send EDNS with SERVFAILs, e.g. on validation failures
All threads resolved!
All threads resolved!
Compare changes
Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.
Fixes https://gitlab.labs.nic.cz/knot/knot-resolver/issues/180. Extracted out of !794 (closed) and !660 (closed).
Large pipeline seems good: https://gitlab.labs.nic.cz/knot/knot-resolver/pipelines/49582 (earlier version: https://gitlab.labs.nic.cz/knot/knot-resolver/pipelines/49365)
Possible caveats: modules that want to produce a SERVFAIL will need to clear to_wire flags on RRs that shouldn't go into the answer (which depends on what the module wants to achieve). That's probably hard to avoid, as e.g. in case of CNAME chains we should use non-empty SERVFAILs anyway (but that will be fixed in !660 (closed) or similar).