1 1.1 christos ; config options 2 1.1 christos ; The island of trust is at test. 3 1.1 christos server: 4 1.1 christos target-fetch-policy: "0 0 0 0 0" 5 1.1 christos qname-minimisation: no 6 1.1 christos minimal-responses: yes 7 1.1 christos iter-scrub-promiscuous: yes 8 1.1 christos aggressive-nsec: no 9 1.1 christos local-zone: test. nodefault 10 1.1 christos log-servfail: yes 11 1.1 christos module-config: "iterator" 12 1.1 christos 13 1.1 christos stub-zone: 14 1.1 christos name: "." 15 1.1 christos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 16 1.1 christos CONFIG_END 17 1.1 christos 18 1.1 christos SCENARIO_BEGIN Test ghost domain glue TTL extension 19 1.1 christos ; for A and AAAA records. 20 1.1 christos 21 1.1 christos ; K.ROOT-SERVERS.NET. 22 1.1 christos RANGE_BEGIN 0 100 23 1.1 christos ADDRESS 193.0.14.129 24 1.1 christos ENTRY_BEGIN 25 1.1 christos MATCH opcode qtype qname 26 1.1 christos ADJUST copy_id 27 1.1 christos REPLY QR NOERROR 28 1.1 christos SECTION QUESTION 29 1.1 christos . IN NS 30 1.1 christos SECTION ANSWER 31 1.1 christos . IN NS K.ROOT-SERVERS.NET. 32 1.1 christos SECTION ADDITIONAL 33 1.1 christos K.ROOT-SERVERS.NET. IN A 193.0.14.129 34 1.1 christos ENTRY_END 35 1.1 christos 36 1.1 christos ENTRY_BEGIN 37 1.1 christos MATCH opcode subdomain 38 1.1 christos ADJUST copy_id copy_query 39 1.1 christos REPLY QR NOERROR 40 1.1 christos SECTION QUESTION 41 1.1 christos test. IN NS 42 1.1 christos SECTION AUTHORITY 43 1.1 christos test. IN NS ns.test. 44 1.1 christos SECTION ADDITIONAL 45 1.1 christos ns.test. IN A 1.2.3.5 46 1.1 christos ENTRY_END 47 1.1 christos RANGE_END 48 1.1 christos 49 1.1 christos ; ns.test 50 1.1 christos RANGE_BEGIN 0 20 51 1.1 christos ADDRESS 1.2.3.5 52 1.1 christos ENTRY_BEGIN 53 1.1 christos MATCH opcode qtype qname 54 1.1 christos ADJUST copy_id 55 1.1 christos REPLY QR AA NOERROR 56 1.1 christos SECTION QUESTION 57 1.1 christos test. IN NS 58 1.1 christos SECTION ANSWER 59 1.1 christos test. IN NS ns.test 60 1.1 christos SECTION ADDITIONAL 61 1.1 christos ns.test. IN A 1.2.3.5 62 1.1 christos ENTRY_END 63 1.1 christos 64 1.1 christos ENTRY_BEGIN 65 1.1 christos MATCH opcode qtype qname 66 1.1 christos ADJUST copy_id 67 1.1 christos REPLY QR AA NOERROR 68 1.1 christos SECTION QUESTION 69 1.1 christos ns.test. IN A 70 1.1 christos SECTION ANSWER 71 1.1 christos ns.test. IN A 1.2.3.5 72 1.1 christos ENTRY_END 73 1.1 christos 74 1.1 christos ENTRY_BEGIN 75 1.1 christos MATCH opcode qtype qname 76 1.1 christos ADJUST copy_id 77 1.1 christos REPLY QR AA NOERROR 78 1.1 christos SECTION QUESTION 79 1.1 christos ns.test. IN AAAA 80 1.1 christos SECTION AUTHORITY 81 1.1 christos test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 82 1.1 christos ENTRY_END 83 1.1 christos 84 1.1 christos ENTRY_BEGIN 85 1.1 christos MATCH opcode subdomain 86 1.1 christos ADJUST copy_id copy_query 87 1.1 christos REPLY QR NOERROR 88 1.1 christos SECTION QUESTION 89 1.1 christos example.test. IN NS 90 1.1 christos SECTION AUTHORITY 91 1.1 christos example.test. 4 IN NS ns.example.test. 92 1.1 christos SECTION ADDITIONAL 93 