1 ; Ask the same question twice. Check to see second is answered 2 ; from cache 3 4 server: 5 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 6 val-override-date: "20070916134226" 7 trust-anchor-signaling: no 8 target-fetch-policy: "0 0 0 0 0" 9 send-client-subnet: 1.2.3.4 10 max-client-subnet-ipv4: 17 11 module-config: "subnetcache validator iterator" 12 verbosity: 3 13 fake-sha1: yes 14 fake-dsa: yes 15 access-control: 127.0.0.0/8 allow_snoop 16 qname-minimisation: "no" 17 minimal-responses: no 18 iter-scrub-promiscuous: no 19 ; the size for the edns subnet cache 20 msg-cache-size: 1500 21 22 stub-zone: 23 name: "." 24 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 25 CONFIG_END 26 27 SCENARIO_BEGIN Test subnet cached response size 28 29 ; K.ROOT-SERVERS.NET. 30 RANGE_BEGIN 0 100 31 ADDRESS 193.0.14.129 32 ENTRY_BEGIN 33 MATCH opcode qtype qname ednsdata 34 ADJUST copy_id 35 REPLY QR NOERROR 36 SECTION QUESTION 37 . IN NS 38 SECTION ANSWER 39 . IN NS K.ROOT-SERVERS.NET. 40 SECTION ADDITIONAL 41 HEX_EDNSDATA_BEGIN 42 ;; we expect to receive empty 43 HEX_EDNSDATA_END 44 K.ROOT-SERVERS.NET. IN A 193.0.14.129 45 ENTRY_END 46 47 ENTRY_BEGIN 48 MATCH opcode qtype qname 49 ADJUST copy_id 50 REPLY QR NOERROR 51 SECTION QUESTION 52 www.example.com. IN A 53 SECTION AUTHORITY 54 com. IN NS a.gtld-servers.net. 55 SECTION ADDITIONAL 56 a.gtld-servers.net. IN A 192.5.6.30 57 ENTRY_END 58 RANGE_END 59 60 ; a.gtld-servers.net. 61 RANGE_BEGIN 0 100 62 ADDRESS 192.5.6.30 63 ENTRY_BEGIN 64 MATCH opcode qtype qname ednsdata 65 ADJUST copy_id 66 REPLY QR NOERROR 67 SECTION QUESTION 68 com. IN NS 69 SECTION ANSWER 70 com. IN NS a.gtld-servers.net. 71 SECTION ADDITIONAL 72 HEX_EDNSDATA_BEGIN 73 ;; we expect to receive empty 74 HEX_EDNSDATA_END 75 a.gtld-servers.net. IN A 192.5.6.30 76 ENTRY_END 77 78 ENTRY_BEGIN 79 MATCH opcode qtype qname 80 ADJUST copy_id 81 REPLY QR NOERROR 82 SECTION QUESTION 83 www.example.com. IN A 84 SECTION AUTHORITY 85 example.com. IN NS ns.example.com. 86 SECTION ADDITIONAL 87 ns.example.com. IN A 1.2.3.4 88 ENTRY_END 89 RANGE_END 90 91 ; ns.example.com. 92 RANGE_BEGIN 0 100 93 ADDRESS 1.2.3.4 94 ENTRY_BEGIN 95 MATCH opcode qtype qname ednsdata 96 ADJUST copy_id 97 REPLY QR NOERROR 98 SECTION QUESTION 99 example.com. IN NS 100 SECTION ANSWER 101 example.com. IN NS ns.example.com. 102 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 103 SECTION ADDITIONAL 104 HEX_EDNSDATA_BEGIN 105 ;; we expect to receive empty 106 HEX_EDNSDATA_END 107 ns.example.com. IN A 1.2.3.4 108 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 109 ENTRY_END 110 111 ; response to DNSKEY priming query 112 ENTRY_BEGIN 113 MATCH opcode qtype qname ednsdata 114 ADJUST copy_id 115 REPLY QR NOERROR 116 SECTION QUESTION 117 example.com. IN DNSKEY 118 SECTION ANSWER 119 example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 120 example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 121 SECTION AUTHORITY 122 example.com. IN NS ns.example.com. 123 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 124 SECTION ADDITIONAL 125 HEX_EDNSDATA_BEGIN 126 ;; we expect to receive empty 127 HEX_EDNSDATA_END 128 ns.example.com. IN A 1.2.3.4 129 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 130 ENTRY_END 131 132 ; response to query of interest 133 ENTRY_BEGIN 134 MATCH opcode qtype qname ednsdata 135 ADJUST copy_id copy_ednsdata_assume_clientsubnet 136 REPLY QR NOERROR 137 SECTION QUESTION 138 www.example.com. IN A 139 SECTION ANSWER 140 www.example.com. IN A 10.20.30.40 141 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 142 SECTION AUTHORITY 143 example.com. IN NS ns.example.com. 144 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 145 SECTION ADDITIONAL 146 HEX_EDNSDATA_BEGIN 147 ; client is 127.0.0.1 148 00 08 ; OPC 149 00 07 ; option length 150 00 01 ; Family 151 11 00 ; source mask, scopemask 152 7f 00 00 ; address 153 HEX_EDNSDATA_END 154 ns.example.com. IN A 1.2.3.4 155 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 156 ENTRY_END 157 158 ENTRY_BEGIN 159 MATCH opcode qtype qname ednsdata 160 ADJUST copy_id copy_ednsdata_assume_clientsubnet 161 REPLY QR NOERROR 162 SECTION QUESTION 163 www.example.com. IN A 164 SECTION ANSWER 165 www.example.com. IN A 10.20.30.43 166 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. AFC5G+z0jWt132hDuTIFOva59cZ7MTd+ex/osuoiQhIIuWFAr9xoZz8= 167 SECTION AUTHORITY 168 example.com. IN NS ns.example.com. 169 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 170 SECTION ADDITIONAL 171 HEX_EDNSDATA_BEGIN 172 ; client is 127.3.0.1 173 00 08 ; OPC 174 00 07 ; option length 175 00 01 ; Family 176 11 00 ; source mask, scopemask 177 7f 03 00 ; address 178 HEX_EDNSDATA_END 179 ns.example.com. IN A 1.2.3.4 180 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 181 ENTRY_END 182 RANGE_END 183 184 STEP 1 QUERY 185 ENTRY_BEGIN 186 HEX_ANSWER_BEGIN; 187 00 00 01 00 00 01 00 00 ;ID 0 188 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 189 07 65 78 61 6d 70 6c 65 190 03 63 6f 6d 00 00 01 00 191 01 00 00 29 10 00 00 00 192 80 00 00 0b 193 194 00 08 00 07 ; OPC, optlen 195 00 01 11 00 ; ip4, scope 17, source 0 196 7f 00 00 ;127.0.0.0/17 197 HEX_ANSWER_END 198 ENTRY_END 199 200 STEP 10 CHECK_ANSWER 201 ENTRY_BEGIN 202 MATCH all ednsdata 203 REPLY QR RD RA AD NOERROR 204 SECTION QUESTION 205 www.example.com. IN A 206 SECTION ANSWER 207 www.example.com. IN A 10.20.30.40 208 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 209 SECTION AUTHORITY 210 example.com. IN NS ns.example.com. 211 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 212 SECTION ADDITIONAL 213 HEX_EDNSDATA_BEGIN 214 ; client is 127.0.0.1 215 00 08 ; OPC 216 00 07 ; option length 217 00 01 ; Family 218 11 11 ; source mask, scopemask 219 7f 00 00 ; address 220 HEX_EDNSDATA_END 221 ns.example.com. IN A 1.2.3.4 222 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 223 ENTRY_END 224 225 STEP 11 QUERY 226 227 ENTRY_BEGIN 228 HEX_ANSWER_BEGIN; 229 00 00 00 00 00 01 00 00 ;ID 0, no RD 230 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 231 07 65 78 61 6d 70 6c 65 232 03 63 6f 6d 00 00 01 00 233 01 00 00 29 10 00 00 00 234 80 00 00 0b 235 236 00 08 00 07 ; OPC, optlen 237 00 01 12 00 ; ip4, scope 18, source 0 238 7f 00 00 ;127.0.0.0/18 239 HEX_ANSWER_END 240 ENTRY_END 241 242 STEP 20 CHECK_ANSWER 243 ENTRY_BEGIN 244 MATCH all ednsdata 245 REPLY QR RA AD NOERROR 246 SECTION QUESTION 247 www.example.com. IN A 248 SECTION ANSWER 249 www.example.com. IN A 10.20.30.40 250 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 251 SECTION AUTHORITY 252 example.com. IN NS ns.example.com. 253 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 254 SECTION ADDITIONAL 255 HEX_EDNSDATA_BEGIN 256 ; client is 127.0.0.1 257 00 08 ; OPC 258 00 07 ; option length 259 00 01 ; Family 260 12 11 ; source mask, scopemask 261 7f 00 00 ; address 262 HEX_EDNSDATA_END 263 ns.example.com. IN A 1.2.3.4 264 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 265 ENTRY_END 266 267 ; update the cache entry 268 STEP 30 QUERY 269 ENTRY_BEGIN 270 HEX_ANSWER_BEGIN; 271 00 00 01 00 00 01 00 00 ;ID 0 272 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 273 07 65 78 61 6d 70 6c 65 274 03 63 6f 6d 00 00 01 00 275 01 00 00 29 10 00 00 00 276 80 00 00 0b 277 278 00 08 00 07 ; OPC, optlen 279 00 01 11 00 ; ip4, scope 17, source 0 280 7f 03 00 ;127.3.0.0/17 281 HEX_ANSWER_END 282 ENTRY_END 283 284 STEP 40 CHECK_ANSWER 285 ENTRY_BEGIN 286 MATCH all ednsdata 287 REPLY QR RD RA AD NOERROR 288 SECTION QUESTION 289 www.example.com. IN A 290 SECTION ANSWER 291 www.example.com. IN A 10.20.30.43 292 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. AFC5G+z0jWt132hDuTIFOva59cZ7MTd+ex/osuoiQhIIuWFAr9xoZz8= 293 SECTION AUTHORITY 294 example.com. IN NS ns.example.com. 295 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 296 SECTION ADDITIONAL 297 HEX_EDNSDATA_BEGIN 298 ; client is 127.3.0.1 299 00 08 ; OPC 300 00 07 ; option length 301 00 01 ; Family 302 11 11 ; source mask, scopemask 303 7f 03 00 ; address 304 HEX_EDNSDATA_END 305 ns.example.com. IN A 1.2.3.4 306 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 307 ENTRY_END 308 309 SCENARIO_END 310