Hello all,
We are running some tests over pdns-recursor 4.1.1 and where finding a forwarding scenario that is not working the same way as in 4.0.4 version. We have forward-zones-recurse=.=8.8.8.8 configured in our recursor. After requesting wikipedia name we can see the cache entry that has bben created. ; <<>> DiG 9.9.3 <<>> @10.0.3.204 wikipedia.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36999 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;wikipedia.com. IN A ;; ANSWER SECTION: wikipedia.com. 599 IN A 91.198.174.192 ;; Query time: 41 msec ;; SERVER: 10.0.3.204#53(10.0.3.204) ;; WHEN: Thu Mar 16 04:45:26 CET 2017 ;; MSG SIZE rcvd: 58 ; main record cache dump from thread follows ; a.root-servers.net. 3599580 IN A 198.41.0.4 ; (Insecure) auth=1 a.root-servers.net. 3599580 IN AAAA 2001:503:ba3e::2:30 ; (Insecure) auth=1 b.root-servers.net. 3599580 IN A 199.9.14.201 ; (Insecure) auth=1 b.root-servers.net. 3599580 IN AAAA 2001:500:200::b ; (Insecure) auth=1 c.root-servers.net. 3599580 IN A 192.33.4.12 ; (Insecure) auth=1 c.root-servers.net. 3599580 IN AAAA 2001:500:2::c ; (Insecure) auth=1 d.root-servers.net. 3599580 IN A 199.7.91.13 ; (Insecure) auth=1 d.root-servers.net. 3599580 IN AAAA 2001:500:2d::d ; (Insecure) auth=1 e.root-servers.net. 3599580 IN A 192.203.230.10 ; (Insecure) auth=1 e.root-servers.net. 3599580 IN AAAA 2001:500:a8::e ; (Insecure) auth=1 f.root-servers.net. 3599580 IN A 192.5.5.241 ; (Insecure) auth=1 f.root-servers.net. 3599580 IN AAAA 2001:500:2f::f ; (Insecure) auth=1 g.root-servers.net. 3599580 IN A 192.112.36.4 ; (Insecure) auth=1 g.root-servers.net. 3599580 IN AAAA 2001:500:12::d0d ; (Insecure) auth=1 h.root-servers.net. 3599580 IN A 198.97.190.53 ; (Insecure) auth=1 h.root-servers.net. 3599580 IN AAAA 2001:500:1::53 ; (Insecure) auth=1 i.root-servers.net. 3599580 IN A 192.36.148.17 ; (Insecure) auth=1 i.root-servers.net. 3599580 IN AAAA 2001:7fe::53 ; (Insecure) auth=1 j.root-servers.net. 3599580 IN A 192.58.128.30 ; (Insecure) auth=1 j.root-servers.net. 3599580 IN AAAA 2001:503:c27::2:30 ; (Insecure) auth=1 k.root-servers.net. 3599580 IN A 193.0.14.129 ; (Insecure) auth=1 k.root-servers.net. 3599580 IN AAAA 2001:7fd::1 ; (Insecure) auth=1 l.root-servers.net. 3599580 IN A 199.7.83.42 ; (Insecure) auth=1 l.root-servers.net. 3599580 IN AAAA 2001:500:9f::42 ; (Insecure) auth=1 m.root-servers.net. 3599580 IN A 202.12.27.33 ; (Insecure) auth=1 m.root-servers.net. 3599580 IN AAAA 2001:dc3::35 ; (Insecure) auth=1 . 85980 IN NS c.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS d.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS a.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS i.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS f.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS g.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS b.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS e.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS j.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS h.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS k.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS m.root-servers.net. ; (Indeterminate) auth=0 . 85980 IN NS l.root-servers.net. ; (Indeterminate) auth=0 recursor-4.1.1.security-status.secpoll.powerdns.com. -361 IN TXT "1 OK" ; (Indeterminate) auth=0 wikipedia.com. 573 IN A 91.198.174.192 ; (Indeterminate) auth=0 ; negcache dump from thread follows ; ; main packet cache dump from thread follows ; The following attempts to resolve the same query are not answered form cache and pdns-recursor goes always to 8.8.8.8 to provide an answer. 0 [18/1] question for 'wikipedia.com|A' from 10.0.3.200 [18] wikipedia.com: Wants NO DNSSEC processing, auth data in query for A [18] wikipedia.com: Looking for CNAME cache hit of 'wikipedia.com|CNAME' [18] wikipedia.com: No CNAME cache hit of 'wikipedia.com|CNAME' found [18] wikipedia.com: No cache hit for 'wikipedia.com|A', trying to find an appropriate NS record [18] : got TA for '.' [18] : setting cut state for . to Secure [18] wikipedia.com: initial validation status for wikipedia.com is Indeterminate [18] wikipedia.com: Cache consultations done, have 1 NS to contact [18] wikipedia.com: Domain has hardcoded nameserver [18] wikipedia.com: Resolved '.' NS (empty) to: 8.8.8.8 [18] wikipedia.com: Trying IP 8.8.8.8:53, asking 'wikipedia.com|A' [18] wikipedia.com: Got 2 answers from (empty) (8.8.8.8), rcode=0 (No Error), aa=0, in 30ms [18] wikipedia.com: accept answer 'wikipedia.com|A|91.198.174.192' from '.' nameservers? ttl=319, place=1 YES! - This answer was received from a server we forward to. [18] wikipedia.com: OPT answer '.' from '.' nameservers [18] : got initial zone status Indeterminate for record wikipedia.com [18] wikipedia.com: determining status after receiving this packet [18] wikipedia.com: answer is in: resolved to '91.198.174.192|A' [18] wikipedia.com: status=got results, this level of recursion done [18] wikipedia.com: validation status is Indeterminate 0 [18/1] answer to question 'wikipedia.com|A': 1 answers, 1 additional, took 1 packets, 30.615 netw ms, 30.737 tot ms, 0 throttled, 0 timeouts, 0 tcp connections, rcode=0 In version 4.0.4 pdns-recurasor is able to answer the queries using available cache entry un TTL expires Kind regards and thanks in advance, Carlos
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users