mirror of
https://github.com/NLnetLabs/domain.git
synced 2026-08-24 08:22:25 +02:00
Philip Homburg
4d13fe8998
This PR adds experimental support for a client cache provided as a pass through transport
232 lines
6.5 KiB
Plaintext
232 lines
6.5 KiB
Plaintext
; Test if DO caching works properly. First we issue a query with the DO flag
|
|
; set and we receive an answer with NSEC3 and RRSIG records and with the AD
|
|
; flag set. Then we issue a test with the DO flag clear and AD set. Make sure
|
|
; that we get an answer from the cache and that the DNSSEC records are
|
|
; stripped and the AD is set. Then issue a test with AD clear. Make sure we
|
|
; get the same answer as with AD set but now AD should be clear.
|
|
|
|
do-ip6: no
|
|
|
|
; config options
|
|
; target-fetch-policy: "3 2 1 0 0"
|
|
; name: "."
|
|
stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
|
|
CONFIG_END
|
|
|
|
SCENARIO_BEGIN Test DO flag set followed by DO flag clear.
|
|
|
|
; K.ROOT-SERVERS.NET.
|
|
RANGE_BEGIN 0 100
|
|
ADDRESS 193.0.14.129
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
. IN NS
|
|
SECTION ANSWER
|
|
. IN NS K.ROOT-SERVERS.NET.
|
|
SECTION ADDITIONAL
|
|
K.ROOT-SERVERS.NET. IN A 193.0.14.129
|
|
ENTRY_END
|
|
|
|
; net.
|
|
ENTRY_BEGIN
|
|
MATCH opcode qname
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
net. IN NS
|
|
SECTION AUTHORITY
|
|
. IN SOA . . 0 0 0 0 0
|
|
ENTRY_END
|
|
|
|
; root-servers.net.
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
root-servers.net. IN NS
|
|
SECTION ANSWER
|
|
root-servers.net. IN NS k.root-servers.net.
|
|
SECTION ADDITIONAL
|
|
k.root-servers.net. IN A 193.0.14.129
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qname
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
root-servers.net. IN A
|
|
SECTION AUTHORITY
|
|
root-servers.net. IN SOA . . 0 0 0 0 0
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
k.root-servers.net. IN A
|
|
SECTION ANSWER
|
|
k.root-servers.net. IN A 193.0.14.129
|
|
SECTION ADDITIONAL
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
k.root-servers.net. IN AAAA
|
|
SECTION AUTHORITY
|
|
root-servers.net. IN SOA . . 0 0 0 0 0
|
|
ENTRY_END
|
|
|
|
; gtld-servers.net.
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
gtld-servers.net. IN NS
|
|
SECTION ANSWER
|
|
gtld-servers.net. IN NS a.gtld-servers.net.
|
|
SECTION ADDITIONAL
|
|
a.gtld-servers.net. IN A 192.5.6.30
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qname
|
|
ADJUST copy_id copy_query
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
gtld-servers.net. IN A
|
|
SECTION AUTHORITY
|
|
gtld-servers.net. IN SOA . . 0 0 0 0 0
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
a.gtld-servers.net. IN A
|
|
SECTION ANSWER
|
|
a.gtld-servers.net. IN A 192.5.6.30
|
|
SECTION ADDITIONAL
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id
|
|
REPLY QR NOERROR
|
|
SECTION QUESTION
|
|
a.gtld-servers.net. IN AAAA
|
|
SECTION AUTHORITY
|
|
gtld-servers.net. IN SOA . . 0 0 0 0 0
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
; a.gtld-servers.net.
|
|
RANGE_BEGIN 0 9
|
|
ADDRESS 192.5.6.30
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname DO
|
|
ADJUST copy_id copy_query
|
|
REPLY QR RD AD NOERROR
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
SECTION AUTHORITY
|
|
example.com. 900 IN SOA a.example.net. nstld.example.com. 1706885485 1800 900 604800 86400
|
|
example.com. 900 IN RRSIG SOA 13 1 900 20240209145125 20240202134125 4534 example.com. uAEEE4oYH9x/QE/5xi41m5TkELdDLEQ+kqoIag/NcISzf//phx+i5ezFPUY3Y/XnaeZLIKFdGVx6D1oFZmLxpA==
|
|
CK0POJMG874LJREF7EFN8430QVIT8BSM.example.com. 21600 IN NSEC3 1 1 0 - ck0q2d6ni4i7eqh8na30ns61o48ul8g5 NS SOA RRSIG DNSKEY NSEC3PARAM
|
|
CK0POJMG874LJREF7EFN8430QVIT8BSM.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240206052637 20240130041637 4534 example.com. +NFtkRVj+SxKGDAJypPm9byEhYAkLFqco9kgi1cI+bO4kJ55Zd/9QFay3xzFIPduA7pjBrWthR9uhHE0Qnf5OA==
|
|
7K5NUBQUB56BBNKQJ6B485STCN1RQ6HT.example.com. 21600 IN NSEC3 1 1 0 - 7k5oetj08ci9mdtvqueq1gq0dgp84qe8 NS DS RRSIG
|
|
7K5NUBQUB56BBNKQJ6B485STCN1RQ6HT.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240206080851 20240130065851 4534 example.com. vYruIKBWnObM4V/+aqPmoxdAi5+UvAQsWBH6i3SbgT7GChssl7FcX8UFlQfeUPilc3lriST4FTXGswGa5111XA==
|
|
3RL2Q58205687C8I9KC9MV46DGHCNS45.example.com. 21600 IN NSEC3 1 1 0 - 3rl2shvumc300iuc2tdl4vml2hnf0o7i NS DS RRSIG
|
|
3RL2Q58205687C8I9KC9MV46DGHCNS45.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240209055857 20240202044857 4534 example.com. TgLjE/venWu8OxOn7iLvdt87u4aojGY4Nh7Susc7xXWAKir5s1yjoW/R/7E8E/9vEouJGKViZ82NQ3PMec3jbw==
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
; a.gtld-servers.net.
|
|
RANGE_BEGIN 10 19
|
|
ADDRESS 192.5.6.30
|
|
|
|
ENTRY_BEGIN
|
|
MATCH opcode qtype qname
|
|
ADJUST copy_id copy_query
|
|
REPLY QR RD AD NOERROR
|
|
SECTION QUESTION
|
|
example.com. IN A
|
|
SECTION ANSWER
|
|
example.com. IN A 1.2.3.4
|
|
ENTRY_END
|
|
|
|
RANGE_END
|
|
|
|
STEP 1 QUERY
|
|
ENTRY_BEGIN
|
|
REPLY RD DO
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
ENTRY_END
|
|
|
|
STEP 2 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all
|
|
REPLY QR RD AD NOERROR
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
SECTION AUTHORITY
|
|
example.com. 900 IN SOA a.example.net. nstld.example.com. 1706885485 1800 900 604800 86400
|
|
example.com. 900 IN RRSIG SOA 13 1 900 20240209145125 20240202134125 4534 example.com. uAEEE4oYH9x/QE/5xi41m5TkELdDLEQ+kqoIag/NcISzf//phx+i5ezFPUY3Y/XnaeZLIKFdGVx6D1oFZmLxpA==
|
|
CK0POJMG874LJREF7EFN8430QVIT8BSM.example.com. 21600 IN NSEC3 1 1 0 - ck0q2d6ni4i7eqh8na30ns61o48ul8g5 NS SOA RRSIG DNSKEY NSEC3PARAM
|
|
CK0POJMG874LJREF7EFN8430QVIT8BSM.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240206052637 20240130041637 4534 example.com. +NFtkRVj+SxKGDAJypPm9byEhYAkLFqco9kgi1cI+bO4kJ55Zd/9QFay3xzFIPduA7pjBrWthR9uhHE0Qnf5OA==
|
|
7K5NUBQUB56BBNKQJ6B485STCN1RQ6HT.example.com. 21600 IN NSEC3 1 1 0 - 7k5oetj08ci9mdtvqueq1gq0dgp84qe8 NS DS RRSIG
|
|
7K5NUBQUB56BBNKQJ6B485STCN1RQ6HT.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240206080851 20240130065851 4534 example.com. vYruIKBWnObM4V/+aqPmoxdAi5+UvAQsWBH6i3SbgT7GChssl7FcX8UFlQfeUPilc3lriST4FTXGswGa5111XA==
|
|
3RL2Q58205687C8I9KC9MV46DGHCNS45.example.com. 21600 IN NSEC3 1 1 0 - 3rl2shvumc300iuc2tdl4vml2hnf0o7i NS DS RRSIG
|
|
3RL2Q58205687C8I9KC9MV46DGHCNS45.example.com. 21600 IN RRSIG NSEC3 13 2 86400 20240209055857 20240202044857 4534 example.com. TgLjE/venWu8OxOn7iLvdt87u4aojGY4Nh7Susc7xXWAKir5s1yjoW/R/7E8E/9vEouJGKViZ82NQ3PMec3jbw==
|
|
ENTRY_END
|
|
|
|
STEP 10 QUERY
|
|
ENTRY_BEGIN
|
|
REPLY RD
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
ENTRY_END
|
|
|
|
STEP 11 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all
|
|
REPLY QR RD NOERROR
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
SECTION AUTHORITY
|
|
example.com. 900 IN SOA a.example.net. nstld.example.com. 1706885485 1800 900 604800 86400
|
|
ENTRY_END
|
|
|
|
STEP 20 QUERY
|
|
ENTRY_BEGIN
|
|
REPLY RD AD
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
ENTRY_END
|
|
|
|
STEP 21 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all
|
|
REPLY QR RD AD NOERROR
|
|
SECTION QUESTION
|
|
doesnotexist.example.com. IN TXT
|
|
SECTION AUTHORITY
|
|
example.com. 900 IN SOA a.example.net. nstld.example.com. 1706885485 1800 900 604800 86400
|
|
ENTRY_END
|
|
|
|
SCENARIO_END
|