1; Ask the same question twice. Check to see second is answered 2; from cache 3 4server: 5 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 6 val-override-date: "20070916134226" 7 trust-anchor-signaling: no 8 target-fetch-policy: "0 0 0 0 0" 9 send-client-subnet: 1.2.3.4 10 max-client-subnet-ipv4: 17 11 module-config: "subnetcache validator iterator" 12 verbosity: 3 13 access-control: 127.0.0.1 allow_snoop 14 15stub-zone: 16 name: "." 17 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 18CONFIG_END 19 20SCENARIO_BEGIN Test validator with positive response 21 22; K.ROOT-SERVERS.NET. 23RANGE_BEGIN 0 100 24 ADDRESS 193.0.14.129 25 ENTRY_BEGIN 26 MATCH opcode qtype qname ednsdata 27 ADJUST copy_id 28 REPLY QR NOERROR 29 SECTION QUESTION 30 . IN NS 31 SECTION ANSWER 32 . IN NS K.ROOT-SERVERS.NET. 33 SECTION ADDITIONAL 34 HEX_EDNSDATA_BEGIN 35 ;; we expect to receive empty 36 HEX_EDNSDATA_END 37 K.ROOT-SERVERS.NET. IN A 193.0.14.129 38 ENTRY_END 39 40 ENTRY_BEGIN 41 MATCH opcode qtype qname 42 ADJUST copy_id 43 REPLY QR NOERROR 44 SECTION QUESTION 45 www.example.com. IN A 46 SECTION AUTHORITY 47 com. IN NS a.gtld-servers.net. 48 SECTION ADDITIONAL 49 a.gtld-servers.net. IN A 192.5.6.30 50 ENTRY_END 51RANGE_END 52 53; a.gtld-servers.net. 54RANGE_BEGIN 0 100 55 ADDRESS 192.5.6.30 56 ENTRY_BEGIN 57 MATCH opcode qtype qname ednsdata 58 ADJUST copy_id 59 REPLY QR NOERROR 60 SECTION QUESTION 61 com. IN NS 62 SECTION ANSWER 63 com. IN NS a.gtld-servers.net. 64 SECTION ADDITIONAL 65 HEX_EDNSDATA_BEGIN 66 ;; we expect to receive empty 67 HEX_EDNSDATA_END 68 a.gtld-servers.net. IN A 192.5.6.30 69 ENTRY_END 70 71 ENTRY_BEGIN 72 MATCH opcode qtype qname 73 ADJUST copy_id 74 REPLY QR NOERROR 75 SECTION QUESTION 76 www.example.com. IN A 77 SECTION AUTHORITY 78 example.com. IN NS ns.example.com. 79 SECTION ADDITIONAL 80 ns.example.com. IN A 1.2.3.4 81 ENTRY_END 82RANGE_END 83 84; ns.example.com. 85RANGE_BEGIN 0 100 86 ADDRESS 1.2.3.4 87 ENTRY_BEGIN 88 MATCH opcode qtype qname ednsdata 89 ADJUST copy_id 90 REPLY QR NOERROR 91 SECTION QUESTION 92 example.com. IN NS 93 SECTION ANSWER 94 example.com. IN NS ns.example.com. 95 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 96 SECTION ADDITIONAL 97 HEX_EDNSDATA_BEGIN 98 ;; we expect to receive empty 99 HEX_EDNSDATA_END 100 ns.example.com. IN A 1.2.3.4 101 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 102 ENTRY_END 103 104 ; response to DNSKEY priming query 105 ENTRY_BEGIN 106 MATCH opcode qtype qname ednsdata 107 ADJUST copy_id 108 REPLY QR NOERROR 109 SECTION QUESTION 110 example.com. IN DNSKEY 111 SECTION ANSWER 112 example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 113 example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 114 SECTION AUTHORITY 115 example.com. IN NS ns.example.com. 116 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 117 SECTION ADDITIONAL 118 HEX_EDNSDATA_BEGIN 119 ;; we expect to receive empty 120 HEX_EDNSDATA_END 121 ns.example.com. IN A 1.2.3.4 122 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 123 ENTRY_END 124 125 ; response to query of interest 126 ENTRY_BEGIN 127 MATCH opcode qtype qname ednsdata 128 ADJUST copy_id copy_ednsdata_assume_clientsubnet 129 REPLY QR NOERROR 130 SECTION QUESTION 131 www.example.com. IN A 132 SECTION ANSWER 133 www.example.com. IN A 10.20.30.40 134 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 135 SECTION AUTHORITY 136 example.com. IN NS ns.example.com. 137 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 138 SECTION ADDITIONAL 139 HEX_EDNSDATA_BEGIN 140 ; client is 127.0.0.1 141 00 08 ; OPC 142 00 07 ; option length 143 00 01 ; Family 144 11 00 ; source mask, scopemask 145 7f 00 00 ; address 146 HEX_EDNSDATA_END 147 ns.example.com. IN A 1.2.3.4 148 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 149 ENTRY_END 150RANGE_END 151 152STEP 1 QUERY 153ENTRY_BEGIN 154 HEX_ANSWER_BEGIN; 155 00 00 01 00 00 01 00 00 ;ID 0 156 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 157 07 65 78 61 6d 70 6c 65 158 03 63 6f 6d 00 00 01 00 159 01 00 00 29 10 00 00 00 160 80 00 00 0b 161 162 00 08 00 07 ; OPC, optlen 163 00 01 11 00 ; ip4, scope 17, source 0 164 7f 00 00 ;127.0.0.0/17 165 HEX_ANSWER_END 166ENTRY_END 167 168STEP 10 CHECK_ANSWER 169ENTRY_BEGIN 170 MATCH all ednsdata 171 REPLY QR RD RA AD NOERROR 172 SECTION QUESTION 173 www.example.com. IN A 174 SECTION ANSWER 175 www.example.com. IN A 10.20.30.40 176 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 177 SECTION AUTHORITY 178 example.com. IN NS ns.example.com. 179 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 180 SECTION ADDITIONAL 181 HEX_EDNSDATA_BEGIN 182 ; client is 127.0.0.1 183 00 08 ; OPC 184 00 07 ; option length 185 00 01 ; Family 186 11 11 ; source mask, scopemask 187 7f 00 00 ; address 188 HEX_EDNSDATA_END 189 ns.example.com. IN A 1.2.3.4 190 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 191ENTRY_END 192 193STEP 11 QUERY 194 195ENTRY_BEGIN 196 HEX_ANSWER_BEGIN; 197 00 00 00 00 00 01 00 00 ;ID 0, no RD 198 00 00 00 01 03 77 77 77 ; www.example.com A? (DO) 199 07 65 78 61 6d 70 6c 65 200 03 63 6f 6d 00 00 01 00 201 01 00 00 29 10 00 00 00 202 80 00 00 0b 203 204 00 08 00 07 ; OPC, optlen 205 00 01 12 00 ; ip4, scope 18, source 0 206 7f 00 00 ;127.0.0.0/18 207 HEX_ANSWER_END 208ENTRY_END 209 210STEP 20 CHECK_ANSWER 211ENTRY_BEGIN 212 MATCH all ednsdata 213 REPLY QR RA AD NOERROR 214 SECTION QUESTION 215 www.example.com. IN A 216 SECTION ANSWER 217 www.example.com. IN A 10.20.30.40 218 www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 219 SECTION AUTHORITY 220 example.com. IN NS ns.example.com. 221 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} 222 SECTION ADDITIONAL 223 HEX_EDNSDATA_BEGIN 224 ; client is 127.0.0.1 225 00 08 ; OPC 226 00 07 ; option length 227 00 01 ; Family 228 12 11 ; source mask, scopemask 229 7f 00 00 ; address 230 HEX_EDNSDATA_END 231 ns.example.com. IN A 1.2.3.4 232 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 233ENTRY_END 234 235SCENARIO_END 236