
2015 Q3
https://gitlab.nic.cz/knot/knot-resolver/-/issues/29
test: extend with raw packets (+fuzzed) tests
2022-04-08T16:14:03+02:00
Ghost User
test: extend with raw packets (+fuzzed) tests
Depends on #5
To do:
* [ ] Support for raw queries in the .rpl files (http://unbound.net/svn/trunk/testdata/test_packets.1 .. 9)
This could look something like:
```
SCENARIO_BEGIN raw_queries
STEP 0 QUERY
ENTRY_BEGIN
RAW
000...
Depends on #5
To do:
* [ ] Support for raw queries in the .rpl files (http://unbound.net/svn/trunk/testdata/test_packets.1 .. 9)
This could look something like:
```
SCENARIO_BEGIN raw_queries
STEP 0 QUERY
ENTRY_BEGIN
RAW
00000000700240004aa200000204059801010402
ENTRY_END
STEP 1 CHECK_ANSWER
ENTRY_BEGIN
RAW
000080010000000000000000
ENTRY_END
```
If you just add the `RAW` parsing in the https://gitlab.labs.nic.cz/knot/resolver/blob/master/tests/test_integration.py#L44 and https://gitlab.labs.nic.cz/knot/resolver/blob/master/tests/pydnstest/scenario.py#L5 but that's just one way to do it.
2015 Q3
Grigorii Demidov
Grigorii Demidov
https://gitlab.nic.cz/knot/knot-resolver/-/issues/28
RFC 6303 - Locally Served DNS Zones
2017-08-22T13:33:43+02:00
Ondřej Surý
RFC 6303 - Locally Served DNS Zones
Unbound:
```
; <<>> DiG 9.9.5-9-Debian <<>> -p 6668 -x 10.0.0.1 @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57069
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ...
Unbound:
```
; <<>> DiG 9.9.5-9-Debian <<>> -p 6668 -x 10.0.0.1 @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57069
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.0.0.10.in-addr.arpa. IN PTR
;; AUTHORITY SECTION:
10.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800
;; Query time: 0 msec
;; SERVER: 127.0.0.1#6668(127.0.0.1)
;; WHEN: Fri Jun 12 10:58:26 CEST 2015
;; MSG SIZE rcvd: 109
```
PowerDNS:
```
; <<>> DiG 9.9.5-9-Debian <<>> -p 6669 -x 10.0.0.1 @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28227
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.0.0.10.in-addr.arpa. IN PTR
;; AUTHORITY SECTION:
10.in-addr.arpa. 420 IN SOA localhost. root. 1 604800 86400 2419200 604800
;; Query time: 0 msec
;; SERVER: 127.0.0.1#6669(127.0.0.1)
;; WHEN: Fri Jun 12 10:58:44 CEST 2015
;; MSG SIZE rcvd: 88
```
Bind 9:
```
; <<>> DiG 9.9.5-9-Debian <<>> -p 6666 -x 10.0.0.1 @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47227
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.0.0.10.in-addr.arpa. IN PTR
;; AUTHORITY SECTION:
10.IN-ADDR.ARPA. 86400 IN SOA 10.IN-ADDR.ARPA. . 0 28800 7200 604800 86400
;; Query time: 0 msec
;; SERVER: 127.0.0.1#6666(127.0.0.1)
;; WHEN: Fri Jun 12 11:00:57 CEST 2015
;; MSG SIZE rcvd: 100
```
kresd se zatím pořád dotazy posílá dál:
```
; <<>> DiG 9.9.5-9-Debian <<>> -p 6667 -x 10.0.0.1 @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21709
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.0.0.10.in-addr.arpa. IN PTR
;; AUTHORITY SECTION:
10.in-addr.arpa. 604800 IN SOA prisoner.iana.org. hostmaster.root-servers.org. 1 604800 60 604800 604800
;; Query time: 237 msec
;; SERVER: 127.0.0.1#6667(127.0.0.1)
;; WHEN: Fri Jun 12 11:01:44 CEST 2015
;; MSG SIZE rcvd: 127
```
2015 Q2
https://gitlab.nic.cz/knot/knot-resolver/-/issues/22
daemon: timeout timer for qr_task ioreq
2017-08-22T13:33:43+02:00
Ghost User
daemon: timeout timer for qr_task ioreq
Currently there is only platform-defined timeout for I/O requests (connect, udp_send, write). In most cases this works very well since ICMP is leveraged for quick host inavailability, but if a datagram simply gets lost, it might wait for...
Currently there is only platform-defined timeout for I/O requests (connect, udp_send, write). In most cases this works very well since ICMP is leveraged for quick host inavailability, but if a datagram simply gets lost, it might wait for indefinite time.
We need to set a timer after each I/O request and clear it on completion.
See [uv_timer_t](http://docs.libuv.org/en/latest/timer.html)