diff options
author | Lennart Poettering <lennart@poettering.net> | 2016-01-08 18:50:41 +0100 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2016-01-11 19:40:00 +0100 |
commit | 6bb2c08597c999c429e889cd2403b2fef5f3e1a0 (patch) | |
tree | f424703e1ce9b959b0a38ee904b4371e6b59615c /rules | |
parent | ef9fb66c0b292d3543c16bfce99ad677bef0f401 (diff) |
resolved: rework server feature level logic
This changes the DnsServer logic to count failed UDP and TCP failures separately. This is useful so that we don't end
up downgrading the feature level from one UDP level to a lower UDP level just because a TCP connection we did because
of a TC response failed.
This also adds accounting of truncated packets. If we detect incoming truncated packets, and count too many failed TCP
connections (which is the normal fall back if we get a trucnated UDP packet) we downgrade the feature level, given that
the responses at the current levels don't get through, and we somehow need to make sure they become smaller, which they
will do if we don't request DNSSEC or EDNS support.
This makes resolved work much better with crappy DNS servers that do not implement TCP and only limited UDP packet
sizes, but otherwise support DNSSEC RRs. They end up choking on the generally larger DNSSEC RRs and there's no way to
retrieve the full data.
Diffstat (limited to 'rules')
0 files changed, 0 insertions, 0 deletions