Knot Resolver issueshttps://gitlab.nic.cz/knot/knot-resolver/-/issues2017-08-22T13:33:34+02:00https://gitlab.nic.cz/knot/knot-resolver/-/issues/141Resolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL2017-08-22T13:33:34+02:00Ondřej SurýResolution of `*.cloudfiles.rackspacecloud.com. IN A` fails with SERVFAIL```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
---...```
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | bind:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | bind ^------------------
>> c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A <<
> knot | unbound:
rcode: 2 | 0
> differ: Count of responses.
;ANSWER [1]
ANSWER [2]
a1383.dscg10.akamai.net. IN A 2.21.74.33
a1383.dscg10.akamai.net. IN A 2.21.74.51
-------------^ knot | unbound ^------------------
```
```
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 25787
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; c0388858.cdn2.cloudfiles.rackspacecloud.com. IN A
;; Received 72 B
;; Time 2017-01-24 13:48:24 CET
;; From ::1@38267(UDP) in 1719.0 ms
```
clear cache log:
```
[ 0][plan] plan 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A'
[56954][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56954][resl] => using root hints
[44674][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[44674][plan] plan '.' type 'DNSKEY'
[30973][iter] '.' type 'DNSKEY' id was assigned, parent id 44674
[30973][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[30973][iter] <= rcode: NOERROR
[30973][vldr] <= parent: updating DNSKEY
[30973][vldr] <= answer valid, OK
[30973][resl] <= server: '2001:dc3::35' rtt: 18 ms
[29982][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[29982][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[29982][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[29982][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[29982][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[29982][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[29982][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[29982][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[29982][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[29982][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[29982][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[29982][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[29982][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[29982][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[29982][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[29982][iter] <= referral response, follow
[29982][vldr] <= DS: OK
[29982][vldr] <= answer valid, OK
[29982][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[22599][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[22599][plan] plan 'com.' type 'DNSKEY'
[ 9678][iter] 'com.' type 'DNSKEY' id was assigned, parent id 22599
[ 9678][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[ 9678][iter] <= rcode: NOERROR
[ 9678][vldr] <= parent: updating DNSKEY
[ 9678][vldr] <= answer valid, OK
[ 9678][resl] <= server: '192.55.83.30' rtt: 34 ms
[49039][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[49039][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'rACkSPACecLouD.cOM.' type: 'NS' proto: 'udp'
[49039][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[49039][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[49039][iter] <= referral response, follow
[49039][vldr] <= DS doesn't exist, going insecure
[49039][vldr] <= answer valid, OK
[49039][resl] <= server: '192.41.162.30' rtt: 115 ms
[51213][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[51213][resl] => querying: '65.61.188.4' score: 10 zone cut: 'rackspacecloud.com.' m12n: 'CLoUDFIleS.RacKsPAcECloUD.cOM.' type: 'NS' proto: 'udp'
[51213][iter] <= referral response, follow
[51213][resl] <= server: '65.61.188.4' rtt: 31 ms
[33844][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[33844][plan] plan 'www-gtm-ord1.rackspace.com.' type 'AAAA'
[62064][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[58017][plan] plan 'm.gtld-servers.net.' type 'AAAA'
[45856][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[45856][resl] => using root hints
[ 4235][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[ 4235][resl] >< TA: '.'
[ 4235][plan] plan '.' type 'DNSKEY'
[33383][iter] '.' type 'DNSKEY' id was assigned, parent id 4235
[33383][ rc ] => satisfied from cache
[33383][iter] <= rcode: NOERROR
[33383][vldr] <= parent: updating DNSKEY
[33383][vldr] <= answer valid, OK
[53600][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[53600][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'NeT.' type: 'NS' proto: 'udp'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[53600][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[53600][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[53600][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[53600][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[53600][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[53600][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[53600][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[53600][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[53600][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[53600][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[53600][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[53600][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[53600][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[53600][iter] <= referral response, follow
[53600][vldr] <= DS: OK
[53600][vldr] <= answer valid, OK
[53600][resl] <= server: '2001:7fd::1' rtt: 5 ms
[63179][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[63179][plan] plan 'net.' type 'DNSKEY'
[64080][iter] 'net.' type 'DNSKEY' id was assigned, parent id 63179
[64080][resl] => querying: '192.52.178.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][resl] => querying: '192.48.79.30' score: 10 zone cut: 'net.' m12n: 'neT.' type: 'DNSKEY' proto: 'udp'
[64080][iter] <= rcode: NOERROR
[64080][vldr] <= parent: updating DNSKEY
[64080][vldr] <= answer valid, OK
[64080][resl] <= server: '192.52.178.30' rtt: 264 ms
[64080][resl] <= server: '192.48.79.30' rtt: >=14 ms
[43576][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[43576][resl] => querying: '192.43.172.30' score: 10 zone cut: 'net.' m12n: 'gtld-seRVeRs.NeT.' type: 'NS' proto: 'udp'
[43576][iter] <= referral response, follow
[43576][vldr] <= DS doesn't exist, going insecure
[43576][vldr] <= parent: updating DS
[43576][vldr] <= answer valid, OK
[43576][resl] <= server: '192.43.172.30' rtt: 28 ms
[27496][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[27496][plan] plan 'av4.nstld.com.' type 'AAAA'
[27534][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[22969][resl] => querying: '192.54.112.30' score: 10 zone cut: 'com.' m12n: 'nsTLd.COm.' type: 'NS' proto: 'udp'
[22969][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[22969][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[22969][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[22969][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[22969][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[22969][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[22969][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[22969][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[22969][iter] <= referral response, follow
[22969][resl] <= server: '192.54.112.30' rtt: 28 ms
[10652][iter] 'av4.nstld.com.' type 'AAAA' id was assigned, parent id 27496
[10652][resl] => querying: '2001:500:127::30' score: 10 zone cut: 'nstld.com.' m12n: 'aV4.nSTLd.cOM.' type: 'AAAA' proto: 'udp'
[10652][iter] <= using glue for 'av3.nstld.com.': '192.82.133.30'
[10652][iter] <= using glue for 'av3.nstld.com.': '2001:500:126::30'
[10652][iter] <= using glue for 'av1.nstld.com.': '192.42.177.30'
[10652][iter] <= using glue for 'av1.nstld.com.': '2001:500:124::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '2001:500:127::30'
[10652][iter] <= using glue for 'av4.nstld.com.': '192.82.134.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '192.42.178.30'
[10652][iter] <= using glue for 'av2.nstld.com.': '2001:500:125::30'
[10652][iter] <= rcode: NOERROR
[10652][resl] <= server: '2001:500:127::30' rtt: 19 ms
[61253][iter] 'm.gtld-servers.net.' type 'AAAA' id was assigned, parent id 58017
[61253][resl] => querying: '2001:500:127::30' score: 19 zone cut: 'gtld-servers.net.' m12n: 'M.gTld-SERVerS.NEt.' type: 'AAAA' proto: 'udp'
[61253][iter] <= rcode: NOERROR
[61253][ pc ] => answer cached for TTL=900
[61253][resl] <= server: '2001:500:127::30' rtt: 18 ms
[51040][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[51040][plan] plan 'm.gtld-servers.net.' type 'A'
[26418][iter] 'm.gtld-servers.net.' type 'A' id was assigned, parent id 51040
[26418][ rc ] => satisfied from cache
[26418][iter] <= rcode: NOERROR
[26418][vldr] <= cached insecure response, going insecure
[12543][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[12543][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'racKSPaCe.COm.' type: 'NS' proto: 'udp'
[12543][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[12543][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[12543][iter] <= referral response, follow
[12543][resl] <= server: '192.55.83.30' rtt: 34 ms
[60529][iter] 'www-gtm-ord1.rackspace.com.' type 'AAAA' id was assigned, parent id 33844
[60529][resl] => querying: '69.20.95.4' score: 10 zone cut: 'rackspace.com.' m12n: 'wWW-gTM-oRD1.raCksPAcE.CoM.' type: 'AAAA' proto: 'udp'
[60529][iter] <= rcode: NOERROR
[60529][ pc ] => answer cached for TTL=300
[60529][resl] <= server: '69.20.95.4' rtt: 107 ms
[56516][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56516][plan] plan 'www-gtm-ord1.rackspace.com.' type 'A'
[ 4871][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][iter] 'www-gtm-ord1.rackspace.com.' type 'A' id was assigned, parent id 56516
[ 3085][resl] => querying: '65.61.188.4' score: 31 zone cut: 'rackspace.com.' m12n: 'WWw-gtm-OrD1.RAckSPACE.CoM.' type: 'A' proto: 'udp'
[ 3085][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 3085][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 3085][iter] <= rcode: NOERROR
[ 3085][resl] <= server: '65.61.188.4' rtt: 27 ms
[41180][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[41180][resl] => querying: '173.203.44.119' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'cdN2.CLoudfileS.rACkSPacECLoud.com.' type: 'NS' proto: 'udp'
[41180][iter] <= rcode: REFUSED
[41180][resl] <= server: '173.203.44.119' rtt: 121 ms
[52045][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[52045][resl] => querying: '173.203.44.119' score: 221 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.CLOuDfiLes.RacksPAceCloUd.COm.' type: 'A' proto: 'udp'
[52045][iter] <= rcode: REFUSED
[52045][resl] <= server: '173.203.44.119' rtt: 118 ms
[58945][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[58945][resl] => querying: '173.203.44.119' score: 269 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.cLOudFIlEs.RAcKspACecLOUd.CoM.' type: 'A' proto: 'udp'
[58945][iter] <= rcode: REFUSED
[58945][resl] <= server: '173.203.44.119' rtt: 119 ms
[ 1543][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1543][resl] => querying: '173.203.44.119' score: 294 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.CDN2.clOUDfiLeS.RAckSpaCeclOUd.COM.' type: 'A' proto: 'udp'
[ 1543][iter] <= rcode: REFUSED
[ 1543][resl] => server: '173.203.44.119' flagged as 'bad'
[34164][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[34164][resl] => unresolvable NS address, bailing out
[34164][plan] plan 'www-gtm-iad2.rackspace.com.' type 'AAAA'
[ 5083][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][iter] 'www-gtm-iad2.rackspace.com.' type 'AAAA' id was assigned, parent id 34164
[32261][resl] => querying: '65.61.188.4' score: 29 zone cut: 'rackspace.com.' m12n: 'wWw-Gtm-iaD2.RACksPAcE.COM.' type: 'AAAA' proto: 'udp'
[32261][iter] <= rcode: NOERROR
[32261][ pc ] => answer cached for TTL=300
[32261][resl] <= server: '65.61.188.4' rtt: 35 ms
[ 1144][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[ 1144][plan] plan 'www-gtm-iad2.rackspace.com.' type 'A'
[56948][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][iter] 'www-gtm-iad2.rackspace.com.' type 'A' id was assigned, parent id 1144
[ 4816][resl] => querying: '65.61.188.4' score: 32 zone cut: 'rackspace.com.' m12n: 'WWw-GtM-iAD2.rACKSpACe.coM.' type: 'A' proto: 'udp'
[ 4816][iter] <= using glue for 'ns2.rackspace.com.': '65.61.188.4'
[ 4816][iter] <= using glue for 'ns.rackspace.com.': '69.20.95.4'
[ 4816][iter] <= rcode: NOERROR
[ 4816][resl] <= server: '65.61.188.4' rtt: 27 ms
[23391][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[23391][resl] => querying: '207.97.206.40' score: 10 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.Cdn2.clOUDfiLEs.racKspaceClOuD.COm.' type: 'A' proto: 'udp'
[23391][iter] <= rcode: REFUSED
[23391][resl] <= server: '207.97.206.40' rtt: 107 ms
[15551][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[15551][resl] => querying: '207.97.206.40' score: 207 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.clouDfilES.RAcKSpACEcloUD.CoM.' type: 'A' proto: 'udp'
[15551][iter] <= rcode: REFUSED
[15551][resl] <= server: '207.97.206.40' rtt: 108 ms
[56069][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[56069][resl] => querying: '207.97.206.40' score: 257 zone cut: 'wip.rackspacecloud.com.' m12n: 'c0388858.CDN2.ClouDFiles.RaCkspAceCloud.cOM.' type: 'A' proto: 'udp'
[56069][iter] <= rcode: REFUSED
[56069][resl] <= server: '207.97.206.40' rtt: 111 ms
[62422][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[62422][resl] => querying: '207.97.206.40' score: 284 zone cut: 'wip.rackspacecloud.com.' m12n: 'C0388858.cDn2.ClOuDfIles.RaCkSpaCECLouD.CoM.' type: 'A' proto: 'udp'
[62422][iter] <= rcode: REFUSED
[62422][resl] => server: '207.97.206.40' flagged as 'bad'
[24149][iter] 'c0388858.cdn2.cloudfiles.rackspacecloud.com.' type 'A' id was assigned, parent id 0
[24149][resl] => unresolvable NS address, bailing out
[24149][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 12, mempool: 164000 B
```1.2.2 patch releaseIvana KrumlovaIvana Krumlovahttps://gitlab.nic.cz/knot/knot-resolver/-/issues/140Resolution of `p7677.cdngc.net.` fails with SERVFAIL2017-04-05T16:20:17+02:00Ondřej SurýResolution of `p7677.cdngc.net.` fails with SERVFAIL```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 54558
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
...```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 54558
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; Received 44 B
;; Time 2017-01-24 13:45:33 CET
;; From ::1@38267(UDP) in 687.3 ms
```
vs
```
$ dig +dnssec +multi +time=60 +retry=1 @8.8.8.8 IN A p7677.cdngc.net.
