On Thu, Jan 22, 2026 at 09:13:35AM +0100, rob777 via Pdns-users wrote:
> Hi
>
> I've read an article
> https://blog.cloudflare.com/cname-a-record-order-dns-standards/ - Its about
> a DNS Problems triggered by how some DNS Clients use different approaches
> with regards to ordering of CNAME and A Records in queries.
>
> Just for the sake of interest: How is the order CNAME/A Records handled (if
> at all) in a powernds recursor? Cant find info about this.
>
> Regards
Recursor's answer to clients contains the CNAME chain records first,
followed by the final answer records, which are shuffled (but not on
packet cache hits). Similar for additional records.
This corresponds to the way rec construct the answer, where it will
chase the CNAME chain, adding the intermediate results and then the
answers to the final name in the CNAME chain.
But we do not give hard guarantees here, in the sense that maybe an
inventive person might come up with auth answers which result in the
CNAME chain not being first in the recursor's answer to the client.
-Otto
_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users
