I enabled trace with sudo rec_control trace-regex "app\.$" and did
lookup "dig app ns @localhost".
What I understand from the trace output is that the recursor has the
the NS records in the cache but then it gets the DNSSEC Keys from the
NS servers and validates the records.
--
Regards
Jaha
On Tue, Dec 21, 2021 at 01:06:03PM +0500, Jahanzeb Arshad wrote:
> Thanks for the clarity.
>
> I tried to resolve some top level domains NS and still getting high
> latency.
>
>
> $ dig ae ns @localhost
>
> ;; omitting
>
> ;; ANSWER SECTION:
> ae. 3600 IN NS ns2.aedns.ae.
> ae. 3600 IN NS ns
Please use the rec_control trace-regex command to see what the recursor
actually does.
I guess it is verifying the data from the delegation in the
authoritative zone.
I have not yet had the time to test the zoneToCache feature, I'm
currently using https://github.com/miesi/nsrrsetd to keep the ca
Thanks for the clarity.
I tried to resolve some top level domains NS and still getting high
latency.
$ dig ae ns @localhost
;; omitting
;; ANSWER SECTION:
ae. 3600 IN NS ns2.aedns.ae.
ae. 3600 IN NS ns4.apnic.net.
ae. 3600 IN NS nsext-pch.aedns.ae.
ae. 3600 IN NS ns1.aedns.ae.
;; Query time:
On Tue, Dec 21, 2021 at 10:28:53AM +0500, Jahanzeb Arshad via Pdns-users wrote:
> Greeting,
>
> I am having trouble in getting zonetocache working for the root zone. I
> am using PowerDNS Recursor 4.6.0.
>
> I have following in my /etc/powerdns/recursor.lua configuration:
>
> dofile("/usr/share
Be aware that "b.nic.aaa A" is not part of the root zone. It's only a glue
record.
Am 21. Dezember 2021 06:28:53 MEZ schrieb Jahanzeb Arshad via Pdns-users
:
>Greeting,
>
>I am having trouble in getting zonetocache working for the root zone. I
>am using PowerDNS Recursor 4.6.0.
>
>I have followi
Greeting,
I am having trouble in getting zonetocache working for the root zone. I
am using PowerDNS Recursor 4.6.0.
I have following in my /etc/powerdns/recursor.lua configuration:
dofile("/usr/share/pdns-recursor/lua-config/rootkeys.lua")
zoneToCache(".", "url", "https://www.internic.net/domain
