Hello 

Case Scenario:
Client sending query to DNS Resolver for google.com.DNS Resolver cached from 
internal root hints that google.com is delegated to DNS proxy server  ( NS 
record ).
DNS proxy is having locall information that google.com has to be delegated to 
public google name server 8.8.8.8
Query from DNS Resolver to DNS proxy server is being sent with disabled 
recursion flag as google.com is defined with NS record.
Client -> DNS Caching Recursive Resolver -> DNS "Proxy" Server -> Public Google 
DNS

Most standard DNS servers (such as BIND, Unbound, or Windows DNS) do not have a 
built-in method to force full recursion for queries received without the 
recursion flag enabled (RD=0).According to RFC standards, if a client does not 
request recursion (RD=0), the server should only respond with data it holds 
locally (authoritatively) or from its cache.

Question is do we have any methods to bypass RFC and force recurion on the DNS 
proxy for incoming queries from DNS Resolver to push on DNS Proxy run recursive 
queirs to find answer for google.com and send back to DNS Resolver then DNS 
Resolver to Client ?




-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list.

Reply via email to