1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 trust-anchor: "example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}" 6 val-override-date: "20070916134226" 7 msg-cache-size: 8 8 rrset-cache-size: 8 9 target-fetch-policy: "0 0 0 0 0" 10 11stub-zone: 12 name: "." 13 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 14CONFIG_END 15 16SCENARIO_BEGIN Test cname to positive without cache 17 18; K.ROOT-SERVERS.NET. 19RANGE_BEGIN 0 100 20 ADDRESS 193.0.14.129 21ENTRY_BEGIN 22MATCH opcode qtype qname 23ADJUST copy_id 24REPLY QR NOERROR 25SECTION QUESTION 26. IN NS 27SECTION ANSWER 28. IN NS K.ROOT-SERVERS.NET. 29SECTION ADDITIONAL 30K.ROOT-SERVERS.NET. IN A 193.0.14.129 31ENTRY_END 32 33ENTRY_BEGIN 34MATCH opcode qtype qname 35ADJUST copy_id 36REPLY QR NOERROR 37SECTION QUESTION 38a.gtld-servers.net. IN A 39SECTION ANSWER 40a.gtld-servers.net. IN A 192.5.6.30 41ENTRY_END 42 43ENTRY_BEGIN 44MATCH opcode qtype qname 45ADJUST copy_id 46REPLY QR NOERROR 47SECTION QUESTION 48a.gtld-servers.net. IN AAAA 49SECTION ANSWER 50ENTRY_END 51 52ENTRY_BEGIN 53MATCH opcode qtype qname 54ADJUST copy_id 55REPLY QR NOERROR 56SECTION QUESTION 57ns.example.net. IN AAAA 58SECTION ANSWER 59ENTRY_END 60 61ENTRY_BEGIN 62MATCH opcode subdomain 63ADJUST copy_id copy_query 64REPLY QR NOERROR 65SECTION QUESTION 66com. IN A 67SECTION AUTHORITY 68com. IN NS a.gtld-servers.net. 69SECTION ADDITIONAL 70a.gtld-servers.net. IN A 192.5.6.30 71ENTRY_END 72 73ENTRY_BEGIN 74MATCH opcode qname 75ADJUST copy_id copy_query 76REPLY QR NOERROR 77SECTION QUESTION 78www.example.net. IN A 79SECTION AUTHORITY 80net. IN NS a.gtld-servers.net. 81SECTION ADDITIONAL 82a.gtld-servers.net. IN A 192.5.6.30 83ENTRY_END 84 85ENTRY_BEGIN 86MATCH opcode qname 87ADJUST copy_id copy_query 88REPLY QR NOERROR 89SECTION QUESTION 90example.net. IN A 91SECTION AUTHORITY 92net. IN NS a.gtld-servers.net. 93SECTION ADDITIONAL 94a.gtld-servers.net. IN A 192.5.6.30 95ENTRY_END 96RANGE_END 97 98; a.gtld-servers.net. 99RANGE_BEGIN 0 100 100 ADDRESS 192.5.6.30 101ENTRY_BEGIN 102MATCH opcode qname qtype 103ADJUST copy_id copy_query 104REPLY QR NOERROR 105SECTION QUESTION 106com. IN NS 107SECTION ANSWER 108com. IN NS a.gtld-servers.net. 109SECTION ADDITIONAL 110a.gtld-servers.net. IN A 192.5.6.30 111ENTRY_END 112 113ENTRY_BEGIN 114MATCH opcode qname qtype 115ADJUST copy_id copy_query 116REPLY QR NOERROR 117SECTION QUESTION 118net. IN NS 119SECTION ANSWER 120net. IN NS a.gtld-servers.net. 121SECTION ADDITIONAL 122a.gtld-servers.net. IN A 192.5.6.30 123ENTRY_END 124 125ENTRY_BEGIN 126MATCH opcode subdomain 127ADJUST copy_id copy_query 128REPLY QR NOERROR 129SECTION QUESTION 130example.com. IN A 131SECTION AUTHORITY 132example.com. IN NS ns.example.com. 133SECTION ADDITIONAL 134ns.example.com. IN A 1.2.3.4 135ENTRY_END 136 137ENTRY_BEGIN 138MATCH opcode qname 139ADJUST copy_id copy_query 140REPLY QR NOERROR 141SECTION QUESTION 142example.net. IN A 143SECTION AUTHORITY 144example.net. IN NS ns.example.net. 145SECTION ADDITIONAL 146ns.example.net. IN A 1.2.3.5 147ENTRY_END 148 149ENTRY_BEGIN 150MATCH opcode qname 151ADJUST copy_id copy_query 152REPLY QR NOERROR 153SECTION QUESTION 154www.example.net. IN A 155SECTION AUTHORITY 156example.net. IN NS ns.example.net. 157SECTION ADDITIONAL 158ns.example.net. IN A 1.2.3.5 159ENTRY_END 160RANGE_END 161 162; ns.example.com. 163RANGE_BEGIN 0 100 164 ADDRESS 1.2.3.4 165ENTRY_BEGIN 166MATCH opcode qname qtype 167ADJUST copy_id copy_query 168REPLY QR NOERROR 169SECTION QUESTION 170example.com. IN NS 171SECTION ANSWER 172example.com. IN NS ns.example.com. 173example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 174SECTION ADDITIONAL 175ns.example.com. IN A 1.2.3.4 176ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 