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 20458
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 1; ADDITIONAL: 1
;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused
;; QUESTION SECTION:
;; p7677.cdngc.net. IN A
;; AUTHORITY SECTION:
cdngc.net. 119 IN SOA ns1.cdngc.net. noc.pantherexpress.net. (
2016021700 ; serial
1200 ; refresh
120 ; retry
86400 ; expire
120 ; minimum
)
;; Received 103 B
;; Time 2017-01-24 13:46:05 CET
;; From 8.8.8.8@53(UDP) in 28.8 ms
```
clear cache log:
```
[ 0][plan] plan 'p7677.cdngc.net.' type 'A'
[52139][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[52139][resl] => using root hints
[21123][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[21123][plan] plan '.' type 'DNSKEY'
[63279][iter] '.' type 'DNSKEY' id was assigned, parent id 21123
[63279][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[63279][iter] <= rcode: NOERROR
[63279][vldr] <= parent: updating DNSKEY
[63279][vldr] <= answer valid, OK
[63279][resl] <= server: '2001:dc3::35' rtt: 18 ms
[59716][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[59716][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'net.' type: 'NS' proto: 'udp'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[59716][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[59716][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[59716][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[59716][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[59716][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[59716][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[59716][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[59716][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[59716][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[59716][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[59716][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[59716][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[59716][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[59716][iter] <= referral response, follow
[59716][vldr] <= DS: OK
[59716][vldr] <= answer valid, OK
[59716][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[12204][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[12204][plan] plan 'net.' type 'DNSKEY'
[43582][iter] 'net.' type 'DNSKEY' id was assigned, parent id 12204
[43582][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'nET.' type: 'DNSKEY' proto: 'udp'
[43582][iter] <= rcode: NOERROR
[43582][vldr] <= parent: updating DNSKEY
[43582][vldr] <= answer valid, OK
[43582][resl] <= server: '192.55.83.30' rtt: 34 ms
[38328][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38328][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'cdngC.Net.' type: 'NS' proto: 'udp'
[38328][iter] <= referral response, follow
[38328][vldr] <= DS doesn't exist, going insecure
[38328][vldr] <= answer valid, OK
[38328][resl] <= server: '192.41.162.30' rtt: 113 ms
[57075][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[57075][plan] plan 'ns4.panthercdn.com.' type 'AAAA'
[46349][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[46349][resl] => using root hints
[42721][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[42721][resl] >< TA: '.'
[42721][plan] plan '.' type 'DNSKEY'
[54368][iter] '.' type 'DNSKEY' id was assigned, parent id 42721
[54368][ rc ] => satisfied from cache
[54368][iter] <= rcode: NOERROR
[54368][vldr] <= parent: updating DNSKEY
[54368][vldr] <= answer valid, OK
[61820][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[61820][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'CoM.' type: 'NS' proto: 'udp'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[61820][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[61820][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[61820][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[61820][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[61820][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[61820][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[61820][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[61820][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[61820][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[61820][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[61820][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[61820][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[61820][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[61820][iter] <= referral response, follow
[61820][vldr] <= DS: OK
[61820][vldr] <= answer valid, OK
[61820][resl] <= server: '2001:7fd::1' rtt: 2 ms
[43817][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[43817][plan] plan 'com.' type 'DNSKEY'
[57985][iter] 'com.' type 'DNSKEY' id was assigned, parent id 43817
[57985][resl] => querying: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][resl] => querying: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'COM.' type: 'DNSKEY' proto: 'udp'
[57985][iter] <= rcode: NOERROR
[57985][vldr] <= parent: updating DNSKEY
[57985][vldr] <= answer valid, OK
[57985][resl] <= server: '192.52.178.30' rtt: 267 ms
[57985][resl] <= server: '192.48.79.30' rtt: >=17 ms
[48815][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[48815][resl] => querying: '192.55.83.30' score: 34 zone cut: 'com.' m12n: 'PANTheRCDn.cOM.' type: 'NS' proto: 'udp'
[48815][iter] <= using glue for 'ns3.panthercdn.com.': '174.35.89.33'
[48815][iter] <= using glue for 'ns4.panthercdn.com.': '174.35.49.33'
[48815][iter] <= referral response, follow
[48815][vldr] <= DS doesn't exist, going insecure
[48815][vldr] <= parent: updating DS
[48815][vldr] <= answer valid, OK
[48815][resl] <= server: '192.55.83.30' rtt: 34 ms
[26282][iter] 'ns4.panthercdn.com.' type 'AAAA' id was assigned, parent id 57075
[26282][resl] => querying: '174.35.49.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'Ns4.PANtheRCDn.COm.' type: 'AAAA' proto: 'udp'
[26282][iter] <= rcode: NOERROR
[26282][ pc ] => answer cached for TTL=5
[26282][resl] <= server: '174.35.49.33' rtt: 21 ms
[49339][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[49339][plan] plan 'ns4.panthercdn.com.' type 'A'
[51066][iter] 'ns4.panthercdn.com.' type 'A' id was assigned, parent id 49339
[51066][ rc ] => satisfied from cache
[51066][iter] <= rcode: NOERROR
[51066][vldr] <= cached insecure response, going insecure
[24570][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24570][resl] => querying: '174.35.49.33' score: 21 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgc.net.' type: 'A' proto: 'udp'
[24570][iter] <= rcode: REFUSED
[24570][resl] <= server: '174.35.49.33' rtt: 21 ms
[ 9998][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[ 9998][resl] => querying: '174.35.49.33' score: 121 zone cut: 'cdngc.net.' m12n: 'P7677.CDngC.NEt.' type: 'A' proto: 'udp'
[ 9998][iter] <= rcode: REFUSED
[ 9998][resl] <= server: '174.35.49.33' rtt: 21 ms
[40285][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[40285][resl] => querying: '174.35.49.33' score: 171 zone cut: 'cdngc.net.' m12n: 'P7677.cDNgC.neT.' type: 'A' proto: 'udp'
[40285][iter] <= rcode: REFUSED
[40285][resl] <= server: '174.35.49.33' rtt: 20 ms
[56211][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[56211][resl] => querying: '174.35.49.33' score: 195 zone cut: 'cdngc.net.' m12n: 'P7677.CdNGc.NEt.' type: 'A' proto: 'udp'
[56211][iter] <= rcode: REFUSED
[56211][resl] => server: '174.35.49.33' flagged as 'bad'
[23576][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[23576][resl] => unresolvable NS address, bailing out
[23576][plan] plan 'ns3.panthercdn.com.' type 'AAAA'
[29290][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][iter] 'ns3.panthercdn.com.' type 'AAAA' id was assigned, parent id 23576
[48411][resl] => querying: '174.35.89.33' score: 10 zone cut: 'panthercdn.com.' m12n: 'nS3.PaNtherCdn.Com.' type: 'AAAA' proto: 'udp'
[48411][iter] <= rcode: NOERROR
[48411][ pc ] => answer cached for TTL=5
[48411][resl] <= server: '174.35.89.33' rtt: 21 ms
[38390][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[38390][plan] plan 'ns3.panthercdn.com.' type 'A'
[19349][iter] 'ns3.panthercdn.com.' type 'A' id was assigned, parent id 38390
[19349][ rc ] => satisfied from cache
[19349][iter] <= rcode: NOERROR
[19349][vldr] <= cached insecure response, going insecure
[24405][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[24405][resl] => querying: '174.35.89.33' score: 21 zone cut: 'cdngc.net.' m12n: 'p7677.CDnGC.neT.' type: 'A' proto: 'udp'
[24405][iter] <= rcode: REFUSED
[24405][resl] <= server: '174.35.89.33' rtt: 21 ms
[42424][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[42424][resl] => querying: '174.35.89.33' score: 121 zone cut: 'cdngc.net.' m12n: 'p7677.CdNgc.net.' type: 'A' proto: 'udp'
[42424][iter] <= rcode: REFUSED
[42424][resl] <= server: '174.35.89.33' rtt: 20 ms
[33417][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[33417][resl] => querying: '174.35.89.33' score: 170 zone cut: 'cdngc.net.' m12n: 'p7677.CdNGc.net.' type: 'A' proto: 'udp'
[33417][iter] <= rcode: REFUSED
[33417][resl] <= server: '174.35.89.33' rtt: 21 ms
[53032][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[53032][resl] => querying: '174.35.89.33' score: 195 zone cut: 'cdngc.net.' m12n: 'p7677.CDNgC.NeT.' type: 'A' proto: 'udp'
[53032][iter] <= rcode: REFUSED
[53032][resl] => server: '174.35.89.33' flagged as 'bad'
[11267][iter] 'p7677.cdngc.net.' type 'A' id was assigned, parent id 0
[11267][resl] => unresolvable NS address, bailing out
[11267][resl] => no valid NS left
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B
```1.3.0 releaseVladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/138Resolution of `supercore.s3.amazonaws.com.` fails with SERVFAIL2017-08-22T13:33:34+02:00Ondřej SurýResolution of `supercore.s3.amazonaws.com.` fails with SERVFAIL```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 supercore.s3.amazonaws.com.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 39486
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTIO...```
$ dig +dnssec +multi +time=60 +retry=1 -p 38267 @::1 supercore.s3.amazonaws.com.
;; ->>HEADER<<- opcode: QUERY; status: SERVFAIL; id: 39486
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; supercore.s3.amazonaws.com. IN A
;; Received 44 B
;; Time 2017-01-24 13:36:20 CET
;; From ::1@38267(UDP) in 580.0 ms
```
Clear cache log:
```
[ 0][plan] plan 'supercore.s3.amazonaws.com.' type 'A'
[48058][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[48058][resl] => using root hints
[13001][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13001][plan] plan '.' type 'DNSKEY'
[12426][iter] '.' type 'DNSKEY' id was assigned, parent id 13001
[12426][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[12426][iter] <= rcode: NOERROR
[12426][vldr] <= parent: updating DNSKEY
[12426][vldr] <= answer valid, OK
[12426][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19666][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19666][resl] => querying: '2001:dc3::35' score: 19 zone cut: '.' m12n: 'cOm.' type: 'NS' proto: 'udp'
[19666][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[19666][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[19666][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[19666][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[19666][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[19666][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[19666][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[19666][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[19666][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[19666][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[19666][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[19666][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[19666][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[19666][iter] <= referral response, follow
[19666][vldr] <= DS: OK
[19666][vldr] <= answer valid, OK
[19666][resl] <= server: '2001:dc3::35' rtt: 19 ms
[19695][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[19695][plan] plan 'com.' type 'DNSKEY'
[39453][iter] 'com.' type 'DNSKEY' id was assigned, parent id 19695
[39453][resl] => querying: '192.55.83.30' score: 10 zone cut: 'com.' m12n: 'com.' type: 'DNSKEY' proto: 'udp'
[39453][iter] <= rcode: NOERROR
[39453][vldr] <= parent: updating DNSKEY
[39453][vldr] <= answer valid, OK
[39453][resl] <= server: '192.55.83.30' rtt: 35 ms
[ 5358][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5358][resl] => querying: '192.41.162.30' score: 10 zone cut: 'com.' m12n: 'AmAzOnaWS.COM.' type: 'NS' proto: 'udp'
[ 5358][iter] <= using glue for 'u1.amazonaws.com.': '156.154.64.10'
[ 5358][iter] <= using glue for 'u2.amazonaws.com.': '156.154.65.10'
[ 5358][iter] <= using glue for 'r1.amazonaws.com.': '205.251.192.27'
[ 5358][iter] <= using glue for 'r2.amazonaws.com.': '205.251.195.199'
[ 5358][iter] <= referral response, follow
[ 5358][vldr] <= DS doesn't exist, going insecure
[ 5358][vldr] <= answer valid, OK
[ 5358][resl] <= server: '192.41.162.30' rtt: 115 ms
[17677][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[17677][resl] => querying: '156.154.65.10' score: 10 zone cut: 'amazonaws.com.' m12n: 's3.aMAZONAwS.Com.' type: 'NS' proto: 'udp'
[17677][iter] <= referral response, follow
[17677][resl] <= server: '156.154.65.10' rtt: 16 ms
[60967][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[60967][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'AAAA'
[ 9404][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 9404][resl] => using root hints
[27743][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[27743][resl] >< TA: '.'
