8 Čec
2018
8 Čec
'18
2:27
Hello,
When Cache prefilling added from 2.3.0 is enabled, the following error occurs.
https://knot-resolver.readthedocs.io/en/stable/modules.html#cache-prefilling
/etc/knot-resolver # kresd -V
Knot DNS Resolver, version 2.4.0
[prefill] downloading root zone...
[prefill] saving root zone...
[ 0][zimport] [zscanner] started; zone file `root.zone`
[zscanner] line: 1: parse error; code: -986 ('owner is invalid')
Segmentation fault (core dumped)
If you check the contents of the downloaded file, it seems that
something different file is being downloaded.
/etc/knot-resolver # ls -l
total 8704
-rw------- 1 root root 12533760 Jul 8 00:24 core.64
-rw-r----- 1 root root 3221225472 Jul 8 00:23 data.mdb
-rw-r--r-- 1 1001 1001 2944 Jul 8 00:23 kresd.conf
-rw-r----- 1 root root 8192 Jul 8 00:23 lock.mdb
-rw-r--r-- 1 root root 832 Jul 7 07:35 root.keys
-rw-r--r-- 1 root root 249 Jul 8 00:24 root.zone
drwxr-x--- 2 root root 4096 Jun 13 12:56 tty
/etc/knot-resolver # cat root.zone
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a
href="https://www.internic.net/domain/root.zone">here</a>…
</body></html>
Is this supposed behavior?
Best regards.
8 Čec
8 Čec
8:56
New subject: can not download a normal root.zone with Cache prefilling
On 07/08/2018 02:27 AM, Yoshi Horigome wrote:
Is this supposed behavior?
What's your configuration? I didn't try now, but you are getting a http
redirect to https://www.internic.net/domain/root.zone and our
documentation suggests to use that exact URL.
Still, I expect it would be nice to make the implementation follow
redirects anyway...
--Vladimir
10:56
New subject: can not download a normal root.zone with Cache prefilling
Hello Vladimir-san,
I set config as follows.
-- Load Useful modules
modules = {
'policy', -- Block queries to local zones/bad sites
'view', -- Views for certain clients
'hints > iterate', -- Hints AFTER iterate
'stats', -- Track internal statistics
'priming', -- Initializing a DNS Resolver with Priming Queries implemented
according.
'detect_time_skew', -- System time skew detector
'detect_time_jump', -- Detect discontinuous jumps in the system time
'daf',
'version',
predict = {
window = 180, -- 180 minutes sampling window
period = 24*(60/15) -- track last 24 hours
},
'bogus_log',
}
-- Cache prefilling
modules.load('prefill')
prefill.config({
['.'] = {
url = 'https://www.internic.net/domain/root.zone',
ca_file = '/etc/pki/tls/certs/ca-bundle.crt',
interval = 86400 -- seconds
}
})
modules.list() -- Check module call order
For all contents, please check the following.
https://pastebin.com/STm1kf9c
(https://link.getmailspring.com/link/1531037373.local-3b187bd3-da49-v1.2.2-9…)
When the verbose option is enabled, the following message is output and stopped.
[29308][iter] '.' type 'NS' id was
assigned, parent id 0
[29308][plan] plan '.' type 'DNSKEY'
[57247][iter] '.' type 'DNSKEY' id was assigned, parent id 29308
[ ][nsre] score 1 for 101.101.101.101; cached RTT: -1
[ ][nsre] score 1 for 1.1.1.1; cached RTT: -1
[ ][nsre] score 1 for 1.0.0.1; cached RTT: -1
[ ][nsre] score 1 for 2606:4700:4700::1111; cached RTT: -1
[57247][resl] => querying: '101.101.101.101' score: 1 zone cut: '.'
qname: '.' qtype: 'DNSKEY' proto: 'udp'
[ 0][plan] plan '.' type 'NS'
[ 3129][iter] '.' type 'NS' id was assigned, parent id 0
[ ][nsre] score 1 for 101.101.101.101; cached RTT: -1
[ ][nsre] score 1 for 1.1.1.1; cached RTT: -1
[ ][nsre] score 1 for 1.0.0.1; cached RTT: -1
[ ][nsre] score 1 for 2606:4700:4700::1111; cached RTT: -1
[ 3129][resl] => querying: '101.101.101.101' score: 1 zone cut: '.'
qname: '.' qtype: 'NS' proto: 'udp'
[prefill] downloading root zone...
