copy EDNS options to resolver response

Matus UHLAR - fantomas uhlar at fantomas.sk
Sat Feb 19 18:02:17 UTC 2022


On 19.02.22 12:31, Brian J. Murrell wrote:
>I have a BIND9 server configured as a resolver for the local network to
>forward all requests to 1.1.1.1.

what's the point of this setup?
BIND can resolve by itself perfectly and you wouldn't rely on 3rd party 
service

>  Given that that 1.1.1.1 includes
>(RFC8914) EDE EDNS options in it's responses, can I configure the BIND
>resolver to forward those EDNS options in it's response to the client?

bind uses edns by default unless you turn it off. Or unless your firewall 
blocks it, in which case you can't enable it.

>While I know BIND9 doesn't yet do EDE itself, I am hoping for an option
>in BIND to just blindly copy whatever EDNS options it receives to it's
>client.

no, bind uses edns as it needs, not as client asks it to. communication with 
clients is independent from communication with servers
-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #99999: Out of error messages.


More information about the bind-users mailing list