[27743][plan] plan '.' type 'DNSKEY'
[38153][iter] '.' type 'DNSKEY' id was assigned, parent id 27743
[38153][ rc ] => satisfied from cache
[38153][iter] <= rcode: NOERROR
[38153][vldr] <= parent: updating DNSKEY
[38153][vldr] <= answer valid, OK
[43424][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[43424][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'UK.' type: 'NS' proto: 'udp'
[43424][iter] <= using glue for 'nsa.nic.uk.': '156.154.100.3'
[43424][iter] <= using glue for 'nsa.nic.uk.': '2001:502:ad09::3'
[43424][iter] <= using glue for 'nsb.nic.uk.': '156.154.101.3'
[43424][iter] <= using glue for 'nsc.nic.uk.': '156.154.102.3'
[43424][iter] <= using glue for 'nsd.nic.uk.': '156.154.103.3'
[43424][iter] <= using glue for 'dns1.nic.uk.': '213.248.216.1'
[43424][iter] <= using glue for 'dns1.nic.uk.': '2a01:618:400::1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '103.49.80.1'
[43424][iter] <= using glue for 'dns2.nic.uk.': '2401:fd80:400::1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '213.248.220.1'
[43424][iter] <= using glue for 'dns3.nic.uk.': '2a01:618:404::1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '43.230.48.1'
[43424][iter] <= using glue for 'dns4.nic.uk.': '2401:fd80:404::1'
[43424][iter] <= referral response, follow
[43424][vldr] <= DS: OK
[43424][vldr] <= answer valid, OK
[43424][resl] <= server: '2001:500:9f::42' rtt: 2 ms
[32969][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32969][plan] plan 'uk.' type 'DNSKEY'
[11309][iter] 'uk.' type 'DNSKEY' id was assigned, parent id 32969
[11309][resl] => querying: '2401:fd80:404::1' score: 10 zone cut: 'uk.' m12n: 'uk.' type: 'DNSKEY' proto: 'udp'
[11309][iter] <= rcode: NOERROR
[11309][vldr] <= parent: updating DNSKEY
[11309][vldr] <= answer valid, OK
[11309][resl] <= server: '2401:fd80:404::1' rtt: 19 ms
[17293][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[17293][resl] => querying: '2a01:618:404::1' score: 10 zone cut: 'uk.' m12n: 'co.uK.' type: 'NS' proto: 'udp'
[17293][iter] <= rcode: NOERROR
[17293][iter] <= found cut, retrying with non-minimized name
[17293][resl] <= server: '2a01:618:404::1' rtt: 18 ms
[56151][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[56151][resl] => querying: '2401:fd80:400::1' score: 10 zone cut: 'uk.' m12n: 'Ns-1726.AWsDNs-23.Co.uK.' type: 'AAAA' proto: 'udp'
[56151][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[56151][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[56151][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[56151][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[56151][iter] <= referral response, follow
[56151][vldr] >< cut changed (new signer), needs revalidation
[56151][resl] <= server: '2401:fd80:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[23696][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[24246][resl] => querying: '2a01:618:400::1' score: 10 zone cut: 'uk.' m12n: 'cO.uK.' type: 'DS' proto: 'udp'
[24246][iter] <= rcode: NOERROR
[24246][resl] <= server: '2a01:618:400::1' rtt: 29 ms
[56151][plan] plan 'co.uk.' type 'DS'
[54876][iter] 'co.uk.' type 'DS' id was assigned, parent id 56151
[54876][ rc ] => satisfied from cache
[54876][iter] <= rcode: NOERROR
[54876][vldr] <= cached insecure response, going insecure
[56151][resl] => resuming yielded answer
[32610][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[32610][resl] => querying: '156.154.103.3' score: 10 zone cut: 'co.uk.' m12n: 'nS-1726.awsdnS-23.co.uk.' type: 'AAAA' proto: 'udp'
[32610][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[32610][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[32610][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[32610][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[32610][iter] <= referral response, follow
[32610][resl] <= server: '156.154.103.3' rtt: 21 ms
[ 7507][iter] 'ns-1726.awsdns-23.co.uk.' type 'AAAA' id was assigned, parent id 60967
[ 7507][resl] => querying: '205.251.199.27' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'ns-1726.AWSDns-23.CO.UK.' type: 'AAAA' proto: 'udp'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[ 7507][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[ 7507][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[ 7507][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[ 7507][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[ 7507][iter] <= rcode: NOERROR
[ 7507][resl] <= server: '205.251.199.27' rtt: 38 ms
[33647][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[33647][resl] => querying: '2600:9000:5306:be00::1' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'SuPErCore.S3.AMaZonAws.cOm.' type: 'A' proto: 'udp'
[33647][iter] <= rcode: REFUSED
[33647][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[ 1013][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 1013][resl] => querying: '2600:9000:5306:be00::1' score: 114 zone cut: 's3-1.amazonaws.com.' m12n: 'suPercORE.S3.AmAzOnAws.coM.' type: 'A' proto: 'udp'
[ 1013][iter] <= rcode: REFUSED
[ 1013][resl] <= server: '2600:9000:5306:be00::1' rtt: 14 ms
[57855][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[57855][resl] => querying: '2600:9000:5306:be00::1' score: 164 zone cut: 's3-1.amazonaws.com.' m12n: 'supErcOre.s3.AmazoNaWS.coM.' type: 'A' proto: 'udp'
[57855][iter] <= rcode: REFUSED
[57855][resl] <= server: '2600:9000:5306:be00::1' rtt: 13 ms
[27306][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[27306][resl] => querying: '2600:9000:5306:be00::1' score: 188 zone cut: 's3-1.amazonaws.com.' m12n: 'SupeRcOre.s3.AmAzOnaWs.COM.' type: 'A' proto: 'udp'
[27306][iter] <= rcode: REFUSED
[27306][resl] => server: '2600:9000:5306:be00::1' flagged as 'bad'
[45229][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[45229][plan] plan 'ns-1726.awsdns-23.co.uk.' type 'A'
[ 1731][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][iter] 'ns-1726.awsdns-23.co.uk.' type 'A' id was assigned, parent id 45229
[49901][resl] => querying: '2600:9000:5307:1b00::1' score: 10 zone cut: 'awsdns-23.co.uk.' m12n: 'nS-1726.AWsdnS-23.cO.Uk.' type: 'A' proto: 'udp'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '205.251.197.218'
[49901][iter] <= using glue for 'g-ns-1498.awsdns-23.co.uk.': '2600:9000:5305:da00::1'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '205.251.199.27'
[49901][iter] <= using glue for 'g-ns-1819.awsdns-23.co.uk.': '2600:9000:5307:1b00::1'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '205.251.193.87'
[49901][iter] <= using glue for 'g-ns-343.awsdns-23.co.uk.': '2600:9000:5301:5700::1'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '205.251.195.151'
[49901][iter] <= using glue for 'g-ns-919.awsdns-23.co.uk.': '2600:9000:5303:9700::1'
[49901][iter] <= rcode: NOERROR
[49901][resl] <= server: '2600:9000:5307:1b00::1' rtt: 15 ms
[ 5832][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[ 5832][resl] => querying: '205.251.198.190' score: 10 zone cut: 's3-1.amazonaws.com.' m12n: 'suPERcORE.s3.AmAzonAws.coM.' type: 'A' proto: 'udp'
[ 5832][iter] <= rcode: REFUSED
[ 5832][resl] <= server: '205.251.198.190' rtt: 32 ms
[61034][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[61034][resl] => querying: '205.251.198.190' score: 132 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPercorE.S3.AmAZOnAws.Com.' type: 'A' proto: 'udp'
[61034][iter] <= rcode: REFUSED
[61034][resl] <= server: '205.251.198.190' rtt: 31 ms
[59107][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[59107][resl] => querying: '205.251.198.190' score: 181 zone cut: 's3-1.amazonaws.com.' m12n: 'SUPERcoRe.s3.AMazonAWS.Com.' type: 'A' proto: 'udp'
[59107][iter] <= rcode: REFUSED
[59107][resl] <= server: '205.251.198.190' rtt: 37 ms
[46872][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[46872][resl] => querying: '205.251.198.190' score: 209 zone cut: 's3-1.amazonaws.com.' m12n: 'sUPERCoRe.S3.amAZonaWs.coM.' type: 'A' proto: 'udp'
[46872][iter] <= rcode: REFUSED
[46872][resl] => server: '205.251.198.190' flagged as 'bad'
[13397][iter] 'supercore.s3.amazonaws.com.' type 'A' id was assigned, parent id 0
[13397][resl] => unresolvable NS address, bailing out
[13397][plan] plan 'ns-1084.awsdns-07.org.' type 'AAAA'
[18528][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[18528][resl] => using root hints
[ 4069][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[ 4069][resl] >< TA: '.'
