1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "3 2 1 0 0" # make sure it fetches for test 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 12stub-zone: 13 name: "." 14 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 15CONFIG_END 16 17SCENARIO_BEGIN Test iterator with empty delegation from cache. 18 19; K.ROOT-SERVERS.NET. 20RANGE_BEGIN 0 100 21 ADDRESS 193.0.14.129 22ENTRY_BEGIN 23MATCH opcode qtype qname 24ADJUST copy_id 25REPLY QR NOERROR 26SECTION QUESTION 27. IN NS 28SECTION ANSWER 29. IN NS K.ROOT-SERVERS.NET. 30SECTION ADDITIONAL 31K.ROOT-SERVERS.NET. IN A 193.0.14.129 32ENTRY_END 33 34ENTRY_BEGIN 35MATCH opcode subdomain 36ADJUST copy_id copy_query 37REPLY QR NOERROR 38SECTION QUESTION 39com. IN A 40SECTION AUTHORITY 41com. IN NS a.gtld-servers.net. 42 43; sneak in some data into the cache to simulate partial data after timeouts 44; gets scrubbed anyway. 45example.net. NS ns.example.net. 46 47SECTION ADDITIONAL 48a.gtld-servers.net. IN A 192.5.6.30 49ENTRY_END 50 51ENTRY_BEGIN 52MATCH opcode subdomain 53ADJUST copy_id copy_query 54REPLY QR NOERROR 55SECTION QUESTION 56net. IN A 57SECTION AUTHORITY 58net. IN NS a.gtld-servers.net. 59SECTION ADDITIONAL 60a.gtld-servers.net. IN A 192.5.6.30 61ENTRY_END 62RANGE_END 63 64; a.gtld-servers.net. 65RANGE_BEGIN 0 100 66 ADDRESS 192.5.6.30 67; com zone 68ENTRY_BEGIN 69MATCH opcode qname 70ADJUST copy_id copy_query 71REPLY QR NOERROR 72SECTION QUESTION 73com. IN NS 74SECTION ANSWER 75com. IN NS a.gtld-servers.net. 76SECTION ADDITIONAL 77a.gtld-servers.net. IN A 192.5.6.30 78ENTRY_END 79 80ENTRY_BEGIN 81MATCH opcode subdomain 82ADJUST copy_id copy_query 83REPLY QR NOERROR 84SECTION QUESTION 85example.com. IN A 86SECTION AUTHORITY 87example.com. IN NS ns.example.net. 88SECTION ADDITIONAL 89ENTRY_END 90 91; net zone 92ENTRY_BEGIN 93MATCH opcode qname 94ADJUST copy_id copy_query 95REPLY QR NOERROR 96SECTION QUESTION 97net. IN NS 98SECTION ANSWER 99net. IN NS a.gtld-servers.net. 100SECTION ADDITIONAL 101a.gtld-servers.net. IN A 192.5.6.30 102ENTRY_END 103 104ENTRY_BEGIN 105MATCH opcode qname 106ADJUST copy_id copy_query 107REPLY QR NOERROR 108SECTION QUESTION 109a.gtld-servers.net. IN AAAA 110SECTION ANSWER 111SECTION AUTHORITY 112net. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 113ENTRY_END 114 115ENTRY_BEGIN 116MATCH opcode qname 117ADJUST copy_id copy_query 118REPLY QR NOERROR 119SECTION QUESTION 120ns.example.net. IN A 121SECTION AUTHORITY 122example.net. NS ns.example.net. 123SECTION ADDITIONAL 124ns.example.net. IN A 1.2.3.4 125ENTRY_END 126RANGE_END 127 128; ns.example.net. 129RANGE_BEGIN 0 100 130 ADDRESS 1.2.3.4 131; example.net. zone 132ENTRY_BEGIN 133MATCH opcode qname 134ADJUST copy_id copy_query 135REPLY QR NOERROR 136SECTION QUESTION 137example.net. IN NS 138SECTION ANSWER 139example.net. NS ns.example.net. 140SECTION ADDITIONAL 141ns.example.net. IN A 1.2.3.4 142ENTRY_END 143 144ENTRY_BEGIN 145MATCH opcode qtype qname 146ADJUST copy_id 147REPLY QR AA NOERROR 148SECTION QUESTION 149ns.example.net. IN A 150SECTION ANSWER 151ns.example.net. IN A 1.2.3.4 152ENTRY_END 153 154ENTRY_BEGIN 155MATCH opcode qtype qname 156ADJUST copy_id 157REPLY QR AA NOERROR 158SECTION QUESTION 159ns.example.net. IN AAAA 160SECTION ANSWER 161SECTION AUTHORITY 162example.net. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 163ENTRY_END 164 165; example.com. zone 166ENTRY_BEGIN 167MATCH opcode qname qtype 168ADJUST copy_id copy_query 169REPLY QR NOERROR 170SECTION QUESTION 171example.com. IN NS 172SECTION ANSWER 173example.com. IN NS ns.example.com. 174example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 175SECTION ADDITIONAL 176ns.example.com. IN A 1.2.3.4 177ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 178ENTRY_END 179 180ENTRY_BEGIN 181MATCH opcode qname qtype 182ADJUST copy_id copy_query 183REPLY QR NOERROR 184SECTION QUESTION 185ns.example.com. IN AAAA 186SECTION ANSWER 187SECTION AUTHORITY 188example.com. 3600 IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 189example.com. 3600 IN RRSIG SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AC23LvSspto6Zqctz05urK/2OKTnB+7nppMKInYkyjZbZotq2wjJA9s= 190ENTRY_END 191 192; response to DNSKEY priming query 193ENTRY_BEGIN 194MATCH opcode qtype qname 195ADJUST copy_id 196REPLY QR NOERROR 197SECTION QUESTION 198example.com. IN DNSKEY 199SECTION ANSWER 200example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 201example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 202SECTION AUTHORITY 203example.com. IN NS ns.example.com. 204example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 205SECTION ADDITIONAL 206ns.example.com. IN A 1.2.3.4 207ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 208ENTRY_END 209 210; response to query of interest 211ENTRY_BEGIN 212MATCH opcode qtype qname 213ADJUST copy_id 214REPLY QR NOERROR 215SECTION QUESTION 216www.example.com. IN A 217SECTION ANSWER 218www.example.com. IN A 10.20.30.40 219ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 220SECTION AUTHORITY 221example.com. IN NS ns.example.com. 222example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 223SECTION ADDITIONAL 224ns.example.com. IN A 1.2.3.4 225www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 226ENTRY_END 227RANGE_END 228 229STEP 1 QUERY 230ENTRY_BEGIN 231REPLY RD DO 232SECTION QUESTION 233www.example.com. IN A 234ENTRY_END 235 236; recursion happens here. 237STEP 10 CHECK_ANSWER 238ENTRY_BEGIN 239MATCH all 240REPLY QR RD RA AD DO NOERROR 241SECTION QUESTION 242www.example.com. IN A 243SECTION ANSWER 244www.example.com. IN A 10.20.30.40 245www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 246SECTION AUTHORITY 247example.com. IN NS ns.example.com. 248example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 249SECTION ADDITIONAL 250ns.example.com. IN A 1.2.3.4 251ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 252ENTRY_END 253 254; make sure glue fetch is done. 255STEP 11 QUERY 256ENTRY_BEGIN 257REPLY RD 258SECTION QUESTION 259ns.example.net. IN AAAA 260ENTRY_END 261 262STEP 12 CHECK_ANSWER 263ENTRY_BEGIN 264MATCH all 265REPLY QR RD RA NOERROR 266SECTION QUESTION 267ns.example.net. IN AAAA 268SECTION ANSWER 269SECTION AUTHORITY 270example.net. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 271SECTION ADDITIONAL 272ENTRY_END 273 274SCENARIO_END 275