[dnsext] Failure to add glue MUST cause TC to be set.

Mark Andrews <marka@isc.org> Sat, 19 February 2011 21:07 UTC

To: dnsext@ietf.org
From: Mark Andrews <marka@isc.org>
Date: Sun, 20 Feb 2011 08:07:15 +1100
Message-Id: <20110219210716.72943A5602B@drugs.dv.isc.org>
Subject: [dnsext] Failure to add glue MUST cause TC to be set.
Precedence: list

Below is a example of why TC should be set when glue cannot be added
to the answer.

We need to make it clear that adding address records here (RFC 1034,
Section 4.3.2, step 3b) is not optional unlike step 6 where they are
optional.

         b. If a match would take us out of the authoritative data,
            we have a referral.  This happens when we encounter a
            node with NS RRs marking cuts along the bottom of a
            zone.

            Copy the NS RRs for the subzone into the authority
            section of the reply.  Put whatever addresses are
            available into the additional section, using glue RRs
            if the addresses are not available from authoritative
            data or the cache.  Go to step 4.

Mark

; <<>> DiG 9.6.0-APPLE-P2 <<>> +norec +dnssec +bufsize=512 @b.gov-servers.net vwall1a.nyc.gov
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13052
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;vwall1a.nyc.gov.		IN	A

;; AUTHORITY SECTION:
nyc.gov.		86400	IN	NS	vwall1a.nyc.gov.
nyc.gov.		86400	IN	NS	vwall2a.nyc.gov.
nyc.gov.		86400	IN	NS	vwall3a.nyc.gov.
nyc.gov.		86400	IN	NS	vwall4a.nyc.gov.
rq2651faaj4nen6tfis8ju5005qccn8j.gov. 86400 IN NSEC3 1 0 8 4C44934802D3 RQDJO8PKJ2LEUMC30SGU45DDI643G497 NS
rq2651faaj4nen6tfis8ju5005qccn8j.gov. 86400 IN RRSIG NSEC3 7 2 86400 20110224160026 20110219160026 47602 gov. ZL6YdI7AOtcv5Vfs9cjOZkj6tld5+K4UfDjD2BV4ToBQQ4jhD6HS102P p2TGBP90RdjSLGpGw5OHt9ZxjCPzjWjcoM5V5PiWoGhXrmdgahfmVENE cRH9gsxJhlonz+vIfXlFTeCLgn5d3D5WxjURdGKfDK5j35JvDKb0kQ+8 CwZNXGeopE+01fgiTbIMvSqXCpXlXY/RD+fAbfuh+5e05jdIbj/53/9+ gQOHTXYd3T9jCOxrFOONuznzyvpRODJ3Sga/P+DvWzgUrVZSOKYEsAAi COTbtyCqDhfBIyNB9MxPry4oN0uet46zTjIqhvRg4JjPnfC9WFAEGDTK uolyNw==

;; Query time: 187 msec
;; SERVER: 209.112.123.30#53(209.112.123.30)
;; WHEN: Sun Feb 20 07:39:46 2011
;; MSG SIZE  rcvd: 510

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE:	+61 2 9871 4742		         INTERNET: marka@isc.org

[dnsext] Failure to add glue MUST cause TC to be … Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Paul Vixie
Re: [dnsext] Failure to add glue MUST cause TC to… bmanning
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
[dnsext] zone cut semantics Jim Reid
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… James Mitchell
Re: [dnsext] Failure to add glue MUST cause TC to… Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Masataka Ohta
Re: [dnsext] zone cut semantics Brandon Black
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] zone cut semantics Jay Ashworth
Re: [dnsext] zone cut semantics Jim Reid
Re: [dnsext] zone cut semantics Brandon Black
Re: [dnsext] zone cut semantics Jay Ashworth
Re: [dnsext] zone cut semantics Joe Abley
Re: [dnsext] zone cut semantics Olafur Gudmundsson
Re: [dnsext] Failure to add glue MUST cause TC to… Florian Weimer
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] Failure to add glue MUST cause TC to… Tony Finch
Re: [dnsext] zone cut semantics W.C.A. Wijngaards
Re: [dnsext] zone cut semantics Michael Graff
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Mark Andrews
Re: [dnsext] Failure to add glue MUST cause TC to… George Barwood
Re: [dnsext] Failure to add glue MUST cause TC to… Joe Abley