[ 4069][plan] plan '.' type 'DNSKEY'
[59431][iter] '.' type 'DNSKEY' id was assigned, parent id 4069
[59431][ rc ] => satisfied from cache
[59431][iter] <= rcode: NOERROR
[59431][vldr] <= parent: updating DNSKEY
[59431][vldr] <= answer valid, OK
[51048][iter] 'ns-1084.awsdns-07.org.' type 'AAAA' id was assigned, parent id 13397
[51048][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'oRg.' type: 'NS' proto: 'udp'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '199.19.56.1'
[51048][iter] <= using glue for 'a0.org.afilias-nst.info.': '2001:500:e::1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '199.249.112.1'
[51048][iter] <= using glue for 'a2.org.afilias-nst.info.': '2001:500:40::1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '199.19.54.1'
[51048][iter] <= using glue for 'b0.org.afilias-nst.org.': '2001:500:c::1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '199.249.120.1'
[51048][iter] <= using glue for 'b2.org.afilias-nst.org.': '2001:500:48::1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '199.19.53.1'
[51048][iter] <= using glue for 'c0.org.afilias-nst.info.': '2001:500:b::1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '199.19.57.1'
[51048][iter] <= using glue for 'd0.org.afilias-nst.org.': '2001:500:f::1'
[51048][iter] <= referral response, follow
[ 0][resl] finished: 8, queries: 9, mempool: 164000 B
```1.2.0 releaseIvana KrumlovaIvana Krumlovahttps://gitlab.nic.cz/knot/knot-resolver/-/issues/131pypi.fiber.consulting returns SERVFAIL on first try2017-08-22T13:33:34+02:00Ondřej Surýpypi.fiber.consulting returns SERVFAIL on first tryProbably iteration limit or something like that:
Clean cache log:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[23288][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[23288][resl] => using root hint...Probably iteration limit or something like that:
Clean cache log:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[23288][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[23288][resl] => using root hints
[47790][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[47790][plan] plan '.' type 'DNSKEY'
[10800][iter] '.' type 'DNSKEY' id was assigned, parent id 47790
[10800][resl] => querying: '2001:dc3::35' score: 10 zone cut: '.' m12n: '.' type: 'DNSKEY' proto: 'udp'
[10800][iter] <= rcode: NOERROR
[10800][vldr] <= parent: updating DNSKEY
[10800][vldr] <= answer valid, OK
[10800][resl] <= server: '2001:dc3::35' rtt: 19 ms
[24754][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[24754][resl] => querying: '2001:500:9f::42' score: 10 zone cut: '.' m12n: 'COnsULTIng.' type: 'NS' proto: 'udp'
[24754][iter] <= using glue for 'demand.beta.aridns.net.au.': '37.209.194.7'
[24754][iter] <= using glue for 'demand.beta.aridns.net.au.': '2001:dcd:2::7'
[24754][iter] <= using glue for 'demand.alpha.aridns.net.au.': '37.209.192.7'
[24754][iter] <= using glue for 'demand.alpha.aridns.net.au.': '2001:dcd:1::7'
[24754][iter] <= using glue for 'demand.delta.aridns.net.au.': '37.209.198.7'
[24754][iter] <= using glue for 'demand.delta.aridns.net.au.': '2001:dcd:4::7'
[24754][iter] <= using glue for 'demand.gamma.aridns.net.au.': '37.209.196.7'
[24754][iter] <= using glue for 'demand.gamma.aridns.net.au.': '2001:dcd:3::7'
[24754][iter] <= referral response, follow
[24754][vldr] <= DS: OK
[24754][vldr] <= answer valid, OK
[24754][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[ 1704][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1704][plan] plan 'consulting.' type 'DNSKEY'
[16921][iter] 'consulting.' type 'DNSKEY' id was assigned, parent id 1704
[16921][resl] => querying: '2001:dcd:3::7' score: 10 zone cut: 'consulting.' m12n: 'CoNSULTiNg.' type: 'DNSKEY' proto: 'udp'
[16921][iter] <= rcode: NOERROR
[16921][vldr] <= parent: updating DNSKEY
[16921][vldr] <= answer valid, OK
[16921][resl] <= server: '2001:dcd:3::7' rtt: 15 ms
[59254][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[59254][resl] => querying: '2001:dcd:4::7' score: 10 zone cut: 'consulting.' m12n: 'fIBeR.CoNsUlting.' type: 'NS' proto: 'udp'
[59254][iter] <= referral response, follow
[59254][vldr] <= DS: OK
[59254][vldr] <= answer valid, OK
[59254][resl] <= server: '2001:dcd:4::7' rtt: 15 ms
[11692][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[11692][plan] plan 'fiber.consulting.' type 'DNSKEY'
[17671][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[17671][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[ 6688][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[ 6688][resl] => using root hints
[29600][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[29600][plan] plan '.' type 'DNSKEY'
[36950][iter] '.' type 'DNSKEY' id was assigned, parent id 29600
[36950][ rc ] => satisfied from cache
[36950][iter] <= rcode: NOERROR
[36950][vldr] <= parent: updating DNSKEY
[36950][vldr] <= answer valid, OK
[61812][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[61812][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'sPACe.' type: 'NS' proto: 'udp'
[61812][iter] <= using glue for 'a.nic.space.': '194.169.218.51'
[61812][iter] <= using glue for 'a.nic.space.': '2001:67c:13cc::1:51'
[61812][iter] <= using glue for 'b.nic.space.': '185.24.64.51'
[61812][iter] <= using glue for 'b.nic.space.': '2a04:2b00:13cc::1:51'
[61812][iter] <= using glue for 'c.nic.space.': '185.38.99.4'
[61812][iter] <= using glue for 'c.nic.space.': '2a02:e180:3::4'
[61812][iter] <= using glue for 'd.nic.space.': '108.59.161.4'
[61812][iter] <= using glue for 'd.nic.space.': '2a02:e180:4::4'
[61812][iter] <= referral response, follow
[61812][vldr] <= DS: OK
[61812][vldr] <= answer valid, OK
[61812][resl] <= server: '2001:7fd::1' rtt: 2 ms
[ 4807][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[ 4807][plan] plan 'space.' type 'DNSKEY'
[34976][iter] 'space.' type 'DNSKEY' id was assigned, parent id 4807
[34976][resl] => querying: '2a02:e180:4::4' score: 10 zone cut: 'space.' m12n: 'SpAcE.' type: 'DNSKEY' proto: 'udp'
[34976][iter] <= rcode: NOERROR
[34976][vldr] <= parent: updating DNSKEY
[34976][vldr] <= answer valid, OK
[34976][resl] <= server: '2a02:e180:4::4' rtt: 21 ms
[65306][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[65306][resl] => querying: '2a02:e180:3::4' score: 10 zone cut: 'space.' m12n: 'H4CK.Space.' type: 'NS' proto: 'udp'
[65306][iter] <= referral response, follow
[65306][vldr] <= DS doesn't exist, going insecure
[65306][vldr] <= parent: updating DS
[65306][vldr] <= answer valid, OK
[65306][resl] <= server: '2a02:e180:3::4' rtt: 99 ms
[25567][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[25567][plan] plan 'c.dns.gandi.net.' type 'AAAA'
[45392][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[45392][resl] => using root hints
[10763][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[10763][resl] >< TA: '.'
[10763][plan] plan '.' type 'DNSKEY'
[16961][iter] '.' type 'DNSKEY' id was assigned, parent id 10763
[16961][ rc ] => satisfied from cache
[16961][iter] <= rcode: NOERROR
[16961][vldr] <= parent: updating DNSKEY
[16961][vldr] <= answer valid, OK
[19618][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[19618][resl] => querying: '2001:503:c27::2:30' score: 10 zone cut: '.' m12n: 'nEt.' type: 'NS' proto: 'udp'
[19618][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[19618][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[19618][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[19618][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[19618][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[19618][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[19618][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[19618][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[19618][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[19618][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[19618][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[19618][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[19618][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[19618][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[19618][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[19618][iter] <= referral response, follow
[19618][vldr] <= DS: OK
[19618][vldr] <= answer valid, OK
[19618][resl] <= server: '2001:503:c27::2:30' rtt: 16 ms
[12050][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[12050][plan] plan 'net.' type 'DNSKEY'
[27336][iter] 'net.' type 'DNSKEY' id was assigned, parent id 12050
[27336][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'NEt.' type: 'DNSKEY' proto: 'udp'
[27336][iter] <= rcode: NOERROR
[27336][vldr] <= parent: updating DNSKEY
[27336][vldr] <= answer valid, OK
[27336][resl] <= server: '192.55.83.30' rtt: 35 ms
[ 1255][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[ 1255][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'GANDi.NET.' type: 'NS' proto: 'udp'
[ 1255][iter] <= using glue for 'dns0.gandi.net.': '2001:4b98:d:1::39'
[ 1255][iter] <= using glue for 'dns0.gandi.net.': '217.70.177.39'
[ 1255][iter] <= using glue for 'dns1.gandi.net.': '2001:4b98:d:1::45'
[ 1255][iter] <= using glue for 'dns1.gandi.net.': '217.70.177.45'
[ 1255][iter] <= using glue for 'dns2.gandi.net.': '2001:4b98:d:589::211'
[ 1255][iter] <= using glue for 'dns2.gandi.net.': '217.70.183.211'
[ 1255][iter] <= using glue for 'dns3.gandi.net.': '2001:4b98:c:13::14'
[ 1255][iter] <= using glue for 'dns3.gandi.net.': '217.70.184.14'
[ 1255][iter] <= using glue for 'dns4.gandi.net.': '2001:4b98:dc2:90:217:70:186:184'
[ 1255][iter] <= using glue for 'dns4.gandi.net.': '217.70.186.184'
[ 1255][iter] <= referral response, follow
[ 1255][vldr] <= DS doesn't exist, going insecure
[ 1255][vldr] <= parent: updating DS
[ 1255][vldr] <= answer valid, OK
[ 1255][resl] <= server: '192.41.162.30' rtt: 115 ms
[19006][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[19006][resl] => querying: '2001:4b98:dc2:90:217:70:186:184' score: 10 zone cut: 'gandi.net.' m12n: 'Dns.gANDi.NET.' type: 'NS' proto: 'udp'
[19006][iter] <= rcode: NOERROR
[19006][iter] <= found cut, retrying with non-minimized name
[19006][ pc ] => answer cached for TTL=900
[19006][resl] <= server: '2001:4b98:dc2:90:217:70:186:184' rtt: 18 ms
[58499][iter] 'c.dns.gandi.net.' type 'AAAA' id was assigned, parent id 25567
[58499][resl] => querying: '217.70.186.184' score: 10 zone cut: 'gandi.net.' m12n: 'c.dns.GANdI.nEt.' type: 'AAAA' proto: 'udp'
[58499][iter] <= using glue for 'dns4.gandi.net.': '217.70.186.184'
[58499][iter] <= using glue for 'dns4.gandi.net.': '2001:4b98:dc2:90:217:70:186:184'
[58499][iter] <= using glue for 'dns2.gandi.net.': '217.70.183.211'
[58499][iter] <= using glue for 'dns2.gandi.net.': '2001:4b98:d:589::211'
[58499][iter] <= using glue for 'dns0.gandi.net.': '217.70.177.39'
[58499][iter] <= using glue for 'dns0.gandi.net.': '2001:4b98:d:1::39'
[58499][iter] <= using glue for 'dns1.gandi.net.': '217.70.177.45'
[58499][iter] <= using glue for 'dns1.gandi.net.': '2001:4b98:d:1::45'
[58499][iter] <= using glue for 'dns3.gandi.net.': '217.70.184.14'
[58499][iter] <= using glue for 'dns3.gandi.net.': '2001:4b98:c:13::14'
[58499][iter] <= rcode: NOERROR
[58499][resl] <= server: '217.70.186.184' rtt: 15 ms
[34114][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[34114][resl] => querying: '2604:3400:abcc::1' score: 10 zone cut: 'h4ck.space.' m12n: 'Ns2.h4CK.spAcE.' type: 'AAAA' proto: 'udp'
[34114][iter] <= rcode: NOERROR
[34114][iter] <= cname chain, following
[17671][plan] plan 'dns2.h4ck.space.' type 'AAAA'
[34114][resl] <= server: '2604:3400:abcc::1' rtt: 15 ms
[47406][iter] 'dns2.h4ck.space.' type 'AAAA' id was assigned, parent id 17671
[47406][ rc ] => satisfied from cache
[47406][iter] <= rcode: NOERROR
[47406][vldr] <= cached insecure response, going insecure
[18264][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[18264][plan] plan 'ns2.h4ck.space.' type 'A'
[54751][iter] 'ns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[54751][ rc ] => satisfied from cache
[54751][iter] <= rcode: NOERROR
[54751][iter] <= cname chain, following
[18264][plan] plan 'dns2.h4ck.space.' type 'A'
[54751][vldr] <= cached insecure response, going insecure
[61256][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[61256][resl] => NS is provably without DS, going insecure
[ 5367][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 18264
[ 5367][resl] => querying: '2604:3400:abcc::1' score: 15 zone cut: 'h4ck.space.' m12n: 'dns2.H4cK.spacE.' type: 'A' proto: 'udp'
[ 5367][iter] <= rcode: NOERROR
[ 5367][resl] <= server: '2604:3400:abcc::1' rtt: 18 ms
[16899][iter] 'fiber.consulting.' type 'DNSKEY' id was assigned, parent id 11692
[16899][resl] => unresolvable NS address, bailing out
[16899][resl] => querying: '2a01:7a0:10:151:236:17:139:1' score: 10 zone cut: 'fiber.consulting.' m12n: 'fibEr.conSulTINg.' type: 'DNSKEY' proto: 'udp'
[16899][iter] <= rcode: NOERROR
[16899][vldr] <= parent: updating DNSKEY
[16899][vldr] <= answer valid, OK
[16899][resl] <= server: '2a01:7a0:10:151:236:17:139:1' rtt: 16 ms
[55906][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[55906][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[14359][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 55906
[14359][ rc ] => satisfied from cache
[14359][iter] <= rcode: NOERROR
[14359][iter] <= cname chain, following
[14359][iter] <= cname chain loop
[ 0][resl] finished: 8, queries: 12, mempool: 98400 B
[ 0][plan] plan '.' type 'DNSKEY'
[31350][iter] '.' type 'DNSKEY' id was assigned, parent id 0
[31350][ rc ] => satisfied from cache
[31350][iter] <= rcode: NOERROR
[ 0][resl] finished: 4, queries: 1, mempool: 163952 B
[ ta ] key: 19036 state: Valid
[ ta ] next refresh: 86400000
[ 0][plan] plan '.' type 'NS'
[11586][iter] '.' type 'NS' id was assigned, parent id 0
[11586][resl] => using root hints
[ 9182][iter] '.' type 'NS' id was assigned, parent id 0
[ 9182][plan] plan '.' type 'DNSKEY'
[63993][iter] '.' type 'DNSKEY' id was assigned, parent id 9182
[63993][ rc ] => satisfied from cache
[63993][iter] <= rcode: NOERROR
[63993][vldr] <= parent: updating DNSKEY
[63993][vldr] <= answer valid, OK
[12456][iter] '.' type 'NS' id was assigned, parent id 0
[12456][resl] => querying: '2001:7fe::53' score: 10 zone cut: '.' m12n: '.' type: 'NS' proto: 'udp'
[12456][iter] <= rcode: NOERROR
[12456][vldr] <= answer valid, OK
[12456][resl] <= server: '2001:7fe::53' rtt: 7 ms
[ 0][resl] finished: 4, queries: 2, mempool: 98352 B
```
Second attempt:
```
[ 0][plan] plan 'pypi.fiber.consulting.' type 'A'
[ 7101][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1393][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[ 1393][plan] plan 'ns2.h4ck.space.' type 'AAAA'
[ 6625][iter] 'ns2.h4ck.space.' type 'AAAA' id was assigned, parent id 1393
[ 6625][ rc ] => satisfied from cache
[ 6625][iter] <= rcode: NOERROR
[ 6625][iter] <= cname chain, following
[ 1393][plan] plan 'dns2.h4ck.space.' type 'AAAA'
[ 6625][vldr] <= cached insecure response, going insecure
[62761][iter] 'dns2.h4ck.space.' type 'AAAA' id was assigned, parent id 1393
[62761][ rc ] => satisfied from cache
[62761][iter] <= rcode: NOERROR
[62761][vldr] <= cached insecure response, going insecure
[54779][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[54779][plan] plan 'ns2.h4ck.space.' type 'A'
[22497][iter] 'ns2.h4ck.space.' type 'A' id was assigned, parent id 54779
[22497][ rc ] => satisfied from cache
[22497][iter] <= rcode: NOERROR
[22497][iter] <= cname chain, following
[54779][plan] plan 'dns2.h4ck.space.' type 'A'
[22497][vldr] <= cached insecure response, going insecure
[21038][iter] 'dns2.h4ck.space.' type 'A' id was assigned, parent id 54779
[21038][ rc ] => satisfied from cache
[21038][iter] <= rcode: NOERROR
[21038][vldr] <= cached insecure response, going insecure
[42668][iter] 'pypi.fiber.consulting.' type 'A' id was assigned, parent id 0
[42668][resl] => unresolvable NS address, bailing out
[42668][resl] => querying: '151.236.17.139' score: 10 zone cut: 'fiber.consulting.' m12n: 'PyPI.fIbER.cONsUlTING.' type: 'A' proto: 'udp'
[42668][iter] <= rcode: NOERROR
[42668][iter] <= cname chain, following
[ 0][plan] plan 'epsilon.rammhold.de.' type 'A'
[42668][vldr] <= answer valid, OK
[42668][resl] <= server: '151.236.17.139' rtt: 19 ms
[30661][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[30661][plan] plan 'm.root-servers.net.' type 'AAAA'
[18825][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[18825][resl] >< TA: '.'
[18825][resl] => querying: '2001:500:9f::42' score: 11 zone cut: '.' m12n: 'NEt.' type: 'NS' proto: 'udp'
[18825][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[18825][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[18825][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[18825][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[18825][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[18825][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[18825][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[18825][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[18825][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[18825][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[18825][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[18825][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[18825][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[18825][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[18825][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[18825][iter] <= referral response, follow
[18825][vldr] <= DS: OK
[18825][vldr] <= answer valid, OK
[18825][resl] <= server: '2001:500:9f::42' rtt: 1 ms
[36046][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[36046][plan] plan 'net.' type 'DNSKEY'
[43294][iter] 'net.' type 'DNSKEY' id was assigned, parent id 36046
[43294][ rc ] => satisfied from cache
[43294][iter] <= rcode: NOERROR
[43294][vldr] <= parent: updating DNSKEY
[43294][vldr] <= answer valid, OK
[47963][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[47963][resl] => querying: '192.52.178.30' score: 10 zone cut: 'net.' m12n: 'rOOt-SerVErs.nET.' type: 'NS' proto: 'udp'
[47963][resl] => querying: '192.48.79.30' score: 10 zone cut: 'net.' m12n: 'rOOt-SerVErs.nET.' type: 'NS' proto: 'udp'
[47963][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[47963][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[47963][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[47963][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[47963][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[47963][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[47963][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[47963][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[47963][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[47963][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[47963][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[47963][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[47963][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[47963][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[47963][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[47963][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[47963][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[47963][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[47963][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[47963][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[47963][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[47963][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[47963][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[47963][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[47963][iter] <= referral response, follow
[47963][vldr] <= DS doesn't exist, going insecure
[47963][vldr] <= parent: updating DS
[47963][vldr] <= answer valid, OK
[47963][resl] <= server: '192.52.178.30' rtt: 264 ms
[47963][resl] <= server: '192.48.79.30' rtt: >=14 ms
[56807][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 30661
[56807][resl] => querying: '202.12.27.33' score: 10 zone cut: 'root-servers.net.' m12n: 'M.RoOT-sErVeRs.net.' type: 'AAAA' proto: 'udp'
[56807][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[56807][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[56807][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[56807][iter] <= using glue for 'g.root-servers.net.': '2001:500:12::d0d'
[56807][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[56807][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[56807][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[56807][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[56807][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[56807][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[56807][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[56807][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[56807][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[56807][iter] <= using glue for 'e.root-servers.net.': '2001:500:a8::e'
[56807][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[56807][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[56807][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[56807][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[56807][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[56807][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[56807][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[56807][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[56807][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[56807][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[56807][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[56807][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[56807][iter] <= rcode: NOERROR
[56807][resl] <= server: '202.12.27.33' rtt: 18 ms
[58965][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[58965][resl] => querying: '2001:dc3::35' score: 19 zone cut: '.' m12n: 'dE.' type: 'NS' proto: 'udp'
[58965][iter] <= using glue for 'l.de.net.': '77.67.63.105'
[58965][iter] <= using glue for 'l.de.net.': '2001:668:1f:11::105'
[58965][iter] <= using glue for 'f.nic.de.': '81.91.164.5'
[58965][iter] <= using glue for 'f.nic.de.': '2a02:568:0:2::53'
[58965][iter] <= using glue for 'a.nic.de.': '194.0.0.53'
[58965][iter] <= using glue for 'a.nic.de.': '2001:678:2::53'
[58965][iter] <= using glue for 'n.de.net.': '194.146.107.6'
[58965][iter] <= using glue for 'n.de.net.': '2001:67c:1011:1::53'
[58965][iter] <= using glue for 'z.nic.de.': '194.246.96.1'
[58965][iter] <= using glue for 's.de.net.': '195.243.137.26'
[58965][iter] <= referral response, follow
[58965][vldr] <= DS: OK
[58965][vldr] <= answer valid, OK
[58965][resl] <= server: '2001:dc3::35' rtt: 18 ms
[63087][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[63087][plan] plan 'de.' type 'DNSKEY'
[42419][iter] 'de.' type 'DNSKEY' id was assigned, parent id 63087
[42419][resl] => querying: '194.246.96.1' score: 10 zone cut: 'de.' m12n: 'DE.' type: 'DNSKEY' proto: 'udp'
[42419][iter] <= rcode: NOERROR
[42419][vldr] <= parent: updating DNSKEY
[42419][vldr] <= answer valid, OK
[42419][resl] <= server: '194.246.96.1' rtt: 121 ms
[ 7766][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[ 7766][resl] => querying: '195.243.137.26' score: 10 zone cut: 'de.' m12n: 'RaMmhoLD.dE.' type: 'NS' proto: 'udp'
[ 7766][iter] <= using glue for 'ns1.quarxconnect.de.': '94.186.151.136'
[ 7766][iter] <= referral response, follow
[ 7766][vldr] <= DS doesn't exist, going insecure
[ 7766][vldr] <= answer valid, OK
[ 7766][resl] <= server: '195.243.137.26' rtt: 23 ms
[19955][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[19955][resl] => querying: '94.186.151.136' score: 10 zone cut: 'rammhold.de.' m12n: 'EPsIloN.RaMMholD.De.' type: 'A' proto: 'udp'
[19955][iter] <= referral response, follow
[19955][resl] <= server: '94.186.151.136' rtt: 38 ms
[49323][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[49323][plan] plan 'ns2.quarxconnect.org.' type 'AAAA'
[12824][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[12824][resl] >< TA: '.'
[12824][resl] => querying: '2001:500:1::53' score: 10 zone cut: '.' m12n: 'OrG.' type: 'NS' proto: 'udp'
[12824][iter] <= using glue for 'a0.org.afilias-nst.info.': '2001:500:e::1'
[12824][iter] <= using glue for 'a0.org.afilias-nst.info.': '199.19.56.1'
[12824][iter] <= using glue for 'a2.org.afilias-nst.info.': '2001:500:40::1'
[12824][iter] <= using glue for 'a2.org.afilias-nst.info.': '199.249.112.1'
[12824][iter] <= using glue for 'b0.org.afilias-nst.org.': '2001:500:c::1'
[12824][iter] <= using glue for 'b0.org.afilias-nst.org.': '199.19.54.1'
[12824][iter] <= using glue for 'b2.org.afilias-nst.org.': '2001:500:48::1'
[12824][iter] <= using glue for 'b2.org.afilias-nst.org.': '199.249.120.1'
[12824][iter] <= using glue for 'c0.org.afilias-nst.info.': '2001:500:b::1'
[12824][iter] <= using glue for 'c0.org.afilias-nst.info.': '199.19.53.1'
[12824][iter] <= using glue for 'd0.org.afilias-nst.org.': '2001:500:f::1'
[12824][iter] <= using glue for 'd0.org.afilias-nst.org.': '199.19.57.1'
[12824][iter] <= referral response, follow
[12824][vldr] <= DS: OK
[12824][vldr] <= answer valid, OK
[12824][resl] <= server: '2001:500:1::53' rtt: 94 ms
[21499][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[21499][plan] plan 'org.' type 'DNSKEY'
[42662][iter] 'org.' type 'DNSKEY' id was assigned, parent id 21499
[42662][resl] => querying: '2001:500:f::1' score: 10 zone cut: 'org.' m12n: 'orG.' type: 'DNSKEY' proto: 'udp'
[42662][iter] <= rcode: NOERROR
[42662][vldr] <= parent: updating DNSKEY
[42662][vldr] <= answer valid, OK
[42662][resl] <= server: '2001:500:f::1' rtt: 165 ms
[58832][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[58832][resl] => querying: '199.19.57.1' score: 10 zone cut: 'org.' m12n: 'QuarxconNECT.ORg.' type: 'NS' proto: 'udp'
[58832][iter] <= using glue for 'ns2.quarxconnect.org.': '89.238.77.2'
[58832][iter] <= referral response, follow
[58832][vldr] <= DS doesn't exist, going insecure
[58832][vldr] <= parent: updating DS
[58832][vldr] <= answer valid, OK
[58832][resl] <= server: '199.19.57.1' rtt: 95 ms
[ 3403][iter] 'ns2.quarxconnect.org.' type 'AAAA' id was assigned, parent id 49323
[ 3403][resl] => querying: '89.238.77.2' score: 10 zone cut: 'quarxconnect.org.' m12n: 'ns2.QuaRXCOnnect.orG.' type: 'AAAA' proto: 'udp'
[ 3403][iter] <= rcode: NOERROR
[ 3403][ pc ] => answer cached for TTL=900
[ 3403][resl] <= server: '89.238.77.2' rtt: 24 ms
[20474][iter] 'epsilon.rammhold.de.' type 'A' id was assigned, parent id 0
[20474][ rc ] => satisfied from cache
[20474][iter] <= rcode: NOERROR
[ 0][resl] finished: 4, queries: 11, mempool: 98400 B
```1.2.0 releaseIvana KrumlovaIvana Krumlovahttps://gitlab.nic.cz/knot/knot-resolver/-/issues/128mcaffee.com CDN records unresolvable2017-04-05T16:20:20+02:00Ondřej Surýmcaffee.com CDN records unresolvableFrom internal testing the `b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. IN A` and similar queries end with `NXDOMAIN` while it should return A record:
```
;; ANSWER SECTION:
b-0.19-23003008.1...From internal testing the `b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. IN A` and similar queries end with `NXDOMAIN` while it should return A record:
```
;; ANSWER SECTION:
b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com. 3599 IN A 127.129.0.128
```
I suspect QNAME minimization, but further debugging is needed.
Clean cache log:
```
[ 0][plan] plan 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A'
[12987][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[12987][plan] plan 'm.root-servers.net.' type 'AAAA'
[44827][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[44827][resl] >< TA: '.'
