Re: [dns-operations] Program/library/framework for testing robustness of servers

--- Begin Message --- Flamethrower does include random packet and random qname generators (which may include nonprintable characters), which were made for this type of testing: https://www.mankier.com/1/flame#Generators-randompkt Shannon Weyrick *VP Research *| NS1 phone: (

Re: [dns-operations] Program/library/framework for testing robustness of servers

Salut Stephane, https://meetings.ripe.net/ripe-43/presentations/ripe43-dnr-distel/sld001.html This is the idea.Prepare file to replay with fuzzer or use real world malformed queries. ;-) The separate tools are still all available. I could dig into my archive and see if I still have the

Re: [dns-operations] Program/library/framework for testing robustness of servers

On Mon, Jun 20, 2022 at 03:01:05PM +0530, Mukund Sivaraman wrote: > As an example of a fuzzer, AFL is very good for detecting illegal > malformed inputs: Re-reading, that doesn't sound very correct. AFL is very good for *preparing* illegal malformed inputs, and how a process "watched" by it

Re: [dns-operations] Program/library/framework for testing robustness of servers

As an example of a fuzzer, AFL is very good for detecting illegal malformed inputs: https://lcamtuf.coredump.cx/afl/ Mukund On Mon, Jun 20, 2022 at 06:06:41PM +1000, Mark Andrews wrote: > You use a fuzzing framework. You seed the fuzzer with legal messages and let > it >

Re: [dns-operations] Program/library/framework for testing robustness of servers

You use a fuzzing framework. You seed the fuzzer with legal messages and let it generate other inputs but modifying those seeds. > On 20 Jun 2022, at 17:14, Stephane Bortzmeyer wrote: > > I maintain an experimental authoritative DNS server and I would like > to test its robustness. dnsperf and

[dns-operations] Program/library/framework for testing robustness of servers

I maintain an experimental authoritative DNS server and I would like to test its robustness. dnsperf and flamethrower are great to test its performance, zonemaster and dnsviz are perfect to test its correctness in face of legal input but I would like to see how it reacts to *illegal*, malformed