Source: unbound Version: Set EDNS UDP buffer size to avoid fragmentation Severity: normal
Hello, Please deliver a default configuration which prevents fragmentation of UDP EDNS datagrams. DNS Flag Day 2020 is focusing "on the operational and security problems in DNS caused by Internet Protocol packet fragmentation." https://dnsflagday.net/ They recommend: server: edns-buffer-size: 1232 FYI, it seems the DNS Flag Day people involve some big players. They are interested in removing work-arounds from their own systems which provide interoperability with other people's poorly configured or poorly operating DNS servers. Regards, Karl -- System Information: Debian Release: 9.11 APT prefers oldstable APT policy: (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-11-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