[44827][resl] => querying: '2001:7fd::1' score: 10 zone cut: '.' m12n: 'NeT.' type: 'NS' proto: 'udp'
[44827][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[44827][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[44827][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[44827][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[44827][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[44827][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[44827][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[44827][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[44827][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[44827][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[44827][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[44827][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[44827][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[44827][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[44827][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[44827][iter] <= referral response, follow
[44827][vldr] <= DS: OK
[44827][vldr] <= answer valid, OK
[44827][resl] <= server: '2001:7fd::1' rtt: 1 ms
[48044][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[48044][plan] plan 'net.' type 'DNSKEY'
[56890][iter] 'net.' type 'DNSKEY' id was assigned, parent id 48044
[56890][resl] => querying: '192.55.83.30' score: 10 zone cut: 'net.' m12n: 'NET.' type: 'DNSKEY' proto: 'udp'
[56890][iter] <= rcode: NOERROR
[56890][vldr] <= parent: updating DNSKEY
[56890][vldr] <= answer valid, OK
[56890][resl] <= server: '192.55.83.30' rtt: 34 ms
[19599][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[19599][resl] => querying: '192.41.162.30' score: 10 zone cut: 'net.' m12n: 'ROOT-sERvERs.NEt.' type: 'NS' proto: 'udp'
[19599][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[19599][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[19599][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[19599][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[19599][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[19599][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[19599][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[19599][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[19599][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[19599][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[19599][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[19599][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[19599][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[19599][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[19599][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[19599][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[19599][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[19599][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[19599][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[19599][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[19599][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[19599][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[19599][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[19599][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[19599][iter] <= referral response, follow
[19599][vldr] <= DS doesn't exist, going insecure
[19599][vldr] <= parent: updating DS
[19599][vldr] <= answer valid, OK
[19599][resl] <= server: '192.41.162.30' rtt: 114 ms
[12188][iter] 'm.root-servers.net.' type 'AAAA' id was assigned, parent id 12987
[12188][resl] => querying: '202.12.27.33' score: 10 zone cut: 'root-servers.net.' m12n: 'M.ROOT-sErveRS.nEt.' type: 'AAAA' proto: 'udp'
[12188][iter] <= using glue for 'b.root-servers.net.': '192.228.79.201'
[12188][iter] <= using glue for 'b.root-servers.net.': '2001:500:84::b'
[12188][iter] <= using glue for 'f.root-servers.net.': '192.5.5.241'
[12188][iter] <= using glue for 'f.root-servers.net.': '2001:500:2f::f'
[12188][iter] <= using glue for 'c.root-servers.net.': '192.33.4.12'
[12188][iter] <= using glue for 'c.root-servers.net.': '2001:500:2::c'
[12188][iter] <= using glue for 'k.root-servers.net.': '193.0.14.129'
[12188][iter] <= using glue for 'k.root-servers.net.': '2001:7fd::1'
[12188][iter] <= using glue for 'i.root-servers.net.': '192.36.148.17'
[12188][iter] <= using glue for 'i.root-servers.net.': '2001:7fe::53'
[12188][iter] <= using glue for 'j.root-servers.net.': '192.58.128.30'
[12188][iter] <= using glue for 'j.root-servers.net.': '2001:503:c27::2:30'
[12188][iter] <= using glue for 'l.root-servers.net.': '199.7.83.42'
[12188][iter] <= using glue for 'l.root-servers.net.': '2001:500:9f::42'
[12188][iter] <= using glue for 'a.root-servers.net.': '198.41.0.4'
[12188][iter] <= using glue for 'a.root-servers.net.': '2001:503:ba3e::2:30'
[12188][iter] <= using glue for 'm.root-servers.net.': '2001:dc3::35'
[12188][iter] <= using glue for 'm.root-servers.net.': '202.12.27.33'
[12188][iter] <= using glue for 'h.root-servers.net.': '198.97.190.53'
[12188][iter] <= using glue for 'h.root-servers.net.': '2001:500:1::53'
[12188][iter] <= using glue for 'g.root-servers.net.': '192.112.36.4'
[12188][iter] <= using glue for 'g.root-servers.net.': '2001:500:12::d0d'
[12188][iter] <= using glue for 'e.root-servers.net.': '192.203.230.10'
[12188][iter] <= using glue for 'e.root-servers.net.': '2001:500:a8::e'
[12188][iter] <= using glue for 'd.root-servers.net.': '199.7.91.13'
[12188][iter] <= using glue for 'd.root-servers.net.': '2001:500:2d::d'
[12188][iter] <= rcode: NOERROR
[12188][resl] <= server: '202.12.27.33' rtt: 18 ms
[20909][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[20909][resl] => querying: '2001:dc3::35' score: 18 zone cut: '.' m12n: 'CoM.' type: 'NS' proto: 'udp'
[20909][iter] <= using glue for 'h.gtld-servers.net.': '192.54.112.30'
[20909][iter] <= using glue for 'f.gtld-servers.net.': '192.35.51.30'
[20909][iter] <= using glue for 'd.gtld-servers.net.': '192.31.80.30'
[20909][iter] <= using glue for 'e.gtld-servers.net.': '192.12.94.30'
[20909][iter] <= using glue for 'j.gtld-servers.net.': '192.48.79.30'
[20909][iter] <= using glue for 'g.gtld-servers.net.': '192.42.93.30'
[20909][iter] <= using glue for 'm.gtld-servers.net.': '192.55.83.30'
[20909][iter] <= using glue for 'i.gtld-servers.net.': '192.43.172.30'
[20909][iter] <= using glue for 'a.gtld-servers.net.': '192.5.6.30'
[20909][iter] <= using glue for 'a.gtld-servers.net.': '2001:503:a83e::2:30'
[20909][iter] <= using glue for 'l.gtld-servers.net.': '192.41.162.30'
[20909][iter] <= using glue for 'b.gtld-servers.net.': '192.33.14.30'
[20909][iter] <= using glue for 'b.gtld-servers.net.': '2001:503:231d::2:30'
[20909][iter] <= using glue for 'k.gtld-servers.net.': '192.52.178.30'
[20909][iter] <= using glue for 'c.gtld-servers.net.': '192.26.92.30'
[20909][iter] <= referral response, follow
[20909][vldr] <= DS: OK
[20909][vldr] <= answer valid, OK
[20909][resl] <= server: '2001:dc3::35' rtt: 17 ms
[35619][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[35619][plan] plan 'com.' type 'DNSKEY'
[18962][iter] 'com.' type 'DNSKEY' id was assigned, parent id 35619
[18962][resl] => querying: '192.52.178.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[18962][resl] => querying: '192.48.79.30' score: 10 zone cut: 'com.' m12n: 'COm.' type: 'DNSKEY' proto: 'udp'
[18962][iter] <= rcode: NOERROR
[18962][vldr] <= parent: updating DNSKEY
[18962][vldr] <= answer valid, OK
[18962][resl] <= server: '192.52.178.30' rtt: 263 ms
[18962][resl] <= server: '192.48.79.30' rtt: >=13 ms
[15171][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[15171][resl] => querying: '192.43.172.30' score: 10 zone cut: 'com.' m12n: 'MCafEE.CoM.' type: 'NS' proto: 'udp'
[15171][iter] <= using glue for 'ns-b.mcafee.com.': '208.69.152.14'
[15171][iter] <= using glue for 'ns-a.mcafee.com.': '216.49.88.14'
[15171][iter] <= referral response, follow
[15171][vldr] <= DS doesn't exist, going insecure
[15171][vldr] <= answer valid, OK
[15171][resl] <= server: '192.43.172.30' rtt: 28 ms
[42744][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[42744][resl] => querying: '208.69.152.14' score: 10 zone cut: 'mcafee.com.' m12n: 'avqs.mcAfee.Com.' type: 'NS' proto: 'udp'
[42744][iter] <= referral response, follow
[42744][resl] <= server: '208.69.152.14' rtt: 129 ms
[ 305][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[ 305][plan] plan 'local.cloud.mcafee.com.' type 'AAAA'
[20082][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[27766][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[27766][resl] => querying: '216.49.88.14' score: 10 zone cut: 'mcafee.com.' m12n: 'CLoud.mcaFee.cOm.' type: 'NS' proto: 'udp'
[27766][iter] <= using glue for 'gs4.mcafee.com.': '161.69.198.250'
[27766][iter] <= using glue for 'gs1.mcafee.com.': '8.18.25.250'
[27766][iter] <= using glue for 'gs2.mcafee.com.': '8.21.161.250'
[27766][iter] <= using glue for 'gs3.mcafee.com.': '161.69.169.250'
[27766][iter] <= referral response, follow
[27766][resl] <= server: '216.49.88.14' rtt: 153 ms
[37049][iter] 'local.cloud.mcafee.com.' type 'AAAA' id was assigned, parent id 305
[37049][resl] => querying: '161.69.198.250' score: 10 zone cut: 'cloud.mcafee.com.' m12n: 'LOCAl.Cloud.mCafEe.coM.' type: 'AAAA' proto: 'udp'
[37049][resl] => querying: '161.69.169.250' score: 10 zone cut: 'cloud.mcafee.com.' m12n: 'LOCAl.Cloud.mCafEe.coM.' type: 'AAAA' proto: 'udp'
[37049][iter] <= rcode: NOERROR
[37049][ pc ] => answer cached for TTL=5
[37049][resl] <= server: '161.69.198.250' rtt: >=266 ms
[37049][resl] <= server: '161.69.169.250' rtt: 16 ms
[59447][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[59447][plan] plan 'local.cloud.mcafee.com.' type 'A'
[17906][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[26631][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[26631][plan] plan 'gs4.mcafee.com.' type 'AAAA'
[43299][iter] 'gs4.mcafee.com.' type 'AAAA' id was assigned, parent id 26631
[26908][iter] 'gs4.mcafee.com.' type 'AAAA' id was assigned, parent id 26631
[26908][resl] => querying: '208.69.152.14' score: 129 zone cut: 'mcafee.com.' m12n: 'Gs4.mCAFEe.CoM.' type: 'AAAA' proto: 'udp'
[26908][iter] <= rcode: NOERROR
[26908][ pc ] => answer cached for TTL=900
[26908][resl] <= server: '208.69.152.14' rtt: 129 ms
[27931][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[27931][plan] plan 'gs4.mcafee.com.' type 'A'
[ 7894][iter] 'gs4.mcafee.com.' type 'A' id was assigned, parent id 27931
[29665][iter] 'gs4.mcafee.com.' type 'A' id was assigned, parent id 27931
[29665][resl] => querying: '208.69.152.14' score: 129 zone cut: 'mcafee.com.' m12n: 'gs4.mCaFee.COm.' type: 'A' proto: 'udp'
[29665][iter] <= using glue for 'ns-a.mcafee.com.': '216.49.88.14'
[29665][iter] <= using glue for 'ns-b.mcafee.com.': '208.69.152.14'
[29665][iter] <= rcode: NOERROR
[29665][resl] <= server: '208.69.152.14' rtt: 129 ms
[34969][iter] 'local.cloud.mcafee.com.' type 'A' id was assigned, parent id 59447
[34969][resl] => querying: '161.69.198.250' score: 266 zone cut: 'cloud.mcafee.com.' m12n: 'locAL.CloUD.mcafeE.cOm.' type: 'A' proto: 'udp'
[34969][resl] => querying: '161.69.198.250' score: 266 zone cut: 'cloud.mcafee.com.' m12n: 'locAL.CloUD.mcafeE.cOm.' type: 'A' proto: 'udp'
[34969][iter] <= rcode: NOERROR
[34969][resl] <= server: '161.69.198.250' rtt: 264 ms
[ 5991][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[ 5991][resl] => querying: '161.69.165.4' score: 10 zone cut: 'avqs.mcafee.com.' m12n: 'EKZIJnEKVVVG7Gb38QCwUr561B.avqS.MCAFEe.COM.' type: 'NS' proto: 'udp'
[ 5991][iter] <= rcode: NXDOMAIN
[ 5991][iter] <= found cut, retrying with non-minimized name
[ 5991][ pc ] => answer cached for TTL=600
[ 5991][resl] <= server: '161.69.165.4' rtt: 26 ms
[24433][iter] 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.ekzijnekvvvg7gb38qcwur561b.avqs.mcafee.com.' type 'A' id was assigned, parent id 0
[24433][resl] => querying: '161.69.165.4' score: 26 zone cut: 'avqs.mcafee.com.' m12n: 'b-0.19-23003008.1481.1518.19cf.3ea1.410.0.EkzIjneKVvvg7gB38qcwur561b.AVQs.McaFee.COm.' type: 'A' proto: 'udp'
[24433][iter] <= rcode: NXDOMAIN
[24433][ pc ] => answer cached for TTL=600
[24433][resl] <= server: '161.69.165.4' rtt: 25 ms
[ 0][resl] finished: 4, queries: 8, mempool: 82000 B
```1.3.0 releaseVladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/127Returned TTL in the first answer doesn't honor `cache.min_ttl`2022-12-13T12:57:01+01:00Ondřej SurýReturned TTL in the first answer doesn't honor `cache.min_ttl`This is just a reminder, that the first answer (not from cache) doesn't honor the `cache.min_ttl()` settings. The min_ttl value is stored in the cache correctly, but the non-cached answer TTL is not mangled.This is just a reminder, that the first answer (not from cache) doesn't honor the `cache.min_ttl()` settings. The min_ttl value is stored in the cache correctly, but the non-cached answer TTL is not mangled.Vladimír Čunátvladimir.cunat@nic.czVladimír Čunátvladimir.cunat@nic.czhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/125policy forward does not skip dead servers2017-07-07T11:35:52+02:00Petr Špačekpolicy forward does not skip dead serversThe `kresd` always tries to contact servers in order specified in configuration and does not preffer the working one:
This happens e.g. in situation where configuration specifies two forwarders in following order:
1. dead address `1...The `kresd` always tries to contact servers in order specified in configuration and does not preffer the working one:
This happens e.g. in situation where configuration specifies two forwarders in following order:
1. dead address `192.0.2.111`
2. working address `192.168.3.1`
Here is log from attempts to resolve various non-cached names:
~~~
[plan] plan 'nonexistent.' type 'NS'
[resl] => querying: '192.0.2.111' score: 1425 zone cut: '.' m12n: 'nonexiSteNT.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 1425 zone cut: '.' m12n: 'nonexiSteNT.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=270 ms
[resl] <= server: '192.168.3.1' rtt: 20 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'sorry-root.' type 'NS'
[resl] => querying: '192.0.2.111' score: 20 zone cut: '.' m12n: 'SoRrY-roOt.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 20 zone cut: '.' m12n: 'SoRrY-roOt.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=172 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
[plan] plan 'qqq.' type 'NS'
[resl] => querying: '192.0.2.111' score: 20 zone cut: '.' m12n: 'QqQ.' type: 'NS' proto: 'udp'
[resl] => querying: '192.168.3.1' score: 20 zone cut: '.' m12n: 'QqQ.' type: 'NS' proto: 'udp'
[iter] <= rcode: NXDOMAIN
[ pc ] => answer cached for TTL=900
[resl] <= server: '192.0.2.111' rtt: >=49 ms
[resl] finished: 4, queries: 1, mempool: 16400 B
~~~https://gitlab.nic.cz/knot/knot-resolver/-/issues/119[vld-refactoring] Fails to resolve ftp.tu-graz.ac.at2017-08-22T13:33:34+02:00Ondřej Surý[vld-refactoring] Fails to resolve ftp.tu-graz.ac.atvld-refactoring snapshot from this morning:
```
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'ftp.tu-graz.ac.at.' type 'A'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score...vld-refactoring snapshot from this morning:
```
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'ftp.tu-graz.ac.at.' type 'A'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 22 zone cut: 'at.' m12n: 'aC.AT.' type: 'NS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= found cut, retrying with non-minimized name
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 17 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 19 zone cut: 'at.' m12n: 'FTP.tu-GraZ.aC.at.' type: 'A' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns1.tu-graz.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns5.univie.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns2.tu-graz.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= using glue for 'ns10.univie.ac.at.'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= referral response, follow
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [vldr] <= DS\NSEC was not found, querying for DS
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 18 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [plan] plan 'tu-graz.ac.at.' type 'DS'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 18 zone cut: 'at.' m12n: 'aC.aT.' type: 'NS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= found cut, retrying with non-minimized name
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] <= server: '81.91.161.98' rtt: 17 ms
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] => querying: '81.91.161.98' score: 17 zone cut: 'at.' m12n: 'TU-GRAz.ac.AT.' type: 'DS' proto: 'udp'
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [iter] <= rcode: NOERROR
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [vldr] <= bad NODATA proof
Jan 06 13:57:18 milkyway.rfc1925.org kresd[30588]: [resl] finished: 8, queries: 0, mempool: 16400 B
```
But it looks ok according to dnsviz: http://dnsviz.net/d/ftp.tu-graz.ac.at/dnssec/1.2.0 releaseŠtěpán BalážikŠtěpán Balážikhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/118[vld-refactoring] Fails to revalidate .org2017-08-22T13:33:34+02:00Ondřej Surý[vld-refactoring] Fails to revalidate .orgThis happens on two independent knot resolvers. The version is 1.2.0~20161222-1+0~201612220911 which is based on `vld-refactoring` branch as of 2016-12-22 state.
