1; Ask the same question twice. Check to see second is answered 2; from cache 3 4server: 5 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 6 val-override-date: "20070916134226" 7 trust-anchor-signaling: no 8 target-fetch-policy: "0 0 0 0 0" 9 send-client-subnet: 1.2.3.4 10 max-client-subnet-ipv4: 17 11 module-config: "subnetcache validator iterator" 12 verbosity: 3 13 fake-sha1: yes 14 fake-dsa: yes 15 access-control: 127.0.0.1 allow_snoop 16 qname-minimisation: "no" 17 minimal-responses: no 18 19stub-zone: 20 name: "." 21 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 22CONFIG_END 23 24SCENARIO_BEGIN Test validator with positive response 25 26; K.ROOT-SERVERS.NET. 27RANGE_BEGIN 0 100 28 ADDRESS 193.0.14.129 29 ENTRY_BEGIN 30 MATCH opcode qtype qname ednsdata 31 ADJUST copy_id 32 REPLY QR NOERROR 33 SECTION QUESTION 34 . IN NS 35 SECTION ANSWER 36 . IN NS K.ROOT-SERVERS.NET. 37 SECTION ADDITIONAL 38 HEX_EDNSDATA_BEGIN 39 ;; we expect to receive empty 40 HEX_EDNSDATA_END 41 K.ROOT-SERVERS.NET. IN A 193.0.14.129 42 ENTRY_END 43 44 ENTRY_BEGIN 45 MATCH opcode qtype qname 46 ADJUST copy_id 47 REPLY QR NOERROR 48 SECTION QUESTION 49 www.example.com. IN A 50 SECTION AUTHORITY 51 com. IN NS a.gtld-servers.net. 52 SECTION ADDITIONAL 53 a.gtld-servers.net. IN A 192.5.6.30 54 ENTRY_END 55RANGE_END 56 57; a.gtld-servers.net. 58RANGE_BEGIN 0 100 59 ADDRESS 192.5.6.30 60 ENTRY_BEGIN 61 MATCH opcode qtype qname ednsdata 62 ADJUST copy_id 63 REPLY QR NOERROR 64 SECTION QUESTION 65 com. IN NS 66 SECTION ANSWER 67 com. IN NS a.gtld-servers.net. 68 SECTION ADDITIONAL 69 HEX_EDNSDATA_BEGIN 70 ;; we expect to receive empty 71 HEX_EDNSDATA_END 72 a.gtld-servers.net. IN A 192.5.6.30 73 ENTRY_END 74 75 ENTRY_BEGIN 76 MATCH opcode qtype qname 77 ADJUST copy_id 78 REPLY QR NOERROR 79 SECTION QUESTION 80 www.example.com. IN A 81 SECTION AUTHORITY 82 example.com. IN NS ns.example.com. 83 SECTION ADDITIONAL 84 ns.example.com. IN A 1.2.3.4 85 ENTRY_END 86RANGE_END 87 88; ns.example.com. 89RANGE_BEGIN 0 100 90 ADDRESS 1.2.3.4 91 ENTRY_BEGIN 92 MATCH opcode qtype qname ednsdata 93 ADJUST copy_id 94 REPLY QR NOERROR 95 SECTION QUESTION 96 example.com. IN NS 97 SECTION ANSWER 98 example.com. IN NS ns.example.com. 99 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 100 SECTION ADDITIONAL 101 HEX_EDNSDATA_BEGIN 102 ;; we expect to receive empty 103 HEX_EDNSDATA_END 104 ns.example.com. IN A 1.2.3.4 105 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 106 ENTRY_END 107 108 ; response to DNSKEY priming query 109 ENTRY_BEGIN 110 MATCH opcode qtype qname ednsdata 111 ADJUST copy_id 112 REPLY QR NOERROR 113 SECTION QUESTION 114 example.com. IN DNSKEY 115 SECTION ANSWER 116 example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 117 example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 118 SECTION AUTHORITY 119 example.com. IN NS ns.example.com. 120 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 121 SECTION ADDITIONAL 122 HEX_EDNSDATA_BEGIN 123 ;; we expect to receive empty 124 HEX_EDNSDATA_END 125 ns.example.com. IN A 1.2.3.4 126 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 127 ENTRY_END 128 129 ; response to query of interest 130 ENTRY_BEGIN 131 MATCH opcode qtype qname ednsdata 132 ADJUST copy_id copy_ednsdata_assume_clientsubnet 133 REPLY QR NOERROR 134 SECTION QUESTION 135 www.example.com. IN A 136 SECTION ANSWER 137 www.example.com. IN A 10.20.30.40 138 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 139 SECTION AUTHORITY 140 example.com. IN NS ns.example.com. 141 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 142 SECTION ADDITIONAL 143 HEX_EDNSDATA_BEGIN 144 ; client is 127.0.0.1 145 00 08 ; OPC 146 00 07 ; option length 147 00 01 ; Family 148 11 00 ; source mask, scopemask 149 7f 00 00 ; address 150 HEX_EDNSDATA_END 151 ns.example.com. IN A 1.2.3.4 152 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 153 ENTRY_END 154RANGE_END 155 156STEP 1 QUERY 157ENTRY_BEGIN 158 HEX_ANSWER_BEGIN; 159 00 00 01 00 00 01 00 00 ;ID 0 160 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 161 07 65 78 61 6d 70 6c 65 162 03 63 6f 6d 00 00 01 00 163 01 00 00 29 10 00 00 00 164 80 00 00 0b 165 166 00 08 00 07 ; OPC, optlen 167 00 01 11 00 ; ip4, scope 17, source 0 168 7f 00 00 ;127.0.0.0/17 169 HEX_ANSWER_END 170ENTRY_END 171 172STEP 10 CHECK_ANSWER 173ENTRY_BEGIN 174 MATCH all ednsdata 175 REPLY QR RD RA AD NOERROR 176 SECTION QUESTION 177 www.example.com. IN A 178 SECTION ANSWER 179 www.example.com. IN A 10.20.30.40 180 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 181 SECTION AUTHORITY 182 example.com. IN NS ns.example.com. 183 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 184 SECTION ADDITIONAL 185 HEX_EDNSDATA_BEGIN 186 ; client is 127.0.0.1 187 00 08 ; OPC 188 00 07 ; option length 189 00 01 ; Family 190 11 11 ; source mask, scopemask 191 7f 00 00 ; address 192 HEX_EDNSDATA_END 193 ns.example.com. IN A 1.2.3.4 194 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 195ENTRY_END 196 197STEP 11 QUERY 198 199ENTRY_BEGIN 200 HEX_ANSWER_BEGIN; 201 00 00 00 00 00 01 00 00 ;ID 0, no RD 202 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 203 07 65 78 61 6d 70 6c 65 204 03 63 6f 6d 00 00 01 00 205 01 00 00 29 10 00 00 00 206 80 00 00 0b 207 208 00 08 00 07 ; OPC, optlen 209 00 01 12 00 ; ip4, scope 18, source 0 210 7f 00 00 ;127.0.0.0/18 211 HEX_ANSWER_END 212ENTRY_END 213 214STEP 20 CHECK_ANSWER 215ENTRY_BEGIN 216 MATCH all ednsdata 217 REPLY QR RA AD NOERROR 218 SECTION QUESTION 219 www.example.com. IN A 220 SECTION ANSWER 221 www.example.com. IN A 10.20.30.40 222 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 223 SECTION AUTHORITY 224 example.com. IN NS ns.example.com. 225 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 226 SECTION ADDITIONAL 227 HEX_EDNSDATA_BEGIN 228 ; client is 127.0.0.1 229 00 08 ; OPC 230 00 07 ; option length 231 00 01 ; Family 232 12 11 ; source mask, scopemask 233 7f 00 00 ; address 234 HEX_EDNSDATA_END 235 ns.example.com. IN A 1.2.3.4 236 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 237ENTRY_END 238 239SCENARIO_END 240