Validating zones as a slave?

Robert Edmonds edmonds at mycre.ws
Wed Sep 16 16:53:07 UTC 2015


Paul Vixie wrote:
> i don't agree that AA=1 is wrong.
> 
> BIND4/BIND8 used to pass through the full response, including the AA bit, on cache misses. so a client would see AA=1 on the first request for a given rrset, and AA=0 afterward.
> 
> this was not wrong. i demanded it be changed for BIND9, but not because it was wrong. rather, in BIND9 i wanted all responses to be generated from the cache, and never passed through. so, AA=0 on all RD=1 responses from BIND9, but as a side effect, not as a correctness matter

How do you interpret "response" and "responding name server" in this
document so that this behavior is not wrong?


RFC 1035        Domain Implementation and Specification    November 1987


4.1.1. Header section format

[...]


AA              Authoritative Answer - this bit is valid in responses,
                and specifies that the responding name server is an
                authority for the domain name in question section.

-- 
Robert Edmonds


More information about the bind-workers mailing list