@ jeroen thanks for your pointers, managed to create valid entries (quotes matter, nsd-checkzone doesn't warn, dig result than says: ;; Got bad packet: extra input data)
testzone, dummy IPs: doh IN A 192.169.254.4 doh IN AAAA 2a02:1810:4d27:290f::aa01 ;## HTTPS httpsipv4 IN HTTPS 1 . alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv4hint="192.169.254.4" httpsipv6 IN HTTPS 1 . alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv6hint="2a02:1810:4d27:290f::aa01" httpsip IN HTTPS 1 . alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv4hint="192.169.254.4" ipv6hint="2a02:1810:4d27:290f::aa01" ;## SVCB svcbipv4 IN SVCB 1 doh alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv4hint="192.169.254.4" svcbipv6 IN SVCB 1 doh alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv6hint="2a02:1810:4d27:290f::aa01" svcbip IN SVCB 1 doh alpn=h3,h2,http/1.1 dohpath="/dns-query{?dns}" port=443 ipv4hint="192.169.254.4" ipv6hint="2a02:1810:4d27:290f::aa01" I don't get it yet, It looks like you can do the same, using HTTPS and SVCB records. What is the difference, since the query replies provide identical information? Thanks for your time and effort
_______________________________________________ nsd-users mailing list nsd-users@lists.nlnetlabs.nl https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users