Re: Middleboxes and EDNS(0)

> On 14 Dec 2014, at 22:30, Paul Hoffman <[email protected]> wrote:
> 
> Greetings again. Section 6.1.1.1 of RFC 6891 says:
> 
>   OPT RRs MUST NOT be cached,
>   forwarded, or stored in or loaded from master files.
> 
> Section 6.2.6 says:
> 
>   Middleboxes that simply forward requests to a recursive resolver MUST
>   NOT modify and MUST NOT delete the OPT record contents in either
>   direction.
> 
> If I'm a middlebox that is acting as a DNS forwarder, and I see an OPT RR on a query coming in my left side, what do I send that OPT RR out the right side? Do I follow the first or the second quote?

The second - that being consistent with RFC 5625, too.

The text in both 6891 and 5625 is supposed to relate to the case of a middlebox that just dumb proxies the DNS traffic at the (UDP) packet layer without performing any processing on that traffic other than the bare minimum necessary to get the responses back to the correct client.

Ray

_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext