1. kresd/qname-min
qname minimisation in Knot resolver
%dig ntt.co.jp @127.0.0.3
resolver knows no zone cut for co.jp;
- question : if the resolver receive co.jp delegation, what will happen?
- 1) accept poisonous delegation response 2) reject response because it is poison
-- ToshinoriMaeno 2016-04-02 04:03:25
kresd log
> cachectl.clear() true > [plan] plan 'ntt.co.jp.' type 'A' [resl] => using root hints [resl] => querying: '202.12.27.33' score: 10 zone cut: '.' m12n: 'JP.' type: 'NS' [resl] optional: '199.7.83.42' score: 10 zone cut: '.' m12n: 'JP.' type: 'NS' [resl] optional: '193.0.14.129' score: 10 zone cut: '.' m12n: 'JP.' type: 'NS' [resl] optional: '192.58.128.30' score: 10 zone cut: '.' m12n: 'JP.' type: 'NS' [iter] <= referral response, follow [resl] <= server: '202.12.27.33' rtt: 6 ms [resl] => querying: '203.119.40.1' score: 10 zone cut: 'jp.' m12n: 'CO.Jp.' type: 'NS' [resl] optional: '150.100.6.8' score: 10 zone cut: 'jp.' m12n: 'CO.Jp.' type: 'NS' [resl] optional: '192.50.43.53' score: 10 zone cut: 'jp.' m12n: 'CO.Jp.' type: 'NS' [resl] optional: '210.138.175.244' score: 10 zone cut: 'jp.' m12n: 'CO.Jp.' type: 'NS' [iter] <= rcode: NOERROR [iter] <= found cut, retrying with non-minimized name [ pc ] => answer cached for TTL=900 [resl] <= server: '203.119.40.1' rtt: 6 ms [resl] => querying: '150.100.6.8' score: 10 zone cut: 'jp.' m12n: 'Ntt.Co.JP.' type: 'A' [resl] optional: '192.50.43.53' score: 10 zone cut: 'jp.' m12n: 'Ntt.Co.JP.' type: 'A' [resl] optional: '210.138.175.244' score: 10 zone cut: 'jp.' m12n: 'Ntt.Co.JP.' type: 'A' [resl] optional: '156.154.100.5' score: 10 zone cut: 'jp.' m12n: 'Ntt.Co.JP.' type: 'A' [iter] <= referral response, follow [resl] <= server: '150.100.6.8' rtt: 6 ms [plan] plan 'dns-c.iij.ad.jp.' type 'AAAA' [resl] => querying: '192.50.43.53' score: 10 zone cut: 'jp.' m12n: 'AD.Jp.' type: 'NS' [resl] optional: '210.138.175.244' score: 10 zone cut: 'jp.' m12n: 'AD.Jp.' type: 'NS' [resl] optional: '156.154.100.5' score: 10 zone cut: 'jp.' m12n: 'AD.Jp.' type: 'NS' [resl] optional: '202.12.30.131' score: 10 zone cut: 'jp.' m12n: 'AD.Jp.' type: 'NS' [iter] <= rcode: NOERROR [iter] <= found cut, retrying with non-minimized name [ pc ] => answer cached for TTL=900 [resl] <= server: '192.50.43.53' rtt: 20 ms [resl] => querying: '203.119.40.1' score: 11 zone cut: 'jp.' m12n: 'DnS-c.IiJ.AD.JP.' type: 'AAAA' [resl] optional: '210.138.175.244' score: 11 zone cut: 'jp.' m12n: 'DnS-c.IiJ.AD.JP.' type: 'AAAA' [resl] optional: '156.154.100.5' score: 11 zone cut: 'jp.' m12n: 'DnS-c.IiJ.AD.JP.' type: 'AAAA' [resl] optional: '202.12.30.131' score: 11 zone cut: 'jp.' m12n: 'DnS-c.IiJ.AD.JP.' type: 'AAAA' [iter] <= referral response, follow [resl] <= server: '203.119.40.1' rtt: 6 ms [resl] => querying: '210.130.1.5' score: 10 zone cut: 'iij.ad.jp.' m12n: 'dNs-C.Iij.Ad.Jp.' type: 'AAAA' [resl] optional: '210.130.0.5' score: 10 zone cut: 'iij.ad.jp.' m12n: 'dNs-C.Iij.Ad.Jp.' type: 'AAAA' [iter] <= rcode: NOERROR [resl] <= server: '210.130.1.5' rtt: 6 ms [plan] plan 'dns-c.iij.ad.jp.' type 'A' [resl] => querying: '210.130.0.5' score: 10 zone cut: 'iij.ad.jp.' m12n: 'DNs-c.IiJ.Ad.jP.' type: 'A' [iter] <= rcode: NOERROR [resl] <= server: '210.130.0.5' rtt: 6 ms [resl] => querying: '210.130.1.15' score: 10 zone cut: 'ntt.co.jp.' m12n: 'nTT.cO.JP.' type: 'A' [iter] <= rcode: NOERROR [ pc ] => answer cached for TTL=900 [resl] <= server: '210.130.1.15' rtt: 6 ms [resl] finished: 4, queries: 3, mempool: 32800 B