2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-03 16:15:27 +00:00

Disable DNSSEC validation instead of enabling it with empty TAs in tests

There are many system tests where we set `dnssec-validation yes;` only
to also set `trust-anchors { };` which effectively disables the
validation.

This commit replaces this convoluted setup with just
`dnssec-validation no;`.
This commit is contained in:
Štěpán Balážik
2025-07-02 16:39:01 +02:00
parent 67916aafad
commit 01d1ad7988
117 changed files with 108 additions and 228 deletions

View File

@@ -22,11 +22,10 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
minimal-responses no; minimal-responses no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -22,10 +22,9 @@ options {
notify yes; notify yes;
disable-empty-zone 127.IN-ADDR.ARPA; disable-empty-zone 127.IN-ADDR.ARPA;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,10 +20,9 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { type primary; file "root.db"; }; zone "." { type primary; file "root.db"; };

View File

@@ -22,7 +22,7 @@ options {
listen-on-v6 { fd92:7065:b8e:ffff::7; }; listen-on-v6 { fd92:7065:b8e:ffff::7; };
recursion yes; recursion yes;
allow-recursion { any; }; allow-recursion { any; };
dnssec-validation yes; dnssec-validation no;
deny-answer-aliases { deny-answer-aliases {
"example"; "example";
} except-from { } except-from {
@@ -31,7 +31,6 @@ options {
qname-minimization disabled; // Regression test for GL #4652 qname-minimization disabled; // Regression test for GL #4652
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,12 +20,11 @@ options {
listen-on { 10.53.0.2; }; listen-on { 10.53.0.2; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
check-names response warn; check-names response warn;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -20,12 +20,11 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
check-names response fail; check-names response fail;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -21,13 +21,12 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-transfer { any; }; allow-transfer { any; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
check-names primary ignore; check-names primary ignore;
check-names secondary ignore; check-names secondary ignore;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -21,13 +21,12 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-transfer { any; }; allow-transfer { any; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
check-names master ignore; check-names master ignore;
check-names slave ignore; check-names slave ignore;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -63,13 +63,12 @@ options {
notify explicit; notify explicit;
also-notify { 10.53.0.2 port @PORT@; }; also-notify { 10.53.0.2 port @PORT@; };
statistics-file "named.stats"; statistics-file "named.stats";
dnssec-validation yes; dnssec-validation no;
tcp-initial-timeout 1200; tcp-initial-timeout 1200;
transfers-in 100; transfers-in 100;
transfers-out 100; transfers-out 100;
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;

View File

@@ -36,10 +36,9 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -36,10 +36,9 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -36,10 +36,9 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -36,10 +36,9 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -38,7 +38,7 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; }; except-from { "example.org"; };
deny-answer-aliases { "example.org"; } deny-answer-aliases { "example.org"; }
@@ -49,7 +49,6 @@ options {
nocookie-udp-size 512; nocookie-udp-size 512;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -29,7 +29,7 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; }; except-from { "example.org"; };
deny-answer-aliases { "example.org"; } deny-answer-aliases { "example.org"; }
@@ -41,7 +41,6 @@ options {
require-server-cookie yes; require-server-cookie yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -29,13 +29,12 @@ options {
listen-on { 10.53.0.4; }; listen-on { 10.53.0.4; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
cookie-algorithm siphash24; cookie-algorithm siphash24;
cookie-secret "569d36a6cc27d6bf55502183302ba352"; cookie-secret "569d36a6cc27d6bf55502183302ba352";
require-server-cookie yes; require-server-cookie yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -29,14 +29,13 @@ options {
listen-on { 10.53.0.5; }; listen-on { 10.53.0.5; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
cookie-algorithm siphash24; cookie-algorithm siphash24;
cookie-secret "569d36a6cc27d6bf55502183302ba352"; cookie-secret "569d36a6cc27d6bf55502183302ba352";
cookie-secret "6b300e27a0db46d4b046e4189790fa7d"; cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
require-server-cookie yes; require-server-cookie yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -29,13 +29,12 @@ options {
listen-on { 10.53.0.6; }; listen-on { 10.53.0.6; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
cookie-algorithm siphash24; cookie-algorithm siphash24;
cookie-secret "6b300e27a0db46d4b046e4189790fa7d"; cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
require-server-cookie yes; require-server-cookie yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -28,12 +28,11 @@ options {
pid-file "named.pid"; pid-file "named.pid";
listen-on { 10.53.0.8; }; listen-on { 10.53.0.8; };
listen-on-v6 { none; }; listen-on-v6 { none; };
dnssec-validation yes; dnssec-validation no;
rate-limit {}; rate-limit {};
require-server-cookie yes; require-server-cookie yes;
}; };
trust-anchors { };
server 10.53.0.7 { require-cookie yes; }; server 10.53.0.7 { require-cookie yes; };