177ENTRY_END 178 179ENTRY_BEGIN 180MATCH opcode qname qtype 181ADJUST copy_id copy_query 182REPLY QR NOERROR 183SECTION QUESTION 184ns.example.com. IN AAAA 185SECTION ANSWER 186ENTRY_END 187 188; response to DNSKEY priming query 189ENTRY_BEGIN 190MATCH opcode qtype qname 191ADJUST copy_id 192REPLY QR NOERROR 193SECTION QUESTION 194example.com. IN DNSKEY 195SECTION ANSWER 196example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 197example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854} 198SECTION AUTHORITY 199example.com. IN NS ns.example.com. 200example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 201SECTION ADDITIONAL 202ns.example.com. IN A 1.2.3.4 203ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 204ENTRY_END 205 206; response to query of interest 207ENTRY_BEGIN 208MATCH opcode qtype qname 209ADJUST copy_id 210REPLY QR NOERROR 211SECTION QUESTION 212www.example.com. IN A 213SECTION ANSWER 214www.example.com. IN CNAME www.example.net. 215www.example.com. 3600 IN RRSIG CNAME DSA 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFGcJxnNxpWCBzXejiSdl4p1BKRMnAhUApoJrugVBRwFgAoYAhhqlZFac7fE= ;{id = 2854} 216SECTION AUTHORITY 217SECTION ADDITIONAL 218ENTRY_END 219RANGE_END 220 221; ns.example.net. 222RANGE_BEGIN 0 100 223 ADDRESS 1.2.3.5 224ENTRY_BEGIN 225MATCH opcode qname qtype 226ADJUST copy_id copy_query 227REPLY QR NOERROR 228SECTION QUESTION 229example.net. IN NS 230SECTION ANSWER 231example.net. IN NS ns.example.net. 232example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 233SECTION ADDITIONAL 234ns.example.net. IN A 1.2.3.5 235ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 236ENTRY_END 237 238; response to DNSKEY priming query 239ENTRY_BEGIN 240MATCH opcode qtype qname 241ADJUST copy_id 242REPLY QR NOERROR 243SECTION QUESTION 244example.net. IN DNSKEY 245SECTION ANSWER 246example.net. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 247example.net. 3600 IN RRSIG DNSKEY RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. hiFzlQ8VoYgCuvIsfVuxC3mfJDqsTh0yc6abs5xMx5uEcIjb0dndFQx7INOM+imlzveEN73Hqp4OLFpFhsWLlw== ;{id = 30899} 248SECTION AUTHORITY 249example.net. IN NS ns.example.net. 250example.net. 3600 IN RRSIG NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899} 251SECTION ADDITIONAL 252ns.example.net. IN A 1.2.3.5 253ns.example.net. 3600 IN RRSIG A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899} 254ENTRY_END 255 256; response to query of interest 257ENTRY_BEGIN 258MATCH opcode qtype qname 259ADJUST copy_id 260REPLY QR NOERROR 261SECTION QUESTION 262www.example.net. IN A 263SECTION ANSWER 264www.example.net. IN A 11.12.13.14 265www.example.net. 3600 IN RRSIG A 5 3 3600 20070926134150 20070829134150 30899 example.net. CPxF5hK9Kg5eT7W6LgZwr0ePYEm9HMcSY4vvqCS6gDWB4X9jvXLCfBkCLhsNybPBpGWlsLi5wM6MTdJXuPpsRA== ;{id = 30899} 266SECTION AUTHORITY 267SECTION ADDITIONAL 268ENTRY_END 269RANGE_END 270 271STEP 1 QUERY 272ENTRY_BEGIN 273REPLY RD DO 274SECTION QUESTION 275www.example.com. IN A 276ENTRY_END 277 278STEP 5 TRAFFIC 279 280; recursion happens here. 281STEP 10 CHECK_ANSWER 282ENTRY_BEGIN 283MATCH all 284REPLY QR RD RA AD DO NOERROR 285SECTION QUESTION 286www.example.com. IN A 287SECTION ANSWER 288www.example.com. IN CNAME www.example.net. 289www.example.com. 3600 IN RRSIG CNAME DSA 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFGcJxnNxpWCBzXejiSdl4p1BKRMnAhUApoJrugVBRwFgAoYAhhqlZFac7fE= ;{id = 2854} 290www.example.net. IN A 11.12.13.14 291www.example.net. 3600 IN RRSIG A 5 3 3600 20070926134150 20070829134150 30899 example.net. CPxF5hK9Kg5eT7W6LgZwr0ePYEm9HMcSY4vvqCS6gDWB4X9jvXLCfBkCLhsNybPBpGWlsLi5wM6MTdJXuPpsRA== ;{id = 30899} 292SECTION AUTHORITY 293SECTION ADDITIONAL 294ENTRY_END 295 296SCENARIO_END 297