It needs cache purge to make the resolving work again for those.
I am...This happens on two independent knot resolvers. The version is 1.2.0~20161222-1+0~201612220911 which is based on `vld-refactoring` branch as of 2016-12-22 state.
It needs cache purge to make the resolving work again for those.
I am going to upgrade both machines to the todays state to see whether it helps.
Happened with anything under `rfc1925.org` yesterday (and cache purge helped).
```
root@milkyway:~# host ftp.cz.debian.org
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'A'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 30 zone cut: '.' m12n: 'ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'a2.org.afilias-nst.info.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFIliAS-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIliaS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLias-nsT.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiliaS-nsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AFiLiAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfilIAs-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLias-nST.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLIAS-nst.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AfiLIAs-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 96 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFILias-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAs-nSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:33 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLIas-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAs-nst.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLias-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFilIAs-nSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 95 zone cut: 'org.' m12n: 'AFIlIaS-NST.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 94 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFILias-NSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiliAS-NSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIaS-nST.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afilias-nsT.OrG.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type A error: SERVFAIL
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AfILiAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLIAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'AAAA'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 27 zone cut: '.' m12n: 'orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'a2.org.afilias-nst.info.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfiLiAS-nst.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILiaS-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAS-NSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIAs-nsT.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiliAS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAs-NST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiliaS-nST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILIAs-nST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AFiLiAs-nsT.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILias-NSt.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfilIAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afiLIaS-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'AFilias-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 94 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAS-NST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afiLias-NST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAS-Nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afiLIaS-Nst.oRg.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type AAAA error: SERVFAIL
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'aFilIaS-NSt.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFilIAS-nSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLiAS-nST.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:34 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAS-NsT.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiLIas-NsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'ftp.cz.debian.org.' type 'MX'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'org.' type 'DNSKEY'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan 'd0.org.afilias-nst.org.' type 'AAAA'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => using root hints
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [plan] plan '.' type 'DNSKEY'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [ rc ] => satisfied from cache
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= rcode: NOERROR
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= parent: updating DNSKEY
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:dc3::35' score: 25 zone cut: '.' m12n: 'org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'd0.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b0.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= using glue for 'b2.org.afilias-nst.org.'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= DS: OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] <= answer valid, OK
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:dc3::35' rtt: 24 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIlias-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFIlIaS-NSt.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIas-NSt.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afIlIaS-nst.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFILIAS-NsT.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIAs-nsT.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliAS-nST.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLiaS-nst.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIlIas-nST.org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 10 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'afILias-NsT.oRG.' type: 'NS' proto: 'udp'
Host ftp.cz.debian.org. type MX error: SERVFAIL
root@milkyway:~# Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFilIAS-nSt.oRG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLIas-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliaS-nst.OrG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLiaS-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 10 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILIas-NSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AFiLIAs-nSt.orG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAS-NST.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfIliAS-NsT.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAs-NSt.Org.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'aFiliAs-nsT.ORG.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '2001:500:48::1' score: 11 zone cut: 'org.' m12n: 'AfILiAs-nsT.oRg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '2001:500:48::1' rtt: 9 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => querying: '199.19.57.1' score: 94 zone cut: 'org.' m12n: 'afILIaS-NSt.ORg.' type: 'NS' proto: 'udp'
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [iter] <= referral response, follow
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] <= server: '199.19.57.1' rtt: 95 ms
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] => resuming yielded answer
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [vldr] >< cut changed (new signer), needs revalidation
Jan 06 13:39:35 milkyway.rfc1925.org kresd[8277]: [resl] finished: 8, queries: 1, mempool: 196800 B
```1.2.0 releaseGrigorii DemidovGrigorii Demidovhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/88TA bootstrap doesn't work without external resolver2020-01-07T17:16:08+01:00Ondřej SurýTA bootstrap doesn't work without external resolverIf `/etc/resolv.conf` contains `nameserver 127.0.0.1` and the nameserver running on `127.0.0.1` is the Knot Resolver instance bootstrapping the root TA, then the bootstrapping fails with name resolution error as it doesn't start resolvin...If `/etc/resolv.conf` contains `nameserver 127.0.0.1` and the nameserver running on `127.0.0.1` is the Knot Resolver instance bootstrapping the root TA, then the bootstrapping fails with name resolution error as it doesn't start resolving until the root TA is bootstrapped.
Knot Resolver should be able to resolve at least `data.iana.org` when doing the bootstrap and it should probably fail to start if it can't bootstrap root TA.https://gitlab.nic.cz/knot/knot-resolver/-/issues/58dnssec bug: resolver fails to validate answers2018-11-12T16:15:57+01:00Ondřej Surýdnssec bug: resolver fails to validate answersThis is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rco...This is actually a validator bug, that's why it retries every time. We can discuss how much effort should resolver do when it's fixed:
```
[plan] plan 'www.cmu.edu.' type 'A'
[plan] plan 'cmu.edu.' type 'DNSKEY'
[iter] <= rcode: NOERROR
[vldr] <= parent: updating DNSKEY
[vldr] <= answer valid, OK
[iter] <= rcode: NOERROR
[vldr] <= couldn't validate RRSIGs
```
One of the nameservers for cmu.edu is misconfigured and returns `REFUSED`:
```
$ dig IN A www.cmu.edu @ny-server-03.net.cmu.edu.
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 61298
;; Flags: qr rd; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:04 CEST
;; From 38.96.147.4@53(UDP) in 98.5 ms
```
kresd should try harder and not return `REFUSED`, but retry with different nameservers.
```
$ dig IN A www.cmu.edu @127.0.0.1
;; ->>HEADER<<- opcode: QUERY; status: REFUSED; id: 60007
;; Flags: qr rd ra; QUERY: 1; ANSWER: 0; AUTHORITY: 0; ADDITIONAL: 0
;; QUESTION SECTION:
;; www.cmu.edu. IN A
;; Received 29 B
;; Time 2016-04-15 09:13:46 CEST
;; From 127.0.0.1@53(UDP) in 165.3 ms
```
Grigorii DemidovGrigorii Demidovhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/41Program received signal SIGSEGV, Segmentation fault. 0x00007ffff66b48ed in ??...2022-04-08T16:14:00+02:00Ondřej SurýProgram received signal SIGSEGV, Segmentation fault. 0x00007ffff66b48ed in ?? () from /lib/x86_64-linux-gnu/libc.so.6Version v1.0.0-beta1-96-gc7e8224
And it's something in the config as it doesn't crash when config is empty:
config:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2...Version v1.0.0-beta1-96-gc7e8224
And it's something in the config as it doesn't crash when config is empty:
config:
```
modules = {
view = 'true',
stats = 'true',
cachectl = 'true',
dns64 = '2001:1488:ffff:64:ffff:ffff::',
tinyweb = {
addr = '127.0.0.1:8053',
geoip = '/root'
}
}
```
```
#0 0x00007ffff66b48ed in ?? () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1 0x00007ffff6d0bd92 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#2 0x00007ffff6d0d0aa in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#3 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#4 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#5 0x000000000041049f in l_ffi_call (argc=2, L=0x40000378) at daemon/ffimodule.c:84
status = <optimized out>
#6 l_ffi_layer_begin (ctx=0x7fffffffe2e0, module_param=<optimized out>) at daemon/ffimodule.c:153
cb_slot = <optimized out>
L = 0x40000378
#7 0x0000000000414ab8 in resolve_query (packet=0x6a07a0, request=0x6a07a0) at lib/resolve.c:390
layer = {node = {next = 0x0, prev = 0x0}, state = 2, mm = 0x0, data = 0x6a07a0, api = 0x662640}
mod = <optimized out>
i = 4
rplan = 0x6a0800
qtype = <optimized out>
negative_anchors = 0x7fffffffea20
trust_anchors = 0x7fffffffea00
answer = <optimized out>
qname = <optimized out>
qclass = <optimized out>
qry = 0x6a2b90
#8 kr_resolve_consume (request=request@entry=0x6a07a0, src=src@entry=0x0, packet=packet@entry=0x6965b0) at lib/resolve.c:407
rplan = 0x6a0800
ctx = 0x7fffffffe9f0
qry = <optimized out>
tried_tcp = <optimized out>
#9 0x000000000040de58 in qr_task_step (task=0x6a07a0, packet_source=packet_source@entry=0x0, packet=0x6965b0) at daemon/worker.c:449
sock_type = -1
state = <optimized out>
choice = <optimized out>
#10 0x000000000040e5d8 in worker_resolve (worker=worker@entry=0x7ffff7f95010, query=<optimized out>, options=options@entry=0, on_complete=<optimized out>, baton=<optimized out>)
at daemon/worker.c:616
task = <optimized out>
#11 0x000000000040fc0c in wrk_resolve (L=0x40000378) at daemon/bindings.c:658
worker = 0x7ffff7f95010
pkt = 0x6965b0
dname = '\000' <repeats 80 times>, "\270\003\000@\000\000\000\000x\003\000@\000\000\000\000\220\344\377\377\377\177\000\000\b\032\003@\000\000\000\000\210\345\001@\000\000\000\000\310\324\000@\000\000\000\000HN\001@\000\000\000\000\200\345\001@\000\000\000\000\324\344\377\377\377\177\000\000_\317\320\366\377\177\000\000X\237\000@\000\000\000\000\330\344\377\377\377\177\000\000\210\344\377\377\377\177\000\000\204\344\377\377\377\177\000\000x\003\000@\001\000\000\000"...
rrtype = 2
rrclass = <optimized out>
ret = 0
options = 0
#12 0x00007ffff6cd7a88 in ?? () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#13 0x00007ffff6d1af60 in lua_pcall () from /usr/lib/x86_64-linux-gnu/libluajit-5.1.so.2
No symbol table info available.
