Viktor Dukhovni <[email protected]> wrote:

> What I haven't seen reported is measurements of problems that occur when
> the EDNS(0) UDP buffer size is *too small*.

A full service resolver should not have a fixed buffer size but instead
probe for what works. They pretty much already do so. There remains some
question about what their upper limit should be; it seems reasonable to me
to grow up to a 1500 octet MTU but no bigger.

Stub resolvers should do the same if they have enough brain to do so :-)

The tricky balance is the UDP response size limit on the auth side, which
can't be adaptive, and probably needs to be a bit more pessimistic than
a 1500 octet MTU.

Tony.
-- 
f.anthony.n.finch  <[email protected]>  http://dotat.at/
Irish Sea: South or southwest 6 to gale 8, occasionally 5 later. Moderate or
rough. Rain or drizzle. Good, occasionally poor.
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to