1.1 christos ns.example.test. 4 IN A 1.2.3.4 94 1.1 christos ENTRY_END 95 1.1 christos RANGE_END 96 1.1 christos 97 1.1 christos ; ns.test 98 1.1 christos RANGE_BEGIN 25 100 99 1.1 christos ADDRESS 1.2.3.5 100 1.1 christos ENTRY_BEGIN 101 1.1 christos MATCH opcode qtype qname 102 1.1 christos ADJUST copy_id 103 1.1 christos REPLY QR AA NOERROR 104 1.1 christos SECTION QUESTION 105 1.1 christos test. IN NS 106 1.1 christos SECTION ANSWER 107 1.1 christos test. IN NS ns.test 108 1.1 christos SECTION ADDITIONAL 109 1.1 christos ns.test. IN A 1.2.3.5 110 1.1 christos ENTRY_END 111 1.1 christos 112 1.1 christos ENTRY_BEGIN 113 1.1 christos MATCH opcode qtype qname 114 1.1 christos ADJUST copy_id 115 1.1 christos REPLY QR AA NOERROR 116 1.1 christos SECTION QUESTION 117 1.1 christos ns.test. IN A 118 1.1 christos SECTION ANSWER 119 1.1 christos ns.test. IN A 1.2.3.5 120 1.1 christos ENTRY_END 121 1.1 christos 122 1.1 christos ENTRY_BEGIN 123 1.1 christos MATCH opcode qtype qname 124 1.1 christos ADJUST copy_id 125 1.1 christos REPLY QR AA NOERROR 126 1.1 christos SECTION QUESTION 127 1.1 christos ns.test. IN AAAA 128 1.1 christos SECTION AUTHORITY 129 1.1 christos test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 130 1.1 christos ENTRY_END 131 1.1 christos 132 1.1 christos ENTRY_BEGIN 133 1.1 christos MATCH opcode subdomain 134 1.1 christos ADJUST copy_id copy_query 135 1.1 christos REPLY QR NOERROR 136 1.1 christos SECTION QUESTION 137 1.1 christos example.test. IN NS 138 1.1 christos SECTION AUTHORITY 139 1.1 christos example.test. 4 IN NS ns.example.test. 140 1.1 christos SECTION ADDITIONAL 141 1.1 christos ns.example.test. 4 IN A 1.2.3.7 142 1.1 christos ENTRY_END 143 1.1 christos RANGE_END 144 1.1 christos 145 1.1 christos ; ns.example.test. 146 1.1 christos RANGE_BEGIN 0 20 147 1.1 christos ADDRESS 1.2.3.4 148 1.1 christos ENTRY_BEGIN 149 1.1 christos MATCH opcode qtype qname 150 1.1 christos ADJUST copy_id 151 1.1 christos REPLY QR NOERROR 152 1.1 christos SECTION QUESTION 153 1.1 christos example.test. IN NS 154 1.1 christos SECTION ANSWER 155 1.1 christos example.test. 7200 IN NS ns.example.test. 156 1.1 christos SECTION ADDITIONAL 157 1.1 christos ns.example.test. 7200 IN A 1.2.3.4 158 1.1 christos ENTRY_END 159 1.1 christos 160 1.1 christos ENTRY_BEGIN 161 1.1 christos MATCH opcode qtype qname 162 1.1 christos ADJUST copy_id 163 1.1 christos REPLY QR AA NOERROR 164 1.1 christos SECTION QUESTION 165 1.1 christos ns.example.test. IN A 166 1.1 christos SECTION ANSWER 167 1.1 christos ns.example.test. 7200 IN A 1.2.3.4 168 1.1 christos ENTRY_END 169 1.1 christos 170 1.1 christos ENTRY_BEGIN 171 1.1 christos MATCH opcode qtype qname 172 1.1 christos ADJUST copy_id 173 1.1 christos REPLY QR AA NOERROR 174 1.1 christos SECTION QUESTION 175 1.1 christos ns.example.test. IN AAAA 176 1.1 christos SECTION AUTHORITY 177 1.1 christos example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 178 1.1 christos ENTRY_END 179 1.1 christos 180 1.1 christos ; response to query of interest 181 1.1 christos ENTRY_BEGIN 182 1.1 christos MATCH opcode qtype qname 183 1.1 christos ADJUST copy_id 184 1.1 christos REPLY QR AA NOERROR 185 1.1 christos SECTION QUESTION 186 1.1 christos www.example.test. IN A 187 1.1 christos SECTION ANSWER 188 1.1 christos www.example.test. 1 IN A 192.0.2.1 189 1.1 christos ENTRY_END 190 1.1 christos RANGE_END 191 1.1 christos 192 1.1 christos ; ns.example.test. 193 1.1 christos ; after the delegation change, the old hoster. 