mirror of
https://github.com/NLnetLabs/unbound.git
synced 2024-09-21 14:47:09 +00:00
e0745813f4
resilience of the server. The so-reuseport, harden-below-nxdomain, and minimal-responses options are enabled by default. They used to be disabled by default, waiting to make sure they worked. They are enabled by default now, and can be disabled explicitly by setting them to "no" in the unbound.conf config file. The reuseport and minimal options increases speed of the server, and should be otherwise harmless. The harden-below-nxdomain option works well together with the recently default enabled qname minimisation, this causes more fetches to use information from the cache. git-svn-id: file:///svn/unbound/trunk@4871 be551aaa-1e26-0410-a405-d3ace91eadb9
247 lines
4.5 KiB
Plaintext
247 lines
4.5 KiB
Plaintext
; config options
|
|
server:
|
|
target-fetch-policy: "0 0 0 0 0"
|
|
do-ip6: no
|
|
minimal-responses: no
|
|
|
|
stub-zone:
|
|
name: "."
|
|
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
|
|
CONFIG_END
|
|
|
|
SCENARIO_BEGIN Test cache ttls where parent child differ in ttl
|
|
; and the lameness for parent suddenly becomes the only information point.
|
|
|
|
; K.ROOT-SERVERS.NET.
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 193.0.14.129
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
. IN NS
|
|
SECTION ANSWER
|
|
. IN NS K.ROOT-SERVERS.NET.
|
|
SECTION ADDITIONAL
|
|
K.ROOT-SERVERS.NET. IN A 193.0.14.129
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode subdomain
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
com. IN NS
|
|
SECTION AUTHORITY
|
|
com. IN NS a.gtld-servers.net.
|
|
SECTION ADDITIONAL
|
|
a.gtld-servers.net. IN A 192.5.6.30
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode subdomain
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
net. IN NS
|
|
SECTION AUTHORITY
|
|
net. IN NS e.gtld-servers.net.
|
|
SECTION ADDITIONAL
|
|
e.gtld-servers.net. IN A 192.12.94.30
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
; a.gtld-servers.net.
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 192.5.6.30
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
com. IN NS
|
|
SECTION ANSWER
|
|
com. IN NS a.gtld-servers.net.
|
|
SECTION ADDITIONAL
|
|
a.gtld-servers.net. IN A 192.5.6.30
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode subdomain
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN NS
|
|
SECTION AUTHORITY
|
|
example.com. IN NS ns.foo.com.
|
|
SECTION ADDITIONAL
|
|
;ns.foo.com. 200 IN A 1.2.3.44
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode subdomain
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
foo.com. IN NS
|
|
SECTION AUTHORITY
|
|
foo.com. 200 IN NS ns.foo.com.
|
|
SECTION ADDITIONAL
|
|
ns.foo.com. 200 IN A 1.2.3.44
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
; e.gtld-servers.net.
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 192.12.94.30
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
net. IN NS
|
|
SECTION ANSWER
|
|
net. IN NS e.gtld-servers.net.
|
|
SECTION ADDITIONAL
|
|
e.gtld-servers.net. IN A 192.12.94.30
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
; ns.foo.com.
|
|
; The parent-IP version
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 1.2.3.44
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY AA QR NOERROR
|
|
SECTION QUESTION
|
|
foo.com. IN NS
|
|
SECTION ANSWER
|
|
foo.com. 200 IN NS ns.foo.com.
|
|
SECTION ADDITIONAL
|
|
ns.foo.com. 100 IN A 1.2.3.44
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY AA QR NOERROR
|
|
SECTION QUESTION
|
|
ns.foo.com. IN A
|
|
SECTION ANSWER
|
|
ns.foo.com. 100 IN A 1.2.3.44
|
|
SECTION AUTHORITY
|
|
foo.com. 200 IN NS ns.foo.com.
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY AA QR NOERROR
|
|
SECTION QUESTION
|
|
ns.foo.com. IN AAAA
|
|
SECTION AUTHORITY
|
|
foo.com. 100 IN SOA . . 1 2 3 4 5
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY AA QR NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN NS
|
|
SECTION ANSWER
|
|
example.com. 200 IN NS ns.foo.com.
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY AA QR NOERROR
|
|
SECTION QUESTION
|
|
www.example.com. IN A
|
|
SECTION ANSWER
|
|
www.example.com. 100 IN A 10.20.30.40
|
|
SECTION AUTHORITY
|
|
example.com. 200 IN NS ns.foo.com.
|
|
SECTION ADDITIONAL
|
|
ns.foo.com 100 IN A 1.2.3.44
|
|
ENTRY_END
|
|
RANGE_END
|
|
|
|
; NOT USED. The parent side equals child side but not in the cache.
|
|
; and they have different TTLs only.
|
|
; ns.foo.com
|
|
; The child IP version. Does not respond to anything (servfail instead
|
|
; of timeouts since this is easier to encode in .rpl file format).
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 1.2.3.55
|
|
ENTRY_BEGIN
|
|
MATCH opcode
|
|
ADJUST copy_id copy_query
|
|
REPLY QR SERVFAIL
|
|
SECTION QUESTION
|
|
foo.com. IN NS
|
|
SECTION ANSWER
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
STEP 1 QUERY
|
|
ENTRY_BEGIN
|
|
REPLY RD
|
|
SECTION QUESTION
|
|
www.example.com. IN A
|
|
ENTRY_END
|
|
|
|
; recursion happens here.
|
|
STEP 20 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all
|
|
REPLY QR RD RA NOERROR
|
|
SECTION QUESTION
|
|
www.example.com. IN A
|
|
SECTION ANSWER
|
|
www.example.com. 100 IN A 10.20.30.40
|
|
SECTION AUTHORITY
|
|
example.com. 100 IN NS ns.foo.com.
|
|
; scrubbed off
|
|
;SECTION ADDITIONAL
|
|
;ns.foo.com IN A 1.2.3.44
|
|
ENTRY_END
|
|
|
|
; Now we wait 101 seconds, and the child data is gone,
|
|
; but the parent-side was cached for 200 and it still there.
|
|
|
|
STEP 30 TIME_PASSES ELAPSE 101
|
|
|
|
STEP 40 QUERY
|
|
ENTRY_BEGIN
|
|
REPLY RD
|
|
SECTION QUESTION
|
|
www.example.com. IN A
|
|
ENTRY_END
|
|
|
|
; recursion happens here.
|
|
STEP 50 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all
|
|
REPLY QR RD RA NOERROR
|
|
SECTION QUESTION
|
|
www.example.com. IN A
|
|
SECTION ANSWER
|
|
www.example.com. 100 IN A 10.20.30.40
|
|
SECTION AUTHORITY
|
|
example.com. 100 IN NS ns.foo.com.
|
|
; scrubbed off
|
|
;SECTION ADDITIONAL
|
|
;ns.foo.com IN A 1.2.3.44
|
|
ENTRY_END
|
|
|
|
SCENARIO_END
|