View File

@@ -32,10 +32,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "database" { zone "database" {
type primary; type primary;

View File

@@ -31,7 +31,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-recursion { 10.53.0.1; }; allow-recursion { 10.53.0.1; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
dns64 2001:bbbb::/96 { dns64 2001:bbbb::/96 {
clients { any; }; clients { any; };
@@ -42,8 +42,6 @@ options {
}; };
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;
file "root.db"; file "root.db";

View File

@@ -31,7 +31,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-recursion { 10.53.0.1; }; allow-recursion { 10.53.0.1; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
dns64 2001:bbbb::/96 { dns64 2001:bbbb::/96 {
clients { any; }; clients { any; };
@@ -45,8 +45,6 @@ options {
}; };
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;
file "root.db"; file "root.db";

View File

@@ -31,11 +31,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-recursion { 10.53.0.1; }; allow-recursion { 10.53.0.1; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;
file "root.db"; file "root.db";

View File

@@ -25,7 +25,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
dns64 2001:aaaa::/96 { dns64 2001:aaaa::/96 {
clients { 10.53.0.2; }; clients { 10.53.0.2; };
@@ -60,7 +60,6 @@ options {
response-policy { zone "rpz"; }; response-policy { zone "rpz"; };
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -29,7 +29,7 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { fd92:7065:b8e:ffff::3; }; listen-on-v6 { fd92:7065:b8e:ffff::3; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
allow-recursion { any; }; allow-recursion { any; };
resolver-use-dns64 yes; resolver-use-dns64 yes;
@@ -40,7 +40,6 @@ options {
}; };
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -26,11 +26,10 @@ options {
listen-on port @PORT@ { 10.53.0.4; }; // for start.pl listen-on port @PORT@ { 10.53.0.4; }; // for start.pl
listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; }; listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
recursion no; recursion no;
}; };
trust-anchors { };
zone "." { zone "." {
type master; type master;

View File

@@ -28,11 +28,10 @@ options {
dnstap { all; }; dnstap { all; };
send-cookie no; send-cookie no;
require-server-cookie no; require-server-cookie no;
dnssec-validation yes; dnssec-validation no;
qname-minimization disabled; qname-minimization disabled;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -28,11 +28,10 @@ options {
dnstap { all; }; dnstap { all; };
send-cookie no; send-cookie no;
require-server-cookie no; require-server-cookie no;
dnssec-validation yes; dnssec-validation no;
qname-minimization disabled; qname-minimization disabled;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -29,11 +29,10 @@ options {
send-cookie no; send-cookie no;
require-server-cookie no; require-server-cookie no;
minimal-responses no; minimal-responses no;
dnssec-validation yes; dnssec-validation no;
qname-minimization disabled; qname-minimization disabled;
}; };
trust-anchors { };
server 10.53.0.1 { tcp-only yes; }; server 10.53.0.1 { tcp-only yes; };

View File

@@ -28,11 +28,10 @@ options {
dnstap { all; }; dnstap { all; };
send-cookie no; send-cookie no;
require-server-cookie no; require-server-cookie no;
dnssec-validation yes; dnssec-validation no;
qname-minimization disabled; qname-minimization disabled;
}; };
trust-anchors { };
server 10.53.0.1 { tcp-only yes; }; server 10.53.0.1 { tcp-only yes; };

