1. DNS/glue/unbound 1.9.1
Contents
Unboundがsibling domain glue返答を受け入れていないことまでは分かる。-- ToshinoriMaeno 2019-04-01 13:22:05
- $ unbound-control get_option harden-referral-path (yes)
同様のテストをbindでもやってみよう。../bind-9.14.0
net nsを問合せて、unboundがどこまで調べているかも、見ておこう。-- ToshinoriMaeno 2019-04-01 13:38:57
2. flush_zone
$ unbound-control flush_zone net $ unbound-control flush_zone com
3. com NS
$ dig -t ns com ; <<>> DiG 9.14.0 <<>> -t ns com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59721 ;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;com. IN NS ;; ANSWER SECTION: com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. ;; Query time: 64 msec ;; SERVER: 127.0.0.3#53(127.0.0.3) ;; WHEN: 月 4月 01 22:16:49 JST 2019 ;; MSG SIZE rcvd: 256
4. +norec
なにがキャッシュにあるかを調べる。
$ dig +norec -t ns net ...
$ dig +norec -t ns nstld.com ; <<>> DiG 9.14.0 <<>> +norec -t ns nstld.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21002 ;; flags: qr ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;nstld.com. IN NS ;; ANSWER SECTION: nstld.com. 86285 IN NS av4.nstld.com. nstld.com. 86285 IN NS av2.nstld.com. nstld.com. 86285 IN NS av3.nstld.com. nstld.com. 86285 IN NS av1.nstld.com. ;; Query time: 0 msec ;; SERVER: 127.0.0.3#53(127.0.0.3) ;; WHEN: 月 4月 01 22:18:44 JST 2019 ;; MSG SIZE rcvd: 110