1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "3 2 1 0 0" # make sure it fetches for test 7 8stub-zone: 9 name: "." 10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 11CONFIG_END 12 13SCENARIO_BEGIN Test iterator with empty delegation from cache. 14 15; K.ROOT-SERVERS.NET. 16RANGE_BEGIN 0 100 17 ADDRESS 193.0.14.129 18ENTRY_BEGIN 19MATCH opcode qtype qname 20ADJUST copy_id 21REPLY QR NOERROR 22SECTION QUESTION 23. IN NS 24SECTION ANSWER 25. IN NS K.ROOT-SERVERS.NET. 26SECTION ADDITIONAL 27K.ROOT-SERVERS.NET. IN A 193.0.14.129 28ENTRY_END 29 30ENTRY_BEGIN 31MATCH opcode subdomain 32ADJUST copy_id copy_query 33REPLY QR NOERROR 34SECTION QUESTION 35com. IN A 36SECTION AUTHORITY 37com. IN NS a.gtld-servers.net. 38 39; sneak in some data into the cache to simulate partial data after timeouts 40; gets scrubbed anyway. 41example.net. NS ns.example.net. 42 43SECTION ADDITIONAL 44a.gtld-servers.net. IN A 192.5.6.30 45ENTRY_END 46 47ENTRY_BEGIN 48MATCH opcode subdomain 49ADJUST copy_id copy_query 50REPLY QR NOERROR 51SECTION QUESTION 52net. IN A 53SECTION AUTHORITY 54net. IN NS a.gtld-servers.net. 55SECTION ADDITIONAL 56a.gtld-servers.net. IN A 192.5.6.30 57ENTRY_END 58RANGE_END 59 60; a.gtld-servers.net. 61RANGE_BEGIN 0 100 62 ADDRESS 192.5.6.30 63; com zone 64ENTRY_BEGIN 65MATCH opcode qname 66ADJUST copy_id copy_query 67REPLY QR NOERROR 68SECTION QUESTION 69com. IN NS 70SECTION ANSWER 71com. IN NS a.gtld-servers.net. 72SECTION ADDITIONAL 73a.gtld-servers.net. IN A 192.5.6.30 74ENTRY_END 75 76ENTRY_BEGIN 77MATCH opcode subdomain 78ADJUST copy_id copy_query 79REPLY QR NOERROR 80SECTION QUESTION 81example.com. IN A 82SECTION AUTHORITY 83example.com. IN NS ns.example.net. 84SECTION ADDITIONAL 85ENTRY_END 86 87; net zone 88ENTRY_BEGIN 89MATCH opcode qname 90ADJUST copy_id copy_query 91REPLY QR NOERROR 92SECTION QUESTION 93net. IN NS 94SECTION ANSWER 95net. IN NS a.gtld-servers.net. 96SECTION ADDITIONAL 97a.gtld-servers.net. IN A 192.5.6.30 98ENTRY_END 99 100ENTRY_BEGIN 101MATCH opcode qname 102ADJUST copy_id copy_query 103REPLY QR NOERROR 104SECTION QUESTION 105a.gtld-servers.net. IN AAAA 106SECTION ANSWER 107ENTRY_END 108 109ENTRY_BEGIN 110MATCH opcode qname 111ADJUST copy_id copy_query 112REPLY QR NOERROR 113SECTION QUESTION 114ns.example.net. IN A 115SECTION AUTHORITY 116example.net. NS ns.example.net. 117SECTION ADDITIONAL 118ns.example.net. IN A 1.2.3.4 119ENTRY_END 120RANGE_END 121 122; ns.example.net. 123RANGE_BEGIN 0 100 124 ADDRESS 1.2.3.4 125; example.net. zone 126ENTRY_BEGIN 127MATCH opcode qname 128ADJUST copy_id copy_query 129REPLY QR NOERROR 130SECTION QUESTION 131example.net. IN NS 132SECTION ANSWER 133example.net. NS ns.example.net. 134SECTION ADDITIONAL 135ns.example.net. IN A 1.2.3.4 136ENTRY_END 137 138ENTRY_BEGIN 139MATCH opcode qtype qname 140ADJUST copy_id 141REPLY QR AA NOERROR 142SECTION QUESTION 143ns.example.net. IN A 144SECTION ANSWER 145ns.example.net. IN A 1.2.3.4 146ENTRY_END 147 148ENTRY_BEGIN 149MATCH opcode qtype qname 150ADJUST copy_id 151REPLY QR AA NOERROR 152SECTION QUESTION 153ns.example.net. IN AAAA 154SECTION ANSWER 155ENTRY_END 156 157; example.com. zone 158ENTRY_BEGIN 159MATCH opcode qname qtype 160ADJUST copy_id copy_query 161REPLY QR NOERROR 162SECTION QUESTION 163example.com. IN NS 164SECTION ANSWER 165example.com. IN NS ns.example.com. 166example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 167SECTION ADDITIONAL 168ns.example.com. IN A 1.2.3.4 169ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 170ENTRY_END 171 172ENTRY_BEGIN 173MATCH opcode qname qtype 174ADJUST copy_id copy_query 175REPLY QR NOERROR 176SECTION QUESTION 177ns.example.com. IN AAAA 178SECTION ANSWER 179; bogus 180ENTRY_END 181 182; response to DNSKEY priming query 183ENTRY_BEGIN 184MATCH opcode qtype qname 185ADJUST copy_id 186REPLY QR NOERROR 187SECTION QUESTION 188example.com. IN DNSKEY 189SECTION ANSWER 190example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 191example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 192SECTION AUTHORITY 193example.com. IN NS ns.example.com. 194example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 195SECTION ADDITIONAL 196ns.example.com. IN A 1.2.3.4 197ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 198ENTRY_END 199 200; response to query of interest 201ENTRY_BEGIN 202MATCH opcode qtype qname 203ADJUST copy_id 204REPLY QR NOERROR 205SECTION QUESTION 206www.example.com. IN A 207SECTION ANSWER 208www.example.com. IN A 10.20.30.40 209ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 210SECTION AUTHORITY 211example.com. IN NS ns.example.com. 212example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 213SECTION ADDITIONAL 214ns.example.com. IN A 1.2.3.4 215www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 216ENTRY_END 217RANGE_END 218 219STEP 1 QUERY 220ENTRY_BEGIN 221REPLY RD DO 222SECTION QUESTION 223www.example.com. IN A 224ENTRY_END 225 226; recursion happens here. 227STEP 10 CHECK_ANSWER 228ENTRY_BEGIN 229MATCH all 230REPLY QR RD RA AD DO NOERROR 231SECTION QUESTION 232www.example.com. IN A 233SECTION ANSWER 234www.example.com. IN A 10.20.30.40 235www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 236SECTION AUTHORITY 237example.com. IN NS ns.example.com. 238example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 239SECTION ADDITIONAL 240ns.example.com. IN A 1.2.3.4 241ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 242ENTRY_END 243 244; make sure glue fetch is done. 245STEP 11 QUERY 246ENTRY_BEGIN 247REPLY RD 248SECTION QUESTION 249ns.example.net. IN AAAA 250ENTRY_END 251 252STEP 12 CHECK_ANSWER 253ENTRY_BEGIN 254MATCH all 255REPLY QR RD RA NOERROR 256SECTION QUESTION 257ns.example.net. IN AAAA 258SECTION ANSWER 259SECTION AUTHORITY 260SECTION ADDITIONAL 261ENTRY_END 262 263SCENARIO_END 264