BIND 10 #1806: support NSEC for empty non-terminal in in-memory (1/2)
BIND 10 Development
do-not-reply at isc.org
Sun Mar 18 08:38:01 UTC 2012
#1806: support NSEC for empty non-terminal in in-memory (1/2)
-------------------------------------+-------------------------------------
Reporter: jinmei | Owner:
Type: task | Status: new
Priority: medium | Milestone: New
Component: data source | Tasks
Sensitive: 0 | Keywords:
Sub-Project: DNS | Defect Severity: N/A
Estimated Difficulty: 0 | Feature Depending on Ticket: in-
Total Hours: 0 | memory NSEC
| Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
We'll update this case InMemoryZoneFinder::find(). it's an empty non
terminal case (and shouldn't be wildcard, but check that)
{{{#!c++
if (node_path.getLastComparisonResult().getRelation() ==
NameComparisonResult::SUPERDOMAIN) {
LOG_DEBUG(logger, DBG_TRACE_DATA,
DATASRC_MEM_SUPER_STOP).
arg(name);
return (createFindResult(NXRRSET,
ConstRBNodeRRsetPtr()));
}
}}}
It uses getClosestNSEC() (see #1805) to get the NSEC for the previous
name of the empty name and includes it in the answer. Note that it
shouldn't do this extra work unless DNSSEC is required and the zone is
known to be NSEC-signed (because the cost is not zero).
It depends on #1803 and #1805. It doesn't need #1804.
--
Ticket URL: <http://bind10.isc.org/ticket/1806>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list