View File

@@ -94,14 +94,13 @@ options {
notify explicit; notify explicit;
also-notify { 10.53.0.2 port @PORT@; }; also-notify { 10.53.0.2 port @PORT@; };
statistics-file "named.stats"; statistics-file "named.stats";
dnssec-validation yes; dnssec-validation no;
tcp-initial-timeout 1200; tcp-initial-timeout 1200;
transfers-in 100; transfers-in 100;
transfers-out 100; transfers-out 100;
max-records-per-type 0; max-records-per-type 0;
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;

View File

@@ -51,13 +51,12 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
transfers-in 100; transfers-in 100;
transfers-out 100; transfers-out 100;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -43,11 +43,10 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -51,11 +51,10 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -39,11 +39,10 @@ options {
notify no; notify no;
ixfr-from-differences yes; ixfr-from-differences yes;
check-integrity no; check-integrity no;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -23,12 +23,11 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
fetches-per-server 400; fetches-per-server 400;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -21,12 +21,11 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
fetches-per-zone 40; fetches-per-zone 40;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -21,12 +21,11 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
recursive-clients 400; recursive-clients 400;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -21,13 +21,12 @@ options {
listen-on { 10.53.0.5; }; listen-on { 10.53.0.5; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
clients-per-query 5; clients-per-query 5;
max-clients-per-query 10; max-clients-per-query 10;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -21,7 +21,7 @@ options {
listen-on { 10.53.0.5; }; listen-on { 10.53.0.5; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
stale-answer-enable yes; stale-answer-enable yes;
stale-cache-enable yes; stale-cache-enable yes;
@@ -30,7 +30,6 @@ options {
max-clients-per-query 10; max-clients-per-query 10;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -21,7 +21,7 @@ options {
listen-on { 10.53.0.5; }; listen-on { 10.53.0.5; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
stale-answer-enable yes; stale-answer-enable yes;
stale-cache-enable yes; stale-cache-enable yes;
@@ -31,7 +31,6 @@ options {
max-clients-per-query 5; max-clients-per-query 5;
}; };
trust-anchors { };
server 10.53.0.4 { server 10.53.0.4 {
edns no; edns no;

View File

@@ -20,12 +20,11 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { fd92:7065:b8e:ffff::1; }; listen-on-v6 { fd92:7065:b8e:ffff::1; };
recursion no; recursion no;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
minimal-responses no; minimal-responses no;
}; };
trust-anchors { };
acl filterees { 10.53.0.1; }; acl filterees { 10.53.0.1; };

View File

@@ -20,12 +20,11 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { fd92:7065:b8e:ffff::1; }; listen-on-v6 { fd92:7065:b8e:ffff::1; };
recursion no; recursion no;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
minimal-responses no; minimal-responses no;
}; };
trust-anchors { };
plugin query "@TOP_BUILDDIR@/filter-aaaa.so" { plugin query "@TOP_BUILDDIR@/filter-aaaa.so" {
filter-aaaa-on-v6 yes; filter-aaaa-on-v6 yes;

View File

@@ -24,10 +24,9 @@ options {
listen-on-v6 { fd92:7065:b8e:ffff::3; }; listen-on-v6 { fd92:7065:b8e:ffff::3; };
forwarders { fd92:7065:b8e:ffff::2; }; forwarders { fd92:7065:b8e:ffff::2; };
forward first; forward first;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -23,11 +23,10 @@ options {
listen-on { 10.53.0.4; }; listen-on { 10.53.0.4; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
minimal-responses yes; minimal-responses yes;
}; };
trust-anchors { };
statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; }; statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; };

View File

@@ -22,10 +22,9 @@ options {
forward only; forward only;
forwarders { 10.53.0.4; }; forwarders { 10.53.0.4; };
deny-answer-aliases { "rebind"; }; deny-answer-aliases { "rebind"; };
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -21,10 +21,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
forwarders { 10.53.0.4; }; forwarders { 10.53.0.4; };
forward first; forward first;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -21,10 +21,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
forwarders { 10.53.0.2; }; // returns referrals forwarders { 10.53.0.2; }; // returns referrals
forward first; forward first;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -19,12 +19,11 @@ options {
pid-file "named.pid"; pid-file "named.pid";
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
recursion no; recursion no;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
minimal-responses no; minimal-responses no;
}; };
trust-anchors { };
plugin query "@TOP_BUILDDIR@/testlib-driver-async.so"; plugin query "@TOP_BUILDDIR@/testlib-driver-async.so";

