[nsd-users] NSD omitting NSID in small responses

Anand Buddhdev anandb at ripe.net
Sun Jun 28 11:38:41 UTC 2015

My colleague Robert and I have just discovered something interesting
about NSD's responses.

For a query of the form:

dig @rootserver com ns +norec +bufsize=512 +nsid

NSD does not return the NSID in the response. It fills up the entire
additional section with as many address records as possible.

In contrast, BIND and Knot omit some of the addresses in order to
accommodate the NSID.

I personally prefer the BIND/Knot behaviour. Usually, NSID will be
requested by a debugging or measurement type query, where one doesn't
care too much about some missing address records. If NSID is requested,
then the name server should try to accommodate it, while forgoing some
of the address records.

If it's not too much work, could I request that NSD be modified to work
like this?


More information about the nsd-users mailing list