IETF Logo Mail Archive

Re: [DNSOP] Caching of negative zone (non-authoritative) responses

"Michael J. Sheldon" <msheldon@godaddy.com> Mon, 08 July 2019 18:03 UTC

Return-Path: <msheldon@godaddy.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D28331205F6 for <dnsop@ietfa.amsl.com>; Mon, 8 Jul 2019 11:03:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=secureservernet.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BUxTGzvTxKAZ for <dnsop@ietfa.amsl.com>; Mon, 8 Jul 2019 11:03:32 -0700 (PDT)
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0709.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe41::709]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7665812047C for <dnsop@ietf.org>; Mon, 8 Jul 2019 11:02:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=secureservernet.onmicrosoft.com; s=selector2-secureservernet-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wzI9nxwkzybAMrwBP68Hw5vgQ4KerDkRJ7+2ttD3lF4=; b=jQnq/+eskFIZBBA9fyOIQWtkfNWM881nNmDthB9giYRZMfpdd1SD/wJcqmgLnBQMyJoUPp0+coQk71VOFUuiWrP8Hd7nFA+H1Ns3bKtIoy5uSs5c2dEAb1wQgkpcbgmi4rHaPqbkAD7gnDP+nc2iMykT/0/6UfRjAfJ5xa0+ALc=
Received: from BYAPR02MB5190.namprd02.prod.outlook.com (20.177.124.15) by BYAPR02MB4214.namprd02.prod.outlook.com (20.176.249.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2032.20; Mon, 8 Jul 2019 18:02:32 +0000
Received: from BYAPR02MB5190.namprd02.prod.outlook.com ([fe80::8daf:4d97:2db7:fb78]) by BYAPR02MB5190.namprd02.prod.outlook.com ([fe80::8daf:4d97:2db7:fb78%4]) with mapi id 15.20.2052.019; Mon, 8 Jul 2019 18:02:32 +0000
From: "Michael J. Sheldon" <msheldon@godaddy.com>
To: Paul Vixie <paul@redbarn.org>, "dnsop@ietf.org" <dnsop@ietf.org>
Thread-Topic: [DNSOP] Caching of negative zone (non-authoritative) responses
Thread-Index: AQHVNawfF99VYUuw4EOfm7VOQeF0BKbBAa+AgAABlgA=
Date: Mon, 08 Jul 2019 18:02:32 +0000
Message-ID: <21eb2ea6-88be-54c5-eee0-2d1fd1b1d424@godaddy.com>
References: <BYAPR02MB51900835E25A720BB9BF23C8DBF60@BYAPR02MB5190.namprd02.prod.outlook.com> <2604325.6lOYsMJmL1@linux-9daj>
In-Reply-To: <2604325.6lOYsMJmL1@linux-9daj>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [2600:8800:2800:33c:ea46:e288:4f40:cc56]
x-clientproxiedby: BYAPR11CA0104.namprd11.prod.outlook.com (2603:10b6:a03:f4::45) To BYAPR02MB5190.namprd02.prod.outlook.com (2603:10b6:a03:68::15)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=msheldon@godaddy.com;
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: d322caf0-5f70-4e45-31be-08d703ce72df
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600148)(711020)(4605104)(1401327)(4618075)(2017052603328)(7193020); SRVR:BYAPR02MB4214;
x-ms-traffictypediagnostic: BYAPR02MB4214:
x-microsoft-antispam-prvs: <BYAPR02MB42146806D78E1422F5118D26DBF60@BYAPR02MB4214.namprd02.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:4303;
x-forefront-prvs: 00922518D8
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(346002)(376002)(366004)(396003)(39860400002)(136003)(199004)(189003)(186003)(4744005)(71200400001)(71190400001)(2501003)(81156014)(36756003)(81166006)(446003)(2906002)(6512007)(8936002)(486006)(8676002)(11346002)(6436002)(6486002)(476003)(2616005)(99286004)(6506007)(110136005)(53546011)(7736002)(316002)(76176011)(386003)(14454004)(478600001)(52116002)(102836004)(66446008)(64756008)(305945005)(25786009)(86362001)(66556008)(53936002)(31696002)(6246003)(66476007)(229853002)(256004)(31686004)(6116002)(68736007)(66946007)(73956011)(5660300002)(46003); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR02MB4214; H:BYAPR02MB5190.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: godaddy.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: TQ4n+xgUophVt9X6eiwbD5LfAkZCKnV2zjQvAA9uFEh9IiMdDm1WzSUcH3Tgs14ZoCKDyoNg/w95A3K9hHveibDVrCKCIQyXRsngDSlgrGCnL4QdM7mcFzJaEeI8Y9mWb8JaWrCVM4qyPrUeQ0dpVWfnenqtOcmo9YimdaajleMDt/jpApDsvZm8aWw08bvAdyvyshrDP5jkwX50EJJ5eGRJyascXu6PPM0eNJof1PI/93uQghxtJsV21P3S5a3tbEMBU0hoLQtKy/bSoPV0DQD2QEbpH2MBp1e1rjGMXuBLetL1rmeFmb2VtblkNUHFANYStiTeNSw42iqheQFMxs3H0jHYX4O3ygPQGhHTkV4yMXEToyQDxEn+knY9GMfuJTwaO8JC7s6goWpSIJfDn/aMS/BI0xTFuHpUr0EGkic=
Content-Type: text/plain; charset="utf-8"
Content-ID: <5C463F7313423642A5EB890988EC7CA7@namprd02.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: godaddy.com
X-MS-Exchange-CrossTenant-Network-Message-Id: d322caf0-5f70-4e45-31be-08d703ce72df
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2019 18:02:32.3139 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d5f1622b-14a3-45a6-b069-003f8dc4851f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: msheldon@godaddy.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR02MB4214
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/YU0_jOq3BuFOdPIfnX4L6l9ciY0>
Subject: Re: [DNSOP] Caching of negative zone (non-authoritative) responses
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jul 2019 18:03:36 -0000


On 7/8/19 10:56 AM, Paul Vixie wrote:
> i've always sent back SERVFAIL when the zone isn't loaded, on either a primary
> or secondary (authoritative, that is) server. and i cache SERVFAIL on the
> recursive/iterative side with a holddown timer equal to the negative TTL
> interval (SOA.MINIMUM).
> 
> but i didn't realize that the standard doesn't say to do this, until i read
> the above.
> 
> --
> Paul
> 
> 

BIND returns REFUSED, so that's what I've always used, for maximum
consistency/compatibility.

What SOA.minimum are you returning? Which SOA? And on what record would
it be returned? The issue is that there is no matching zone.

-- 
Michael Sheldon
Dev-DNS Services
GoDaddy.com

v2.23.0 | Report a Bug | By Email