BIND 10 #415: new query logic for in memory data source (1)
BIND 10 Development
do-not-reply at isc.org
Fri Dec 3 15:49:34 UTC 2010
#415: new query logic for in memory data source (1)
---------------------------+------------------------------------------------
Reporter: jinmei | Owner: jinmei
Type: task | Status: reviewing
Priority: major | Milestone: y2 12 month milestone
Component: b10-auth | Resolution:
Keywords: | Sensitive: 0
Estimatedhours: 0.0 | Hours: 0
Billable: 1 | Totalhours: 0
Internal: 0 |
---------------------------+------------------------------------------------
Comment(by each):
Replying to [comment:3 jelte]:
> - note: If I read this correctly, the Rcode that would in the end be set
by this code for data that is not found changes from current behaviour
(right now it returns REFUSED, not SERVFAIL). I prefer this new one (and
do REFUSED because of ACL, not data presence) :)
But REFUSED is what you get from BIND 9.
Of course, BIND 9 *can* do recursion, and it's the allow-query-cache and
allow-recursion ACLs that prevent it from doing so, so the REFUSED *is*
happening because of an ACL, not data presence. But we're aiming for
compatibility with BIND 9 here, and auth-only name servers send REFUSED
when you ask for a nonexistent zone.
(REFUSED may be a better choice than SERVFAIL anyway because a resolver
that gets SERVFAIL will keep trying other name servers in the NS RRset,
whereas with REFUSED it could give up immediately.)
--
Ticket URL: <http://bind10.isc.org/ticket/415#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list