LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 12-19-2015, 11:56 AM   #1
Tarikc
Member
 
Registered: May 2009
Distribution: CentOS, RedHat, Ubuntu
Posts: 68

Rep: Reputation: 4
BIND EDNS0-client-subnet support


Hi,

I'm trying to have EDNS implemented on my network, I installed BIND 9.10.3-P2 which is the latest version these days.

I got it working (I think), but I'm missing something here:

When I dig using 8.8.8.8 I get:

; CLIENT-SUBNET: 5.149.0.0/24/0

Code:
; <<>> DiG 9.10.3-P2 <<>> facebook.com @8.8.8.8 +subnet=5.149.0.0/24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22686
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; CLIENT-SUBNET: 5.149.0.0/24/0
;; QUESTION SECTION:
;facebook.com.			IN	A

;; ANSWER SECTION:
facebook.com.		279	IN	A	173.252.120.68

;; Query time: 40 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Dec 19 12:51:56 EST 2015
;; MSG SIZE  rcvd: 68
But when I dig using my new DNS, I get EDNS: version: 0, but no client-subnet.

Code:
; <<>> DiG 9.10.3-P2 <<>> facebook.com +subnet=5.149.0.0/24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28375
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 5

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;facebook.com.			IN	A

;; ANSWER SECTION:
facebook.com.		300	IN	A	173.252.120.68

;; AUTHORITY SECTION:
facebook.com.		155472	IN	NS	a.ns.facebook.com.
facebook.com.		155472	IN	NS	b.ns.facebook.com.

;; ADDITIONAL SECTION:
a.ns.facebook.com.	155472	IN	A	69.171.239.12
a.ns.facebook.com.	155472	IN	AAAA	2a03:2880:fffe:c:face:b00c:0:35
b.ns.facebook.com.	155472	IN	A	69.171.255.12
b.ns.facebook.com.	155472	IN	AAAA	2a03:2880:ffff:c:face:b00c:0:35

;; Query time: 292 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Dec 19 12:53:19 EST 2015
;; MSG SIZE  rcvd: 180
I tried to dig almost everywhere on the internet, and still digging, but nothing so far.

What am I missing here? can someone direct me somewhere helpful?

The DNS packet size on my DNS is 4096 which is ok in terms of EDNS.

Appreciate any kind of help.
 
Old 12-27-2015, 09:11 AM   #2
Tarikc
Member
 
Registered: May 2009
Distribution: CentOS, RedHat, Ubuntu
Posts: 68

Original Poster
Rep: Reputation: 4
Hello,

To update this post, Unbound did for me, specifically version 1.5.7:

http://unbound.nlnetlabs.nl/svn/branches/edns-subnet/

It does what I want after compiling with --enable-subnet option.

The problem now is that I have it crashing when some load driven to it with:

kernel: unbound[5429]: segfault at 40 ip 000000000043bd36 sp 00007fb131610450 error 6 in unbound[400000+ce000]

Any ideas?

Last edited by Tarikc; 12-27-2015 at 09:12 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] DHCP client in wrong subnet AchimRS Linux - Networking 3 07-20-2010 01:29 PM
Problem with samba client accessing Windows shares on secondary subnet KevinFink Linux - Networking 1 10-01-2009 01:13 AM
OpenVPN-client connects,cant see servers subnet andbn Linux - Networking 0 10-29-2007 12:24 PM
NIS Client does not bind. lord loh. Linux - Server 0 06-11-2007 08:41 AM
How can I configure BIND outside a subnet erik_wout_ew2 Linux - Networking 7 10-30-2004 12:29 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 06:36 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration