Re: Middleboxes and EDNS(0)

Paul Hoffman <[email protected]> Mon, 15 Dec 2014 07:48:41 -0800
Newsgroups gmane.ietf.dnsext
Message-ID <[email protected]>
On Dec 14, 2014, at 2:42 PM, Brian Dickson <[email protected]> wrote:
> My read would be, use the second quote.
> 
> I suspect the first quote is referring to caching forwarding DNS servers, not dumb non-caching middle boxes.
> 
> I think any other interpretation creates an actual paradox, while this reading does not.
> 
> And I think it is the only thing that enables OPT (EDNS) to work.

The problem is that the first quote is in a section called "6.1.1.  Basic Elements". This seems, well, basic.

So, is this an errata for the first quote?

--Paul Hoffman

> On Sun, Dec 14, 2014 at 2:30 PM, Paul Hoffman <[email protected]> wrote:
> Greetings again. Section 6.1.1.1 of RFC 6891 says:
> 
>    OPT RRs MUST NOT be cached,
>    forwarded, or stored in or loaded from master files.
> 
> Section 6.2.6 says:
> 
>    Middleboxes that simply forward requests to a recursive resolver MUST
>    NOT modify and MUST NOT delete the OPT record contents in either
>    direction.
> 
> If I'm a middlebox that is acting as a DNS forwarder, and I see an OPT RR on a query coming in my left side, what do I send that OPT RR out the right side? Do I follow the first or the second quote?

_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext