Skip to content

When +DO bit is set, return DNSSEC related records in answers

Compare Knot Resolver:

$ dig +noall +answer +dnssec +multi pir.org +dnssec @::1
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 59946
;; Flags: qr rd ra; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 1

;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 4096 B; ext-rcode: Unused

;; ANSWER SECTION:
pir.org.            	211 IN A 97.107.141.235

;; Received 52 B
;; Time 2017-01-13 13:47:26 CET
;; From ::1@53(UDP) in 0.1 ms

vs Google PDNS:

$ dig +noall +answer +dnssec +multi pir.org +dnssec @8.8.8.8
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 42672
;; Flags: qr rd ra ad; QUERY: 1; ANSWER: 2; AUTHORITY: 0; ADDITIONAL: 1

;; EDNS PSEUDOSECTION:
;; Version: 0; flags: do; UDP size: 512 B; ext-rcode: Unused

;; ANSWER SECTION:
pir.org.            	299 IN A 97.107.141.235
pir.org.            	299 IN RRSIG A 5 2 300 20170127084000 (
				20170113084000 12020 pir.org.
				ictBcdN3BDiX3z4w6VHmJYHZQoRONbxqITAc8EQS
				vXXI20BA9vsrKjJdrCtY6U8iMGBqS+uV9hWO+38k
				lVBRBnW5NB53m47g2cJ1de4GDphjhVWg/G9HhTs2
				lPfKXsBKvZVWYQgM1ArSTYjzGa45V8Enb7DETjuI
				Z7Sr1noI6mM=
				)

;; Received 219 B
;; Time 2017-01-13 13:47:33 CET
;; From 8.8.8.8@53(UDP) in 48.4 ms
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information