1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 trust-anchor: "example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}" 6 val-override-date: "20070916134226" 7 msg-cache-size: 8 8 rrset-cache-size: 8 9 target-fetch-policy: "0 0 0 0 0" 10 qname-minimisation: "no" 11 fake-sha1: yes 12 trust-anchor-signaling: no 13 14stub-zone: 15 name: "." 16 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 17CONFIG_END 18 19SCENARIO_BEGIN Test cname to positive without cache 20 21; K.ROOT-SERVERS.NET. 22RANGE_BEGIN 0 100 23 ADDRESS 193.0.14.129 24ENTRY_BEGIN 25MATCH opcode qtype qname 26ADJUST copy_id 27REPLY QR NOERROR 28SECTION QUESTION 29. IN NS 30SECTION ANSWER 31. IN NS K.ROOT-SERVERS.NET. 32SECTION ADDITIONAL 33K.ROOT-SERVERS.NET. IN A 193.0.14.129 34ENTRY_END 35 36ENTRY_BEGIN 37MATCH opcode qtype qname 38ADJUST copy_id 39REPLY QR NOERROR 40SECTION QUESTION 41a.gtld-servers.net. IN A 42SECTION ANSWER 43a.gtld-servers.net. IN A 192.5.6.30 44ENTRY_END 45 46ENTRY_BEGIN 47MATCH opcode qtype qname 48ADJUST copy_id 49REPLY QR NOERROR 50SECTION QUESTION 51a.gtld-servers.net. IN AAAA 52SECTION ANSWER 53ENTRY_END 54 55ENTRY_BEGIN 56MATCH opcode qtype qname 57ADJUST copy_id 58REPLY QR NOERROR 59SECTION QUESTION 60ns.example.net. IN AAAA 61SECTION ANSWER 62ENTRY_END 63 64ENTRY_BEGIN 65MATCH opcode subdomain 66ADJUST copy_id copy_query 67REPLY QR NOERROR 68SECTION QUESTION 69com. IN A 70SECTION AUTHORITY 71com. IN NS a.gtld-servers.net. 72SECTION ADDITIONAL 73a.gtld-servers.net. IN A 192.5.6.30 74ENTRY_END 75 76ENTRY_BEGIN 77MATCH opcode qname 78ADJUST copy_id copy_query 79REPLY QR NOERROR 80SECTION QUESTION 81www.example.net. IN A 82SECTION AUTHORITY 83net. IN NS a.gtld-servers.net. 84SECTION ADDITIONAL 85a.gtld-servers.net. IN A 192.5.6.30 86ENTRY_END 87 88ENTRY_BEGIN 89MATCH opcode qname 90ADJUST copy_id copy_query 91REPLY QR NOERROR 92SECTION QUESTION 93example.net. IN A 94SECTION AUTHORITY 95net. IN NS a.gtld-servers.net. 96SECTION ADDITIONAL 97a.gtld-servers.net. IN A 192.5.6.30 98ENTRY_END 99RANGE_END 100 101; a.gtld-servers.net. 102RANGE_BEGIN 0 100 103 ADDRESS 192.5.6.30 104ENTRY_BEGIN 105MATCH opcode qname qtype 106ADJUST copy_id copy_query 107REPLY QR NOERROR 108SECTION QUESTION 109com. IN NS 110SECTION ANSWER 111com. IN NS a.gtld-servers.net. 112SECTION ADDITIONAL 113a.gtld-servers.net. IN A 192.5.6.30 114ENTRY_END 115 116ENTRY_BEGIN 117MATCH opcode qname qtype 118ADJUST copy_id copy_query 119REPLY QR NOERROR 120SECTION QUESTION 121net. IN NS 122SECTION ANSWER 123net. IN NS a.gtld-servers.net. 124SECTION ADDITIONAL 125a.gtld-servers.net. IN A 192.5.6.30 126ENTRY_END 127 128ENTRY_BEGIN 129MATCH opcode subdomain 130ADJUST copy_id copy_query 131REPLY QR NOERROR 132SECTION QUESTION 133example.com. IN A 134SECTION AUTHORITY 135example.com. IN NS ns.example.com. 136SECTION ADDITIONAL 137ns.example.com. IN A 1.2.3.4 138ENTRY_END 139 140ENTRY_BEGIN 141MATCH opcode qname 142ADJUST copy_id copy_query 143REPLY QR NOERROR 144SECTION QUESTION 145example.net. IN A 146SECTION AUTHORITY 147example.net. IN NS ns.example.net. 148SECTION ADDITIONAL 149ns.example.net. IN A 1.2.3.5 150ENTRY_END 151 152ENTRY_BEGIN 153MATCH opcode qname 154ADJUST copy_id copy_query 155REPLY QR NOERROR 156SECTION QUESTION 157www.example.net. IN A 158SECTION AUTHORITY 159example.net. IN NS ns.example.net. 160SECTION ADDITIONAL 161ns.example.net. IN A 1.2.3.5 162ENTRY_END 163RANGE_END 164 165; ns.example.com. 166RANGE_BEGIN 0 100 167 ADDRESS 1.2.3.4 168ENTRY_BEGIN 169MATCH opcode qname qtype 170ADJUST copy_id copy_query 171REPLY QR NOERROR 172SECTION QUESTION 173example.com. IN NS 174SECTION ANSWER 175example.com. IN NS ns.example.com. 176example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 177SECTION ADDITIONAL 178ns.example.com. IN A 1.2.3.4 179ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 180ENTRY_END 181 182ENTRY_BEGIN 183MATCH opcode qname qtype 184ADJUST copy_id copy_query 185REPLY QR NOERROR 186SECTION QUESTION 187ns.example.com. IN AAAA 188SECTION ANSWER 189ENTRY_END 190 191; response to DNSKEY priming query 192ENTRY_BEGIN 193MATCH opcode qtype qname 194ADJUST copy_id 195REPLY QR NOERROR 196SECTION QUESTION 197example.com. IN DNSKEY 198SECTION ANSWER 199example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 200example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854} 201SECTION AUTHORITY 202example.com. IN NS ns.example.com. 203example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 204SECTION ADDITIONAL 205ns.example.com. IN A 1.2.3.4 206ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 207ENTRY_END 208 209; response to query of interest 210ENTRY_BEGIN 211MATCH opcode qtype qname 212ADJUST copy_id 213REPLY QR NOERROR 214SECTION QUESTION 215www.example.com. IN A 216SECTION ANSWER 217www.example.com. IN CNAME www.example.net. 218www.example.com. 3600 IN RRSIG CNAME DSA 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFGcJxnNxpWCBzXejiSdl4p1BKRMnAhUApoJrugVBRwFgAoYAhhqlZFac7fE= ;{id = 2854} 219SECTION AUTHORITY 220SECTION ADDITIONAL 221ENTRY_END 222RANGE_END 223 224; ns.example.net. 225RANGE_BEGIN 0 100 226 ADDRESS 1.2.3.5 227ENTRY_BEGIN 228MATCH opcode qname qtype 229ADJUST copy_id copy_query 230REPLY QR NOERROR 231SECTION QUESTION 232example.net. IN NS 233SECTION ANSWER 234example.net. IN NS ns.example.net. 235example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 236SECTION ADDITIONAL 237ns.example.net. IN A 1.2.3.5 238ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 239ENTRY_END 240 241; response to DNSKEY priming query 242ENTRY_BEGIN 243MATCH opcode qtype qname 244ADJUST copy_id 245REPLY QR NOERROR 246SECTION QUESTION 247example.net. IN DNSKEY 248SECTION ANSWER 249example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 250example.net. 3600 IN RRSIG DNSKEY RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. hiFzlQ8VoYgCuvIsfVuxC3mfJDqsTh0yc6abs5xMx5uEcIjb0dndFQx7INOM+imlzveEN73Hqp4OLFpFhsWLlw== ;{id = 30899} 251SECTION AUTHORITY 252example.net. IN NS ns.example.net. 253example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 254SECTION ADDITIONAL 255ns.example.net. IN A 1.2.3.5 256ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 257ENTRY_END 258 259; response to query of interest 260ENTRY_BEGIN 261MATCH opcode qtype qname 262ADJUST copy_id 263REPLY QR NOERROR 264SECTION QUESTION 265www.example.net. IN A 266SECTION ANSWER 267www.example.net. IN A 11.12.13.14 268www.example.net. 3600 IN RRSIG A 5 3 3600 20070926134150 20070829134150 30899 example.net. CPxF5hK9Kg5eT7W6LgZwr0ePYEm9HMcSY4vvqCS6gDWB4X9jvXLCfBkCLhsNybPBpGWlsLi5wM6MTdJXuPpsRA== ;{id = 30899} 269SECTION AUTHORITY 270SECTION ADDITIONAL 271ENTRY_END 272RANGE_END 273 274STEP 1 QUERY 275ENTRY_BEGIN 276REPLY RD DO 277SECTION QUESTION 278www.example.com. IN A 279ENTRY_END 280 281STEP 5 TRAFFIC 282 283; recursion happens here. 284STEP 10 CHECK_ANSWER 285ENTRY_BEGIN 286MATCH all 287REPLY QR RD RA AD DO NOERROR 288SECTION QUESTION 289www.example.com. IN A 290SECTION ANSWER 291www.example.com. IN CNAME www.example.net. 292www.example.com. 3600 IN RRSIG CNAME DSA 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFGcJxnNxpWCBzXejiSdl4p1BKRMnAhUApoJrugVBRwFgAoYAhhqlZFac7fE= ;{id = 2854} 293www.example.net. IN A 11.12.13.14 294www.example.net. 3600 IN RRSIG A 5 3 3600 20070926134150 20070829134150 30899 example.net. CPxF5hK9Kg5eT7W6LgZwr0ePYEm9HMcSY4vvqCS6gDWB4X9jvXLCfBkCLhsNybPBpGWlsLi5wM6MTdJXuPpsRA== ;{id = 30899} 295SECTION AUTHORITY 296SECTION ADDITIONAL 297ENTRY_END 298 299SCENARIO_END 300