New Feature: EDNS settings #127
MichaCo
started this conversation in
Show and tell
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Up to version 1.2.0, EDNS was always enabled without an option to opt out.
EDNS is used to inform the DnsServer that the client can handle bigger UDP buffers then the default maximum of 512 bytes.
This information is sent via an additional OPT record, and the response must include an "answer" OPT record which contains the buffer size the server is willing to handle.
The OPT record can also request DNSSEC records by setting the Do bit. DnsClient didn't do that so far.
Both things can now be changed and disabled or enabled via configuration!
New properties on the configuration object which gets passed into
LookupClient
orQuery
overloads:ExtendedDnsBufferSize
The default value is 4096 and you usually don't have to change that.
But you can. Setting this property to <= 512 (and leaving RequestDnsSecRecords=false) will disable EDNS and will not send an OPT record.
RequestDnsSecRecords
Is disabled per default. If set to
true
, the Do bit will be set and the response might contain DNSSEC records.DnsClient does not validate those records, but if someone wants to, the records and the raw bytes will be available in the response.
Enabled EDNS Example
(These are the default settings which do not have to be set/changed)
Disabled EDNS Example
Both settings can enable EDNS, so both have to be set to disable it completely.
Beta Was this translation helpful? Give feedback.
All reactions