[prefill] saving root zone...
[ 0][zimport] [zscanner] started; zone file `root.zone`
[zscanner] line: 1: parse error; code: -986 ('owner is invalid')
Segmentation fault (core dumped)
Is it necessary to check dump?
Best regards.
On 7月 8 2018, at 3:56 午後, Vladimír Čunát <vladimir.cunat(a)nic.cz> wrote:
On 07/08/2018 02:27 AM, Yoshi Horigome wrote:
Is this supposed behavior?
What's your configuration? I didn't try now, but you are getting a http redirect
to https://www.internic.net/domain/root.zone
(https://link.getmailspring.com/link/1531037373.local-3b187bd3-da49-v1.2.2-9…)
and our documentation suggests to use that exact URL.
Still, I expect it would be nice to make the implementation follow redirects anyway...
--Vladimir
11:02
New subject: can not download a normal root.zone with Cache prefilling
On 07/08/2018 10:56 AM, Yoshihito Horigome wrote:
Is it necessary to check dump?
Probably not. Still, it's weird that it just works for me with your
configuration (tested 2.4.0 but exact version probably doesn't matter
here). I'm getting no redirect on that URL from my location.
--Vladimir
11:07
New subject: can not download a normal root.zone with Cache prefilling
Hi Vladimir-san
Probably not. Still, it's weird that it just works
for me with your configuration (tested 2.4.0 but exact version probably doesn't matter
here). I'm getting no redirect on that URL from my location.
hmm...
I am trying to operate this setting as a docker container on Alpine Linux base, is it
related?
Best regards.
On 7月 8 2018, at 6:02 午後, Vladimír Čunát <vladimir.cunat(a)nic.cz> wrote:
>
>
> On 07/08/2018 10:56 AM, Yoshihito Horigome wrote:
> > Is it necessary to check dump?
>
Probably not. Still, it's weird that it just works
for me with your configuration (tested 2.4.0 but exact version probably doesn't matter
here). I'm getting no redirect on that URL from my location.
>
> --Vladimir
13 Čec
13 Čec
7:30
New subject: can not download a normal root.zone with Cache prefilling
Hello Vladimír-san,
I confirmed this matter with the development side of the luasec module.
https://github.com/brunoos/luasec/issues/117
Apparently, there seems to be a problem that you can not understand
the request header of "www.internic.net" correctly.
There seems to be PR corresponding to this, but merge has not been done yet.
As far as Vladimír-san confirms, it is said that it operates normally,
but I do not know the difference in behavior around here.
Best regards.
2018年7月8日(日) 18:07 Yoshihito Horigome <kometch(a)gmail.com>om>:
Hi Vladimir-san
Probably not. Still, it's weird that it just works for me with your configuration
(tested 2.4.0 but exact version probably doesn't matter here). I'm getting no
redirect on that URL from my location.
hmm...
I am trying to operate this setting as a docker container on Alpine Linux base, is it
related?
Best regards.
On 7月 8 2018, at 6:02 午後, Vladimír Čunát <vladimir.cunat(a)nic.cz> wrote:
On 07/08/2018 10:56 AM, Yoshihito Horigome wrote:
Is it necessary to check dump?
Probably not. Still, it's weird that it just works for me with your configuration
(tested 2.4.0 but exact version probably doesn't matter here). I'm getting no
redirect on that URL from my location.
--Vladimir
2120
days inactive
2125
days old
knot-resolver-users@lists.nic.cz
5 comments
3 participants
participants (3)
-
Vladimír Čunát -
Yoshi Horigome -
Yoshihito Horigome