View File

@@ -20,10 +20,9 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -24,10 +24,9 @@ options {
allow-transfer { any; }; allow-transfer { any; };
recursion no; recursion no;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -28,11 +28,10 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
notify no; notify no;
dnssec-validation yes; dnssec-validation no;
allow-query { allowed; }; allow-query { allowed; };
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -28,11 +28,10 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
notify no; notify no;
dnssec-validation yes; dnssec-validation no;
allow-query { allowed; }; allow-query { allowed; };
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -23,10 +23,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
notify no; notify no;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -23,10 +23,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion no; recursion no;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,11 +20,10 @@ options {
listen-on { 10.53.0.2; }; listen-on { 10.53.0.2; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,11 +20,10 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -21,11 +21,10 @@ options {
listen-on { 10.53.0.4; }; listen-on { 10.53.0.4; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -50,11 +50,10 @@ options {
recursion no; recursion no;
notify explicit; notify explicit;
statistics-file "named.stats"; statistics-file "named.stats";
dnssec-validation yes; dnssec-validation no;
tcp-initial-timeout 1200; tcp-initial-timeout 1200;
}; };
trust-anchors { };
zone "example0" { zone "example0" {
type primary; type primary;

View File

@@ -45,11 +45,10 @@ options {
recursion no; recursion no;
notify explicit; notify explicit;
statistics-file "named.stats"; statistics-file "named.stats";
dnssec-validation yes; dnssec-validation no;
tcp-initial-timeout 1200; tcp-initial-timeout 1200;
}; };
trust-anchors { };
zone "example" { zone "example" {
type primary; type primary;

View File

@@ -25,10 +25,9 @@ options {
max-recursion-queries 50; max-recursion-queries 50;
max-recursion-depth 12; max-recursion-depth 12;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -24,10 +24,9 @@ options {
qname-minimization disabled; qname-minimization disabled;
max-recursion-depth 5; max-recursion-depth 5;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -25,10 +25,9 @@ options {
max-recursion-depth 100; max-recursion-depth 100;
max-recursion-queries 50; max-recursion-queries 50;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -25,10 +25,9 @@ options {
max-recursion-depth 100; max-recursion-depth 100;
max-recursion-queries 40; max-recursion-queries 40;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -24,12 +24,11 @@ options {
qname-minimization disabled; qname-minimization disabled;
max-recursion-depth 12; max-recursion-depth 12;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
max-types-per-name 10; max-types-per-name 10;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -24,12 +24,11 @@ options {
qname-minimization disabled; qname-minimization disabled;
max-recursion-depth 12; max-recursion-depth 12;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
max-records-per-type 0; max-records-per-type 0;
max-types-per-name 0; max-types-per-name 0;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -25,10 +25,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-recursion { 10.53.0.1; }; allow-recursion { 10.53.0.1; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;

View File

@@ -27,11 +27,10 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -23,10 +23,9 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
allow-recursion { 10.53.0.3; }; allow-recursion { 10.53.0.3; };
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." { zone "." {
type primary; type primary;

View File

@@ -27,11 +27,10 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
notify yes; notify yes;
dnssec-validation yes; dnssec-validation no;
nxdomain-redirect "redirect"; nxdomain-redirect "redirect";
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,7 +20,7 @@ options {
listen-on { 10.53.0.1; }; listen-on { 10.53.0.1; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; }; except-from { "example.org"; };
deny-answer-aliases { "example.org"; } deny-answer-aliases { "example.org"; }
@@ -34,7 +34,6 @@ options {
request-zoneversion yes; request-zoneversion yes;
}; };
trust-anchors { };
server 10.53.0.3 { server 10.53.0.3 {
tcp-only yes; tcp-only yes;

