DNS/FCP/kresdについて、ここに記述してください。
Knot Resolver strict mode での動作
- dig x.s2.brau.jp
$dig x.s2.brau.jp @127.0.0.4 ; <<>> DiG 9.12.3 <<>> x.s2.brau.jp @127.0.0.4 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 48535 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;x.s2.brau.jp. IN A ;; Query time: 21 msec ;; SERVER: 127.0.0.4#53(127.0.0.4) ;; WHEN: 水 12月 19 09:31:14 JST 2018 ;; MSG SIZE rcvd: 41
jp, brau.jp NSを得たあとの動作
[00000.00][plan] plan 'x.s2.brau.jp.' type 'A' uid [54372.00] [54372.00][iter] 'x.s2.brau.jp.' type 'A' new uid was assigned .01, parent uid .00 [54372.01][cach] => skipping exact RR: rank 020 (min. 020), new TTL -79500 [54372.01][cach] => no NSEC* cached for zone: s2.brau.jp. [54372.01][cach] => skipping zone: s2.brau.jp., NSEC, hash 0;new TTL -123456789, ret -2 [54372.01][cach] => skipping zone: s2.brau.jp., NSEC, hash 0;new TTL -123456789, ret -2 [54372.01][resl] => going insecure because there's no covering TA [54372.01][zcut] found cut: s2.brau.jp. (rank 002 return codes: DS -2, DNSKEY -2) [54372.01][plan] plan 'a.ns.brau.jp.' type 'A' uid [54372.02] [54372.02][iter] 'a.ns.brau.jp.' type 'A' new uid was assigned .03, parent uid .01 [54372.03][cach] => satisfied by exact RRset: rank 001, new TTL 86372 [54372.03][iter] <= rcode: NOERROR [54372.01][iter] 'x.s2.brau.jp.' type 'A' new uid was assigned .04, parent uid .00 [54372.04][resl] => id: '61614' querying: '14.192.44.29#00053' score: 11 zone cut: 's2.brau.jp.' qname: 'X.s2.bRAU.JP.' qtype: 'A' proto: 'udp' [54372.04][iter] <= rcode: NOERROR [54372.04][iter] <= lame response: non-auth sent negative response [54372.04][iter] 'x.s2.brau.jp.' type 'A' new uid was assigned .05, parent uid .00 [54372.05][resl] => unresolvable NS address, bailing out [54372.05][resl] => no NS with an address [54372.05][iter] 'x.s2.brau.jp.' type 'A' new uid was assigned .06, parent uid .00 [54372.06][resl] => no NS with an address [54372.06][resl] AD: request NOT classified as SECURE [54372.06][resl] finished: 0, queries: 2, mempool: 32800 B tmaeno@u16:~/kresd-run$