== DNS/glue/unbound 1.9.1 == <> Unboundがsibling domain glue返答を受け入れていないことまでは分かる。-- ToshinoriMaeno <> $ unbound-control get_option harden-referral-path (yes) 同様のテストをbindでもやってみよう。[[../bind-9.14.0]] net nsを問合せて、unboundがどこまで調べているかも、見ておこう。-- ToshinoriMaeno <> [[/net]] == flush_zone == {{{ $ unbound-control flush_zone net $ unbound-control flush_zone com }}} == com NS == {{{ $ dig -t ns com ; <<>> DiG 9.14.0 <<>> -t ns com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59721 ;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;com. IN NS ;; ANSWER SECTION: com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. ;; Query time: 64 msec ;; SERVER: 127.0.0.3#53(127.0.0.3) ;; WHEN: 月 4月 01 22:16:49 JST 2019 ;; MSG SIZE rcvd: 256 }}} == +norec == なにがキャッシュにあるかを調べる。 {{{ $ dig +norec -t ns net ... }}} {{{ $ dig +norec -t ns nstld.com ; <<>> DiG 9.14.0 <<>> +norec -t ns nstld.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21002 ;; flags: qr ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1220 ;; QUESTION SECTION: ;nstld.com. IN NS ;; ANSWER SECTION: nstld.com. 86285 IN NS av4.nstld.com. nstld.com. 86285 IN NS av2.nstld.com. nstld.com. 86285 IN NS av3.nstld.com. nstld.com. 86285 IN NS av1.nstld.com. ;; Query time: 0 msec ;; SERVER: 127.0.0.3#53(127.0.0.3) ;; WHEN: 月 4月 01 22:18:44 JST 2019 ;; MSG SIZE rcvd: 110 }}}