BIND 10 #1806: support NSEC for empty non-terminal in in-memory (1/2)

BIND 10 Development do-not-reply at isc.org
Sun Mar 18 08:38:01 UTC 2012


#1806: support NSEC for empty non-terminal in in-memory (1/2)
-------------------------------------+-------------------------------------
            Reporter:  jinmei        |                        Owner:
                Type:  task          |                       Status:  new
            Priority:  medium        |                    Milestone:  New
           Component:  data source   |  Tasks
           Sensitive:  0             |                     Keywords:
         Sub-Project:  DNS           |              Defect Severity:  N/A
Estimated Difficulty:  0             |  Feature Depending on Ticket:  in-
         Total Hours:  0             |  memory NSEC
                                     |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
 We'll update this case InMemoryZoneFinder::find().  it's an empty non
 terminal case (and shouldn't be wildcard, but check that)

 {{{#!c++
                 if (node_path.getLastComparisonResult().getRelation() ==
                     NameComparisonResult::SUPERDOMAIN) {
                     LOG_DEBUG(logger, DBG_TRACE_DATA,
 DATASRC_MEM_SUPER_STOP).
                         arg(name);
                     return (createFindResult(NXRRSET,
 ConstRBNodeRRsetPtr()));
                 }
 }}}

 It uses getClosestNSEC() (see #1805) to get the NSEC for the previous
 name of the empty name and includes it in the answer.  Note that it
 shouldn't do this extra work unless DNSSEC is required and the zone is
 known to be NSEC-signed (because the cost is not zero).

 It depends on #1803 and #1805.  It doesn't need #1804.

-- 
Ticket URL: <http://bind10.isc.org/ticket/1806>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list