BIND 9.11 no longer respects edns-udp-size?

2019-03-11 Thread Stéphane Bortzmeyer
This machine has 'edns-udp-size: 1432' and, indeed, in the reply, it displays this buffer size. But it does not respect that limit. Here, with a big DNSKEY RRset, BIND should have truncated the answer and set the TC bit but it didn't: % dig @194.0.9.1 DNSKEY ma ; <<>> DiG 9.10.3-P4-Debian <<>>

Re: BIND 9.11 no longer respects edns-udp-size?

2019-03-11 Thread Stéphane Bortzmeyer
On Mon, Mar 11, 2019 at 09:39:58PM +1100, Mark Andrews wrote a message of 119 lines which said: > You are using the wrong control. > Max-udp-size is what you want. Thanks it works as expected now. % dig +ignore @194.0.9.1 DNSKEY ma ; <<>> DiG 9.10.3-P4-Debian <<>> +ignore @194.0.9.1

Re: BIND 9.11 no longer respects edns-udp-size?

2019-03-11 Thread Stéphane Bortzmeyer
On Mon, Mar 11, 2019 at 12:57:02PM +, Tony Finch wrote a message of 40 lines which said: > > ; <<>> DiG 9.10.3-P4-Debian <<>> @194.0.9.1 DNSKEY ma > > To properly diagnose UDP message size issues you need +ignore +notcp on > the command line. (You actually need both options to stop dig