View File

@@ -22,7 +22,7 @@ options {
listen-on { 10.53.0.7; }; listen-on { 10.53.0.7; };
listen-on-v6 { fd92:7065:b8e:ffff::7; }; listen-on-v6 { fd92:7065:b8e:ffff::7; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
empty-zones-enable yes; empty-zones-enable yes;
disable-empty-zone 20.172.in-addr.arpa; disable-empty-zone 20.172.in-addr.arpa;
/* /*
@@ -34,7 +34,6 @@ options {
edns-udp-size 4096; edns-udp-size 4096;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -22,7 +22,7 @@ options {
listen-on { 10.53.0.7; }; listen-on { 10.53.0.7; };
listen-on-v6 { fd92:7065:b8e:ffff::7; }; listen-on-v6 { fd92:7065:b8e:ffff::7; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
empty-zones-enable yes; empty-zones-enable yes;
disable-empty-zone 20.172.in-addr.arpa; disable-empty-zone 20.172.in-addr.arpa;
/* /*
@@ -34,7 +34,6 @@ options {
edns-udp-size 4096; edns-udp-size 4096;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,12 +20,11 @@ options {
listen-on-v6 { fd92:7065:b8e:ffff::9; }; listen-on-v6 { fd92:7065:b8e:ffff::9; };
recursion yes; recursion yes;
recursive-clients 0; // regression test for [GL #4987] recursive-clients 0; // regression test for [GL #4987]
dnssec-validation yes; dnssec-validation no;
dual-stack-servers { fd92:7065:b8e:ffff::7; }; dual-stack-servers { fd92:7065:b8e:ffff::7; };
qname-minimization off; qname-minimization off;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -17,10 +17,9 @@ options {
listen-on { 10.53.0.4; }; listen-on { 10.53.0.4; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
view normal { view normal {
match-clients { any; }; match-clients { any; };

View File

@@ -29,7 +29,7 @@ options {
notify yes; notify yes;
minimal-responses no; minimal-responses no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
min-refresh-time 1; min-refresh-time 1;
min-retry-time 1; min-retry-time 1;
@@ -64,7 +64,6 @@ options {
notify-delay 0; notify-delay 0;
}; };
trust-anchors { };
logging { category rpz { default_debug; }; }; logging { category rpz { default_debug; }; };

View File

@@ -29,7 +29,7 @@ options {
notify yes; notify yes;
minimal-responses no; minimal-responses no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
response-policy { response-policy {
zone "manual-update-rpz"; zone "manual-update-rpz";
@@ -46,7 +46,6 @@ options {
notify-delay 0; notify-delay 0;
}; };
trust-anchors { };
logging { category rpz { default_debug; }; }; logging { category rpz { default_debug; }; };

View File

@@ -29,7 +29,7 @@ options {
notify yes; notify yes;
minimal-responses no; minimal-responses no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
dns64-server "example.localdomain."; dns64-server "example.localdomain.";
dns64 64:ff9b::/96 { }; dns64 64:ff9b::/96 { };
response-policy { response-policy {
@@ -40,7 +40,6 @@ options {
notify-delay 0; notify-delay 0;
}; };
trust-anchors { };
logging { category rpz { default_debug; }; }; logging { category rpz { default_debug; }; };

View File

@@ -33,5 +33,4 @@ view "recursive" {
zone "clientip2" { type primary; file "db.clientip2"; }; zone "clientip2" { type primary; file "db.clientip2"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -33,5 +33,4 @@ view "recursive" {
zone "clientip21" { type primary; file "db.clientip21"; }; zone "clientip21" { type primary; file "db.clientip21"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -23,11 +23,10 @@ options {
listen-on { 10.53.0.2; }; listen-on { 10.53.0.2; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
querylog yes; querylog yes;
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -21,5 +21,4 @@ view "recursive" {
}; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -35,5 +35,4 @@ view "recursive" {
zone "log3" { type primary; file "db.log3"; }; zone "log3" { type primary; file "db.log3"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -157,5 +157,4 @@ view "recursive" {
zone "max64" { type primary; file "db.max64.local"; }; zone "max64" { type primary; file "db.max64.local"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -31,5 +31,4 @@ view "recursive" {
zone "wildcard1" { type primary; file "db.wildcard1"; }; zone "wildcard1" { type primary; file "db.wildcard1"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -33,5 +33,4 @@ view "recursive" {
zone "wildcard2b" { type primary; file "db.wildcard2b"; }; zone "wildcard2b" { type primary; file "db.wildcard2b"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -31,5 +31,4 @@ view "recursive" {
zone "wildcard3" { type primary; file "db.wildcard3"; }; zone "wildcard3" { type primary; file "db.wildcard3"; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -33,5 +33,4 @@ view "recursive" {
}; };
recursion yes; recursion yes;
dnssec-validation yes;
}; };

