Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extended DNS Errors a la RFC8914 #504

Open
wants to merge 69 commits into
base: master
Choose a base branch
from
Open

Conversation

wtoorop
Copy link
Member

@wtoorop wtoorop commented Jun 24, 2021

Still TODO:

  • Answer EDE code 4 Forged for local-data answers
  • Fix unit tests
  • Configure option(s?) whether or not local-zone should result in EDE code inclusion
  • Write subroutine to parse packets which are REFUSED caused by an ACL to either return REFUSED with or without EDE 18
  • figure out how to do ACL PROHIBITED reply FORMERROR
  • Document how the log-val-level: config options influences the returned EDE option text
  • add logic for per zone EDE for RPZ and configurable rpz-do-ede
  • add remote-control support for the added configuration options
  • configurable stale answer

For future iterations, we would like to have cached EDEs and add DNSSEC indeterminate with a configuration option,

util/data/msgreply.c Outdated Show resolved Hide resolved
Tom Carpay added 23 commits August 17, 2021 14:10
when refusing to answer authoritatively.
Also remove TODO comments that were already done
daemon/worker.c Outdated
Comment on lines 1584 to 1592

// // stale answer?
// if (worker->env.cfg->serve_expired &&
// *worker->env.now >= ((struct reply_info*)e->data)->ttl) {
// // EDE Error Code 3 - Stale Answer
// EDNS_OPT_LIST_APPEND_EDE(&edns.opt_list_out, worker->scratchpad,
// LDNS_EDE_STALE_ANSWER, "");
// }

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I thought I add commented about this earlier, but I don't seem to find that message again.
Is there any plan to have stale answers EDE handled from the get go of the RFC support?

@chantra
Copy link

chantra commented Nov 16, 2021

Not sure if I forgot to submit my previous comment a couple of weeks ago, or if it got overridden as the diff took shape.

TL;DR I am looking forward this making in into the main branch and was wondering if EDE stale answer (code 3) was going to be supported from the get go as the current diff has it commented out.
Thanks @TCY16 for tackling this!

@TCY16
Copy link
Contributor

TCY16 commented Nov 17, 2021

Hi @chantra, please don't let the commented-out code dishearten you, this is very much WIP 😄
Although I can't guarantee that EDE stale answer will be in the eventual release, we'll definitively look at this particular piece of code again!

@TCY16 TCY16 marked this pull request as ready for review January 3, 2022 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants