'dig -t any ...' question : *ANSWER* & *GLUE* credibility discrepancies
Ladislav Vobr
lvobr at ies.etisalat.ae
Mon Jun 14 07:04:34 UTC 2004
Jim Reid wrote:
>>>>>>"Ladislav" == Ladislav Vobr <lvobr at ies.etisalat.ae> writes:
>
>
> Ladislav> It does, jim, and I have to say it, your reply is
> Ladislav> incorrect, bind 8.3.4 and 9.3.0beta4 and 9.2.3 all of
> Ladislav> these are reluctant to provide the answers to recursive
> Ladislav> client if it cached with credibility *glue*.
>
> If that's the case, please explain why my BIND9.3 server is perfectly
> happy to return the glue it got for fake1.ladislav.name.ae after it
> had cached a referral for ladislav.name.ae. That was clearly shown in
> my earlier posting.
Let me ask you one thing, are you sure about the credibility tag the
data got cached on your caching 9.3 server? Do you know exactly the
rules, when it is cached under which tag? And how each different bind
treats the same non-authoritative data in it's own way? And how each
caching server treats each credibility level when it comes to answer rd
clients?
I feel strange discussing things on the @isc.org mailing list, while
nobody from ISC, who sure knows these things, doesn't bother to reply
and say, yes there is a relation, and these are the rules 1,2,3...
It is simple once it is published, but till that time people live in dark.
Do you thing commercial support will explain this, or will just admit it
that there is some relation. We don't have issue paying for it, we are
already sponsoring isc hosting and operation of the f-root server in
next room, but is there any sample how does this commercial support
look, how deep does it go, and where the discussion stops? Does it
answer such a questions?
I can try go to the source code and spend nights and nights reading it,
but I just feel I can be more useful doing other things, maybe I am wrong.
P.S. the explanation is in my previous post, it is simple you cached it
from 8.3.4 thus it has *answer* credibility, but I got it from 9.2.3 or
8.4.1 or 9.3.0beta4 thus the credibility for the same thing was *glue*
and as per the unknown rule this is not provided to rd clients.
I know I have a million questions, and perhaps it looks like I am not
friend of isc, but I am, just want to understand things. Today, all
administrators look like 'not really aware', when somebody ask them, how
come it is in the cache, but bind doesn't answer with it:-( shouldn't it
answer from cache? simple question, but not simple answer....
Ladislav
More information about the bind-users
mailing list