As per RFC 9462, Unbound should include in the additional section, both the A and AAAA records for the name of the Designated Resolver when responding to queries for "resolver.arpa". However, I couldn't get this to work on my server. I have created a local zone file for the domain and it is replying properly to the SVCB queries, except for the additional section. Has anyone encountered this issue?
No additional section included when resolving resolver.arpa
Bruno Blanes via Unbound-users Thu, 15 Feb 2024 09:49:43 -0800
- Unbound DoT with LetsEncrypt certificate Bruno Blanes via Unbound-users
- Re: Unbound DoT with LetsEncrypt cert... Peter Hessler via Unbound-users
- RE: Unbound DoT with LetsEncrypt ... Bruno Blanes via Unbound-users
- Re: Unbound DoT with LetsEncr... Peter Hessler via Unbound-users
- RE: Unbound DoT with Lets... Bruno Blanes via Unbound-users
- No additional section inc... Bruno Blanes via Unbound-users