Re: RFC 6604 Clarification
Kumar Ashutosh <[email protected]> Tue, 31 Mar 2015 14:32:19 +0000
| Newsgroups | gmane.ietf.dnsext |
|---|---|
| Message-ID | <[email protected]> |
I agree with the 1st What about ? 1. If the CNAME chain points to a Qname for which the auth server is non-authoritative (and recursion is disabled on the auth server.) The server in this case cannot get the response. A direct query for this Qname will result in SERV_FAIL. Should the auth server return SERV_FAIL in this case? Will resolvers respect answers with SERV_FAIL in RCODE and cache the partial response? Thanks Ashu Program Manager | Windows Networking| DNS & SDN -----Original Message----- From: dnsext [mailto:[email protected]] On Behalf Of Jiankang Yao Sent: Tuesday, March 31, 2015 20:08 To: W.C.A. Wijngaards Cc: [email protected] Subject: Re: [dnsext] RFC 6604 Clarification > 在 2015年3月31日，15:22，"W.C.A. Wijngaards" <[email protected]> 写道： > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Hi Kumar, > > I cannot answer on the RFC part, but I want to answer on what will > make the resolver continue the lookup. > >> On 30/03/15 11:04, Kumar Ashutosh wrote: >> Hi >> >> As per RFC 6604, section 3 >> >> When an xNAME chain is followed, all but the last query cycle >> >> necessarily had no error. The RCODE in the ultimate DNS response >> >> MUST BE set based on the final query cycle leading to that >> >> response. If the xNAME chain was terminated by an error, it will >> >> be that error code. If the xNAME chain terminated without error, >> >> it will be zero. >> >> >> >> This is a little vague on two accounts: >> >> 1.What would be the error code if the server decides to curtail the >> CNAME chain after a certain length (say 20). Is it still success or >> do we indicate in some other way. > > The curtailed CNAME chain is best sent with RCODE NOERROR(0). > >> Based on the current text below" >> If the xNAME chain terminated without error, it will be zero. >> " "Curtail the cname chain" can be regarded as a kind of "terminated without error". So I agree that it is zero (no error). Jiankang Yao _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext