These are chat archives for CZ-NIC/knot-resolver
Knot Resolver: Resolve DNS names like it's 2019! https://www.knot-resolver.cz/support/
kdig -x 220.127.116.11 +short beta.on-sys.net.
;; AUTHORITY SECTION: cz. 172800 IN NS ns1.csof.net. cz. 172800 IN NS ns4.csof.net.
/usr/sbin/kresd --config=/etc/knot-resolver/kresd.conf --verbose --forks=1 --keyfile=/usr/share/dns/root.key /var/cache/knot-resolver/cache
ondrejI guess we'll need to clear the cache between major upgrades automatically
ondrejI am confident enough to give it more widespread testing from the repository
ondrejI am running it successfully for some time and we need more people to give feedback at this moment.
ondrejThe logs would be great. That's exactly th kind of feedback we are looking for. Although I am sorry for your inconvenience.
ondrejCould you please share the config as well? I'd is if default?
ondrejThe NXDOMAIN at the beginning is weird. Is something intercepting your IPv6 traffic?
ondrejIt should be NOERROR
ondrejSomething has obviously happened between 13:48:33 and 13:58:59
ondrejAnd this "NS is provably without DS, going insecure" should not definitely happen.
18.104.22.168in the logs? And few lines before?
plan 'cz' type 'NS'somewhere early, like in that unbound thread.
@andir could you:
cache.size=1000*Min the config
deb.knot-dns.czfrom external script
This would minimize the logs produced to analyze
api-nyc01.exip.organd then ask for
a.root-server.org(without s) yesterday?
vld-refactoringbranch (compiled from git_)
AAAAand now my cache has been poisoned as well
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 64443 ;; Flags: qr aa rd; QUERY: 1; ANSWER: 1; AUTHORITY: 2; ADDITIONAL: 2 ;; QUESTION SECTION: ;; APi-NYC01.ExiP.Org. IN A ;; ANSWER SECTION: APi-NYC01.ExiP.Org. 100 IN A 127.0.0.1 ;; AUTHORITY SECTION: ***Org. 172800 IN NS ns1.csof.net.*** ***Org. 172800 IN NS ns4.csof.net.*** ;; ADDITIONAL SECTION: ns1.csof.net. 100 IN A 22.214.171.124 ns4.csof.net. 100 IN A 126.96.36.199 ;; Received 128 B ;; Time 2016-12-20 15:40:06 CET ;; From 188.8.131.52@53(UDP) in 47.2 ms
masterbranch for this moment before we fix this
knot-resolver_1.2.0~20161220+vld-refactoring-off-1+0~20161220144350.37+jessie~1.gbpee8466is available from the repository
python2available on macos when installed via homebrew or per default? I'm trying to setup a local test env for the git branches but my machines are already defaulting to python3 causing a bit of pain :-)