bad answers from BIND9 ?
Simon Waters
Simon at wretched.demon.co.uk
Fri Dec 13 07:08:57 UTC 2002
Kevin Darcy wrote:
>
> The difference between the servers is that the BIND 8 nameserver happens to
> have the answer cached. So it gives an answer. The BIND 9 nameserver
> apparently doesn't. So it gives a referral. The respective versions of
> BIND that these nameservers are running has no apparent bearing on the
> contents of their responses.
So why do the root servers give different answers, as they don't
allow recursion?
$ dig +short +norec @a.root-servers.net pl ns
DNS3.ATMAN.pl.
BILBO.NASK.ORG.pl.
DNS2.MAN.LODZ.pl.
NMS.CYF-KR.EDU.pl.
NS.RIPE.NET.
SUNIC.SUNET.SE.
DNS2.TPSA.pl.
DNS.FUW.EDU.pl.
NS3.IKP.pl.
$ dig +short +norec @f.root-servers.net pl ns
$
The error is to assume BIND 9 was wrong, not that recursion is
involved, I think.
I wonder whether the performance hit on upgrading root servers
to BIND 9 is less because of the shorter responses. Guess the
people who run F know.
Referrals should have empty answer sections AFAIK, the standard
is unambiguous, and Vixie amongst others have repeated this
claim many times.
More information about the bind-users
mailing list