194 1.1 christos RANGE_BEGIN 20 100 195 1.1 christos ADDRESS 1.2.3.4 196 1.1 christos ENTRY_BEGIN 197 1.1 christos MATCH opcode qtype qname 198 1.1 christos ADJUST copy_id 199 1.1 christos REPLY QR AA NOERROR 200 1.1 christos SECTION QUESTION 201 1.1 christos www3.example.test. IN A 202 1.1 christos SECTION ANSWER 203 1.1 christos www3.example.test. IN A 10.20.30.46 204 1.1 christos ENTRY_END 205 1.1 christos RANGE_END 206 1.1 christos 207 1.1 christos ; ns.example.test. 208 1.1 christos ; the new hoster 209 1.1 christos RANGE_BEGIN 20 100 210 1.1 christos ADDRESS 1.2.3.7 211 1.1 christos ENTRY_BEGIN 212 1.1 christos MATCH opcode qtype qname 213 1.1 christos ADJUST copy_id 214 1.1 christos REPLY QR AA NOERROR 215 1.1 christos SECTION QUESTION 216 1.1 christos ns.example.test. IN A 217 1.1 christos SECTION ANSWER 218 1.1 christos ns.example.test. IN A 1.2.3.7 219 1.1 christos ENTRY_END 220 1.1 christos 221 1.1 christos ENTRY_BEGIN 222 1.1 christos MATCH opcode qtype qname 223 1.1 christos ADJUST copy_id 224 1.1 christos REPLY QR AA NOERROR 225 1.1 christos SECTION QUESTION 226 1.1 christos ns.example.test. IN AAAA 227 1.1 christos SECTION AUTHORITY 228 1.1 christos example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 229 1.1 christos ENTRY_END 230 1.1 christos 231 1.1 christos ENTRY_BEGIN 232 1.1 christos MATCH opcode qtype qname 233 1.1 christos ADJUST copy_id 234 1.1 christos REPLY QR AA NOERROR 235 1.1 christos SECTION QUESTION 236 1.1 christos www2.example.test. IN A 237 1.1 christos SECTION ANSWER 238 1.1 christos www2.example.test. IN A 10.20.30.47 239 1.1 christos ENTRY_END 240 1.1 christos 241 1.1 christos ENTRY_BEGIN 242 1.1 christos MATCH opcode qtype qname 243 1.1 christos ADJUST copy_id 244 1.1 christos REPLY QR AA SERVFAIL 245 1.1 christos SECTION QUESTION 246 1.1 christos www3.example.test. IN A 247 1.1 christos SECTION ANSWER 248 1.1 christos ENTRY_END 249 1.1 christos RANGE_END 250 1.1 christos 251 1.1 christos ; The TTL of the NS and glue is 4 for example.test. 252 1.1 christos STEP 1 QUERY 253 1.1 christos ENTRY_BEGIN 254 1.1 christos REPLY RD DO 255 1.1 christos SECTION QUESTION 256 1.1 christos www.example.test. IN A 257 1.1 christos ENTRY_END 258 1.1 christos 259 1.1 christos STEP 2 CHECK_ANSWER 260 1.1 christos ENTRY_BEGIN 261 1.1 christos MATCH all ttl 262 1.1 christos REPLY QR RD RA DO NOERROR 263 1.1 christos SECTION QUESTION 264 1.1 christos www.example.test. IN A 265 1.1 christos SECTION ANSWER 266 1.1 christos www.example.test. 1 IN A 192.0.2.1 267 1.1 christos ENTRY_END 268 1.1 christos 269 1.1 christos ; query for the NS record 270 1.1 christos STEP 8 QUERY 271 1.1 christos ENTRY_BEGIN 272 1.1 christos REPLY RD DO 273 1.1 christos SECTION QUESTION 274 1.1 christos example.test. IN NS 275 1.1 christos ENTRY_END 276 1.1 christos 277 1.1 christos STEP 9 CHECK_ANSWER 278 1.1 christos ENTRY_BEGIN 279 1.1 christos MATCH all ttl 280 1.1 christos REPLY QR RD RA DO NOERROR 281 1.1 christos SECTION QUESTION 282 1.1 christos example.test. IN NS 283 1.1 christos SECTION ANSWER 284 1.1 christos example.test. 7200 IN NS ns.example.test. 285 1.1 christos SECTION ADDITIONAL 286 1.1 christos ns.example.test. 4 IN A 1.2.3.4 287 1.1 christos ENTRY_END 288 1.1 christos 289 1.1 christos ; query for glue specifically 290 1.1 christos STEP 10 QUERY 291 1.1 christos ENTRY_BEGIN 292 1.1 christos REPLY RD DO 293 1.1 christos SECTION QUESTION 294 1.1 christos ns.example.test. IN A 295 1.1 christos ENTRY_END 296 1.1 christos 297 1.1 christos STEP 11 CHECK_ANSWER 298 1.1 christos ENTRY_BEGIN 299 1.1 christos MATCH all ttl 300 1.1 christos REPLY QR RD RA DO NOERROR 301 1.1 christos SECTION QUESTION 302 1.1 christos ns.example.test. IN A 303 1.1 christos SECTION ANSWER 304 1.1 christos ns.example.test. 7200 IN A 1.2.3.4 305 1.1 christos ENTRY_END 306 1.1 christos 307 1.1 christos ; query for glue from cache again 308 1.1 christos STEP 12 QUERY 309 1.1 christos ENTRY_BEGIN 310 1.1 christos REPLY RD DO 311 1.1 christos SECTION QUESTION 312 1.1 christos ns.example.test. IN A 313 1.1 christos ENTRY_END 314 1.1 christos 315 1.1 christos STEP 13 CHECK_ANSWER 316 1.1 christos ENTRY_BEGIN 317 1.1 christos MATCH all ttl 318 1.1 christos REPLY QR RD RA DO NOERROR 319 1.1 christos SECTION QUESTION 320 1.1 christos ns.example.test. IN A 321 1.1 christos SECTION ANSWER 322 1.1 christos ns.example.test. 4 IN A 1.2.3.4 323 1.1 christos ENTRY_END 324 1.1 christos 325 1.1 christos ; Move time to expire the delegation 326 1.1 christos STEP 20 TIME_PASSES ELAPSE 6 327 1.1 christos 328 1.1 christos ; The upstream changes to delegate to another server. 329 1.1 christos STEP 30 QUERY 330 1.1 christos ENTRY_BEGIN 331 1.1 christos REPLY RD DO 332 1.1 christos SECTION QUESTION 333 1.1 christos www2.example.test. IN A 334 1.1 christos ENTRY_END 335 1.1 christos 336 1.1 christos STEP 31 CHECK_ANSWER 337 1.1 christos ENTRY_BEGIN 338 1.1 christos MATCH all ttl 339 1.1 christos REPLY QR RD RA DO NOERROR 340 1.1 christos SECTION QUESTION 341 1.1 christos www2.example.test. IN A 342 1.1 christos SECTION ANSWER 343 1.1 christos www2.example.test. IN A 10.20.30.47 344 1.1 christos ENTRY_END 345 1.1 christos 346 1.1 christos ; the new server, 1.2.3.7 is not responsive (SERVFAILs), it 347 1.1 christos ; should not have the old one 1.2.3.4 now. 348 1.1 christos STEP 40 QUERY 349 1.1 christos ENTRY_BEGIN 350 1.1 christos REPLY RD DO 351 1.1 christos SECTION QUESTION 352 1.1 christos www3.example.test. IN A 353 1.1 christos ENTRY_END 354 1.1 christos 355 1.1 christos STEP 50 CHECK_ANSWER 356 1.1 christos ENTRY_BEGIN 357 1.1 christos MATCH all ttl 358 1.1 christos REPLY QR RD RA DO SERVFAIL 359 1.1 christos SECTION QUESTION 360 1.1 christos www3.example.test. IN A 361 1.1 christos SECTION ANSWER 362 1.1 christos ENTRY_END 363 1.1 christos 364 1.1 christos 365 1.1 christos SCENARIO_END 366