#14 0x000000000040c11c in engine_pcall (L=<optimized out>, argc=<optimized out>) at daemon/engine.c:469
No locals.
#15 0x000000000040fe03 in execute_callback (L=0x40000378, argc=1) at daemon/bindings.c:476
ret = <optimized out>
#16 0x000000000040d611 in qr_task_complete (handle=<optimized out>) at daemon/worker.c:280
task = 0x697750
worker = 0x7ffff7f95010
#17 0x00007ffff7787698 in uv_run () from /usr/lib/x86_64-linux-gnu/libuv.so.1
No symbol table info available.
#18 0x00000000004087c6 in run_worker (engine=0x7fffffffe9f0, loop=0x7ffff799f980) at daemon/main.c:193
sock_file = 0x62f250 "tty/29364"
pipe = {data = 0x7fffffffe9f0, loop = 0x7ffff799f980, type = UV_NAMED_PIPE, close_cb = 0x0, handle_queue = {0x697878, 0x662270}, u = {fd = 5, reserved = {0x5, 0x17, 0x7ffff7feacb8,
0x7ffff7de55ce}}, next_closing = 0x0, flags = 24576, write_queue_size = 0, alloc_cb = 0x0, read_cb = 0x0, connect_req = 0x0, shutdown_req = 0x0, io_watcher = {cb = 0x7ffff7790540,
pending_queue = {0x7fffffffe970, 0x7fffffffe970}, watcher_queue = {0x7fffffffe980, 0x7fffffffe980}, pevents = 1, events = 1, fd = 21}, write_queue = {0x7fffffffe9a0, 0x7fffffffe9a0},
write_completed_queue = {0x7fffffffe9b0, 0x7fffffffe9b0}, connection_cb = 0x411010 <tty_accept>, delayed_error = 0, accepted_fd = -1, queued_fds = 0x0, ipc = 0,
pipe_fname = 0x62f3f0 "tty/29364"}
#19 main (argc=<optimized out>, argv=<optimized out>) at daemon/main.c:350
forks = <optimized out>
addr_set = {at = 0x648470, len = 2, cap = <optimized out>}
keyfile = 0x6289c0 <keyfile_buf> "/usr/share/dns/root.key"
config = 0x0
keyfile_buf = "/usr/share/dns/root.key", '\000' <repeats 4073 times>
c = <optimized out>
li = 0
ret = 0
opts = {{name = 0x42000d "addr", has_arg = 1, flag = 0x0, val = 97}, {name = 0x41e96c "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x420422 "keyfile", has_arg = 1, flag = 0x0,
val = 107}, {name = 0x42042a "forks", has_arg = 1, flag = 0x0, val = 102}, {name = 0x41e9ae "verbose", has_arg = 0, flag = 0x0, val = 118}, {name = 0x420430 "version", has_arg = 0,
flag = 0x0, val = 86}, {name = 0x41e99b "help", has_arg = 0, flag = 0x0, val = 104}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
loop = 0x7ffff799f980
sigint = {data = 0x7ffff7feacb8, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x97a26e6c, handle_queue = {0x7fffffffe760, 0x7ffff799fa50}, u = {fd = -134304584, reserved = {
0x7ffff7feacb8, 0x7ffff7de55ce, 0x7ffff7ff8160, 0x7fffffffe720}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 2, tree_entry = {rbe_left = 0x0,
rbe_right = 0x7fffffffe740, rbe_parent = 0x0, rbe_color = 0}, caught_signals = 0, dispatched_signals = 0}
sigterm = {data = 0x7ffff5ec1438, loop = 0x7ffff799f980, type = UV_SIGNAL, close_cb = 0x1000000ab, handle_queue = {0x6616e0, 0x7fffffffe6c0}, u = {fd = -5952, reserved = {0x7fffffffe8c0,
0x7ffff7de4c5c, 0x7fffffffe8e8, 0xd82b830}}, next_closing = 0x0, flags = 24576, signal_cb = 0x410fd0 <signal_handler>, signum = 15, tree_entry = {rbe_left = 0x0, rbe_right = 0x0,
rbe_parent = 0x7fffffffe6a0, rbe_color = 1}, caught_signals = 0, dispatched_signals = 0}
pool = {ctx = 0x648530, alloc = 0x411830 <mp_alloc>, free = 0x0}
engine = {resolver = {options = 0, opt_rr = 0x6485a0, trust_anchors = {root = 0x634f30, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, negative_anchors = {
root = 0x0, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}, root_hints = {name = 0x6485d8 "", nsset = {root = 0x6486a1, malloc = 0x7ffff7bcb7b0 <mm_alloc>,
free = 0x7ffff7bcb7d0 <mm_free>, baton = 0x7fffffffe680}, key = 0x0, trust_anchor = 0x0, parent = 0x0, pool = 0x7fffffffe680}, cache = {db = 0x648cb8, api = 0x7ffff7dda300,
stats = {hit = 26, miss = 2, insert = 2, delete = 0, txn_read = 1, txn_write = 3}}, cache_rtt = 0x649550, cache_rep = 0x659590, modules = 0x7fffffffeaf8, pool = 0x7fffffffe680},
net = {loop = 0x7ffff799f980, endpoints = {root = 0x62b911, malloc = 0x411e50 <malloc_std>, free = 0x411e40 <free_std>, baton = 0x0}}, modules = {at = 0x662750, len = 9, cap = 10},
storage_registry = {at = 0x661930, len = 1, cap = 5}, pool = 0x7fffffffe680, L = 0x40000378}
```https://gitlab.nic.cz/knot/knot-resolver/-/issues/876manager: API: cache clearance implementation via HTTP API2024-02-15T13:38:42+01:00Aleš Mrázekmanager: API: cache clearance implementation via HTTP APIClearing the resolvers cache is possible by connecting to running `kresd` using its unix domain socket and calling [cache.clear()](https://knot-resolver.readthedocs.io/en/stable/daemon-bindings-cache.html#cache.clear).
Starting with ver...Clearing the resolvers cache is possible by connecting to running `kresd` using its unix domain socket and calling [cache.clear()](https://knot-resolver.readthedocs.io/en/stable/daemon-bindings-cache.html#cache.clear).
Starting with version 6, it would be nice to be able to clear the cache via the HTTP management API and the `kresctl` tool.
For example:
```bash
$ kresctl cache-clear # like 'cache.clear()', removes max. 100 records by default
$ kresctl cache-clear --name example.net. # and so on with other 'cache.clear()' parameters
```6.1.0https://gitlab.nic.cz/knot/knot-resolver/-/issues/814datamodel: validation: check that directory/file is readable/writable for kresd2023-09-28T04:44:51+02:00Aleš Mrázekdatamodel: validation: check that directory/file is readable/writable for kresdDuring validation, we check for the existence of directories/files in the configuration, but they may be unreadable/unwritable for `kresd` and the resolver can fail to start even configuration is valid. Then it may be unclear where the e...During validation, we check for the existence of directories/files in the configuration, but they may be unreadable/unwritable for `kresd` and the resolver can fail to start even configuration is valid. Then it may be unclear where the error actually is.
The solution may be to create custom types (e.g. `ReadableFile`, `WritableDir`) that additionally check the rights for `kresd`.https://gitlab.nic.cz/knot/knot-resolver/-/issues/742TLS: use GNUTLS_NO_TICKETS_TLS122022-05-20T09:39:49+02:00Vladimír Čunátvladimir.cunat@nic.czTLS: use GNUTLS_NO_TICKETS_TLS12It's a new [feature](https://gitlab.com/gnutls/gnutls/-/merge_requests/1475) that will be part of gnutls > 3.7.4. With TLS 1.2, session resumption weakens privacy guarantees too much ([explanation](https://gitlab.com/gnutls/gnutls/-/mer...It's a new [feature](https://gitlab.com/gnutls/gnutls/-/merge_requests/1475) that will be part of gnutls > 3.7.4. With TLS 1.2, session resumption weakens privacy guarantees too much ([explanation](https://gitlab.com/gnutls/gnutls/-/merge_requests/1475)), so it's better avoided – at least by default.https://gitlab.nic.cz/knot/knot-resolver/-/issues/700kresd process manager: decouple restarts from config change requests2022-11-19T20:51:24+01:00Vaclav Sraierkresd process manager: decouple restarts from config change requests- goals:
- increase throughput for config changes
- limitations:
- we can't make a config change faster as we have to restart everything
- proposed solution:
- keep track of config versions and restart `kresd`s continuously decoupl...- goals:
- increase throughput for config changes
- limitations:
- we can't make a config change faster as we have to restart everything
- proposed solution:
- keep track of config versions and restart `kresd`s continuously decoupled from requests. Mark request as finished when the config version of all `kresd`s is higherhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/625DNS64: recognize ipv4only.arpa (RFC 8880)2022-01-04T12:00:41+01:00Vladimír Čunátvladimir.cunat@nic.czDNS64: recognize ipv4only.arpa (RFC 8880)> Forwarding or iterative recursive resolvers that have been explicitly configured to perform DNS64 address synthesis in support of a companion NAT64 gateway (i.e., "DNS64 recursive resolvers") MUST recognize 'ipv4only.arpa' as special.
...> Forwarding or iterative recursive resolvers that have been explicitly configured to perform DNS64 address synthesis in support of a companion NAT64 gateway (i.e., "DNS64 recursive resolvers") MUST recognize 'ipv4only.arpa' as special.
but there might be more requirements to follow in the [RFC 8880](https://www.rfc-editor.org/rfc/rfc8880.html).
EDIT: to be clear, resolvers not configured to do DNS64 synthesis SHOULD NOT recognize these names as special.https://gitlab.nic.cz/knot/knot-resolver/-/issues/617doh2: send cache-control header2020-11-27T12:49:25+01:00Tomas Krizekdoh2: send cache-control headerAs of version 5.2.0, DoH(2) doesn't send `cache-control` header with TTL.As of version 5.2.0, DoH(2) doesn't send `cache-control` header with TTL.https://gitlab.nic.cz/knot/knot-resolver/-/issues/616doh2: process input headers2021-05-25T14:44:37+02:00Tomas Krizekdoh2: process input headersAs of 5.2.0, the DoH(2) implementation ignores all headers (including some pseudoheaders).
At least some (pseudo)headers should be processed, e.g.:
- `content-type`
- `:path` (currently, any endpoint answers to DoH queries)
There could...As of 5.2.0, the DoH(2) implementation ignores all headers (including some pseudoheaders).
At least some (pseudo)headers should be processed, e.g.:
- `content-type`
- `:path` (currently, any endpoint answers to DoH queries)
There could also be a mechanism for modules to request certain headers that would be passed along with a request.Tomas KrizekTomas Krizekhttps://gitlab.nic.cz/knot/knot-resolver/-/issues/604cache: zero-downtime restart is not supported across versions which change ca...2020-11-04T11:53:33+01:00Petr Špačekcache: zero-downtime restart is not supported across versions which change cache format/versionCurrently we do not handle the case where cache format differs between two versions which are running in parallel.
- Such changes happen very very rarely so it is questionable if we need to support it.
- At least we should make note in ...Currently we do not handle the case where cache format differs between two versions which are running in parallel.
- Such changes happen very very rarely so it is questionable if we need to support it.
- At least we should make note in release notes when it is necessary to stop all instances before starting new ones.
See rest of the [discussion](https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1042#note_169683).
The following discussion from !1042 should be addressed:
- [ ] @pspacek started a [discussion](https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1042#note_169683): (+1 comment)
> I wonder how this magic would work in situation where:
> - kresd instances 1+2 are running version 5.y.z with cache in /var/cache/knot-resolver
> - kresd binary gets updated to version 6.0.0
> - admin restarts instance 1 first (according to https://knot-resolver.readthedocs.io/en/v5.1.2/systemd-multiinst.html#zero-downtime-restarts) and restarts instance 2 later
> I guess instance 2 would not detect this unless cache overflows, so most likely instance 2 will write data in old format into cache versioned by version 6.0.0.
>
> Am I correct?
>
> If so I think we should open issue and keep it in mind for future cache rewrite/migration to custom data structure.