Re: Using RRL to for TC=1 on all queries

[Tony Finch]

John Kristoff  wrote:

> Has anyone configured BIND to force TC=1 responses on all queries using
> RRL?I'd like to do this for some experimentation and measurement
> work, but maybe this just isn't the right tool for that job?
>
> I've tried a number of configurations (e.g. slip=1, rate=0) and I can't
> seem to make this work.  Perhaps it is not possible.

As far as I know, RRL will only truncate responses that exceed the limit,
and the minimum limit is 1. (Zero is interpreted as no limit.) So RRL will
leak at least one non-truncated response per second.

RPZ has a tcp-only action which truncates UDP responses, so if you set up
an RPZ that matches everything, that should allow you to do what you want.

Tony.
-- 
f.anthony.n.finchhttps://dotat.at/
Shannon, South Rockall: Northeasterly 5 or 6, occasionally 7 in
Shannon. Moderate or rough. Showers at first. Good.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Using RRL to for TC=1 on all queries

[John Kristoff]

Has anyone configured BIND to force TC=1 responses on all queries using
RRL?I'd like to do this for some experimentation and measurement
work, but maybe this just isn't the right tool for that job?

I've tried a number of configurations (e.g. slip=1, rate=0) and I can't
seem to make this work.  Perhaps it is not possible.

I believe I can do this with dnsdist or Knot, so I might use one of
those, but I was hoping I could accomplish such a thing with BIND
without modifying the source code - and I think RRL would be the most
likely way to accomplish such a feat.  If you've done so and can provide
a config snippet, I would be very eager to receive it.

Thank you,

John
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users