On Sun, Dec 13, 2015 at 4:55 PM, Stephane Bortzmeyer <[email protected]> wrote:
> On Sat, Dec 05, 2015 at 05:07:13PM -0500, > Tim Wicinski <[email protected]> wrote > a message of 23 lines which said: > > > This starts a Call for Adoption for draft-bortzmeyer-dnsop-nxdomain-cut > > Funny, unlike what I wrote in the draft, there is at least a recursor > with a partial support of NXDOMAIN cut (off by default): > > https://doc.powerdns.com/md/recursor/settings/#root-nx-trust > > root-nx-trust > > Boolean > Default: no > Available since: 3.7.0 > If set, an NXDOMAIN from the root-servers will serve as a blanket > NXDOMAIN for the entire TLD the query belonged to. The effect of this > is far fewer queries to the root-servers. > Indeed. I first learned of powerdns support for this feature from Bert Hubert's remarks at the mic right after my qname minimization talk at the Spring OARC meeting. Here's a link to the remarks: https://www.youtube.com/watch?v=UcAygzNSxlI&t=1h27m12s (He also said he would be willing to extend the feature to responses from TLD servers below the root if they really meant NXDOMAIN when they responded with it). -- Shumon Huque
_______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
