[nsd-users] I want to send larger responses (more glue)

Stephane Bortzmeyer bortzmeyer at nic.fr
Wed May 4 08:26:01 UTC 2016


I manage a DNS Yeti <http://yeti-dns.org/> root name server and, for
experimental purposes, we now have 23 root name servers. But NSD does
not send the glue for all of them:

% dig @dahu1.yeti.eu.org NS .

; <<>> DiG 9.9.5-12.1-Debian <<>> @dahu1.yeti.eu.org NS .
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 368
;; flags: qr aa rd; QUERY: 1, ANSWER: 24, AUTHORITY: 0, ADDITIONAL: 12
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.			IN NS

;; ANSWER SECTION:
.			86400 IN NS bii.dns-lab.net.
.			86400 IN NS yeti.bofh.priv.at.
.			86400 IN NS yeti.ipv6.ernet.in.
.			86400 IN NS yeti.aquaray.com.
.			86400 IN NS dahu1.yeti.eu.org.
.			86400 IN NS dahu2.yeti.eu.org.
.			86400 IN NS ns-yeti.bondis.org.
.			86400 IN NS yeti-ns.ix.ru.
.			86400 IN NS yeti-ns.lab.nic.cl.
.			86400 IN NS yeti-ns.tisf.net.
.			86400 IN NS yeti-ns.wide.ad.jp.
.			86400 IN NS yeti-ns.conit.co.
.			86400 IN NS yeti-ns.switch.ch.
.			86400 IN NS yeti-ns.as59715.net.
.			86400 IN NS yeti-ns1.dns-lab.net.
.			86400 IN NS yeti-ns2.dns-lab.net.
.			86400 IN NS yeti-ns3.dns-lab.net.
.			86400 IN NS yeti-dns01.dnsworkshop.org.
.			86400 IN NS 18ac3e7343f016890c510e93f93526.yeti-dns.net.
.			86400 IN NS 2e7d2c03a9507ae265ecf5b5356885.yeti-dns.net.
.			86400 IN NS 3e23e8160039594a33894f6564e1b1.yeti-dns.net.
.			86400 IN NS 3f79bb7b435b05321651daefd374cd.yeti-dns.net.
.			86400 IN NS ca978112ca1bbdcafac231b39a23dc.yeti-dns.net.
.			86400 IN RRSIG NS 8 0 86400 (
				20160603050150 20160504050150 20454 .
				oXf6MeGVkVFcWu7iUdfx06LuD6CPGSpzJDpPc38hactA
				3fm9oIQ7K2vySs4V+xd4FXEwLML2jq0LlvZ9/bt8hDJM
				jXvF/6wszHu7i900Rtf+CpGt7cYe/yCuEVTJwNogpsyU
				v0xFs4LlpfVWYouMKG5uOUBu4qHOiR4R2ibqmZw= )

;; ADDITIONAL SECTION:
bii.dns-lab.net.	86400 IN AAAA 240c:f:1:22::6
yeti.bofh.priv.at.	86400 IN AAAA 2a01:4f8:161:6106:1::10
yeti.ipv6.ernet.in.	86400 IN AAAA 2001:e30:1c1e:1::333
yeti.aquaray.com.	86400 IN AAAA 2a02:ec0:200::1
dahu1.yeti.eu.org.	86400 IN AAAA 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
dahu2.yeti.eu.org.	86400 IN AAAA 2001:67c:217c:6::2
ns-yeti.bondis.org.	86400 IN AAAA 2a02:2810:0:405::250
yeti-ns.ix.ru.		86400 IN AAAA 2001:6d0:6d06::53
yeti-ns.lab.nic.cl.	86400 IN AAAA 2001:1398:1:21::8001
yeti-ns.tisf.net.	86400 IN AAAA 2001:559:8000::6
yeti-ns.wide.ad.jp.	86400 IN AAAA 2001:200:1d9::35

;; Query time: 22 msec
;; SERVER: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b#53(2001:4b98:dc2:45:216:3eff:fe4b:8c5b)
;; WHEN: Wed May 04 10:24:16 CEST 2016
;; MSG SIZE  rcvd: 1222


The EDNS buffer size of the server is 4096 bytes:

% grep ipv6-edns /etc/nsd/nsd.conf
        ipv6-edns-size: 4096

How could I tell it to send all the glues when the EDNS buffer size is
large enough? I do not find such an option in the documentation.

NSD 4.1.9, running on Linux



More information about the nsd-users mailing list