I evaluated current full-service resolver implementations that accept
additional resource records or not.
Tested resolvers: BIND 9, Unbound, Knot Resolver, PowerDNS recursor,
Google Public DNS
Result:
Knot resolver 2.0.0 and Unbound 1.7.0rc accept additional NSEC RRs
(+ SOA RRs) in authority section and generate NODATA responses
(a half of additional-answer scenario)
PowerDNS recursor accepts additional A/AAAA in answer section
(aaaa-for-free scenario)
Other cases, additional resource records are ignored.
Details:
https://indico.dns-oarc.net/event/28/session/11/contribution/46/material/slides/0.pdf
--
Kazunori Fujiwara, JPRS <[email protected]>
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