View File

@@ -27,14 +27,13 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
response-policy { zone "policy"; } response-policy { zone "policy"; }
qname-wait-recurse yes qname-wait-recurse yes
nsip-enable yes nsip-enable yes
nsdname-enable yes; nsdname-enable yes;
}; };
trust-anchors { };
zone "policy" { type primary; file "policy.db"; }; zone "policy" { type primary; file "policy.db"; };

View File

@@ -26,14 +26,13 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
response-policy { zone "policy"; } nsip-wait-recurse no response-policy { zone "policy"; } nsip-wait-recurse no
qname-wait-recurse yes qname-wait-recurse yes
nsip-enable yes nsip-enable yes
nsdname-enable yes; nsdname-enable yes;
}; };
trust-anchors { };
zone "policy" { type primary; file "policy.db"; }; zone "policy" { type primary; file "policy.db"; };

View File

@@ -26,12 +26,11 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
response-policy { zone "policy"; } nsdname-wait-recurse no response-policy { zone "policy"; } nsdname-wait-recurse no
nsdname-enable yes; nsdname-enable yes;
}; };
trust-anchors { };
zone "policy" { type primary; file "policy.db"; }; zone "policy" { type primary; file "policy.db"; };

View File

@@ -22,9 +22,8 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
notify no; notify no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
}; };
trust-anchors { };
zone "." {type primary; file "root.db";}; zone "." {type primary; file "root.db";};

View File

@@ -23,7 +23,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
notify no; notify no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
rate-limit { rate-limit {
responses-per-second 2; responses-per-second 2;
@@ -36,7 +36,6 @@ options {
}; };
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -22,7 +22,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
notify no; notify no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
// check that all of the options are parsed without limiting anything // check that all of the options are parsed without limiting anything
rate-limit { rate-limit {
@@ -43,7 +43,6 @@ options {
}; };
trust-anchors { };
zone "." { type hint; file "hints"; }; zone "." { type hint; file "hints"; };

View File

@@ -23,7 +23,7 @@ options {
listen-on-v6 { none; }; listen-on-v6 { none; };
notify no; notify no;
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
max-udp-size 4096; max-udp-size 4096;
rate-limit { rate-limit {
@@ -38,7 +38,6 @@ options {
}; };
}; };
trust-anchors { };
key rndc_key { key rndc_key {
secret "1234abcd8765"; secret "1234abcd8765";

View File

@@ -20,7 +20,7 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
rrset-order { rrset-order {
name "random.example" order random; name "random.example" order random;
@@ -31,7 +31,6 @@ options {
}; };
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -20,7 +20,7 @@ options {
listen-on { 10.53.0.4; }; listen-on { 10.53.0.4; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
rrset-order { rrset-order {
class IN type A name "host.example.com" order random; class IN type A name "host.example.com" order random;
@@ -28,7 +28,6 @@ options {
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -20,11 +20,10 @@ options {
listen-on { 10.53.0.5; }; listen-on { 10.53.0.5; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
zone "." { zone "." {
type hint; type hint;

View File

@@ -20,11 +20,10 @@ options {
listen-on { 10.53.0.2; }; listen-on { 10.53.0.2; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
}; };
trust-anchors { };
include "statistics-channels.conf"; include "statistics-channels.conf";

View File

@@ -21,13 +21,12 @@ options {
listen-on { 10.53.0.3; }; listen-on { 10.53.0.3; };
listen-on-v6 { none; }; listen-on-v6 { none; };
recursion yes; recursion yes;
dnssec-validation yes; dnssec-validation no;
notify yes; notify yes;
qname-minimization disabled; qname-minimization disabled;
zone-statistics yes; zone-statistics yes;
}; };
trust-anchors { };
include "statistics-channels.conf"; include "statistics-channels.conf";

Some files were not shown because too many files have changed in this diff Show More