Skip to content
Snippets Groups Projects

send EDNS with SERVFAILs, e.g. on validation failures

Merged Vladimír Čunát requested to merge opt-in-bogus into master
All threads resolved!

Fixes https://gitlab.labs.nic.cz/knot/knot-resolver/issues/180. Extracted out of !794 (closed) and !660 (closed).

Large pipeline seems good: https://gitlab.labs.nic.cz/knot/knot-resolver/pipelines/49582 (earlier version: https://gitlab.labs.nic.cz/knot/knot-resolver/pipelines/49365)

Possible caveats: modules that want to produce a SERVFAIL will need to clear to_wire flags on RRs that shouldn't go into the answer (which depends on what the module wants to achieve). That's probably hard to avoid, as e.g. in case of CNAME chains we should use non-empty SERVFAILs anyway (but that will be fixed in !660 (closed) or similar).

Edited by Vladimír Čunát

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • It works for me, it can be merged once the comment is clarified.

  • assigned to @vcunat

  • Vladimír Čunát added 11 commits

    added 11 commits

    • 068b8570...63e6913b - 6 commits from branch master
    • 84bca55a - treewide nitpick: more sensitive detection of KR_STATE_FAIL
    • 13afe21f - lib/resolve: don't skip EDNS if failed
    • 5128d54c - don't set TC if omitting an ADDITIONAL record
    • f41473b1 - lib/resolve: failing states in answer finalization
    • 71461d79 - lib/resolve nitpick: fix lint after the parent commit

    Compare with previous version

  • added 5 commits

    • ee7eadee - treewide nitpick: more sensitive detection of KR_STATE_FAIL
    • 83b8ba1d - lib/resolve: don't skip EDNS if failed
    • 746044fe - don't set TC if omitting an ADDITIONAL record
    • c5654da7 - lib/resolve: failing states in answer finalization
    • 98efda10 - lib/resolve nitpick: fix lint after the parent commit

    Compare with previous version

  • Vladimír Čunát resolved all discussions

    resolved all discussions

  • mentioned in commit 625f4882

  • Please register or sign in to reply
    Loading