[Unbound-users] stub-prime unexpected behavior

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Aaron,

On 03/21/2013 05:21 PM, Aaron Hopkins wrote:
> On Thu, 21 Mar 2013, W.C.A. Wijngaards wrote:
>> Not for stub-prime, the newly introduced behaviour for 'normal 
>> referrals' is to check at the parent as a last resort to get 
>> information.  When you add a stub-zone with stub-prime yes, then 
>> this also activates.
> 
>> Because it does not failover to the parent as a last resort.
> 
> How does "stub-prime: yes, stub-first: no" differ from
> "stub-prime: yes, stub-first: yes", if the former falls back to
> using the roots? Doesn't "stub-first: no" tell it to not do that?
> 
>> Not sure if I should fix this, or not.  Is it merely unexpected, 
>> or undesirable?

The issue is resolved in the svn.  It now does not go to the
servers above configured stuff, if the configured servers fail.  This
happens for stub-zone and forward-zone.

The actual bug was that it forgot the setting for stub-first when it
did the stub-prime.

Best regards,
   Wouter

> I would like "stub-prime: yes, stub-first: no" to still mean "I'm 
> giving you a private zone that can't be reached from the roots, 
> please don't try and ask them."  If that's not what it means, I 
> think updating the stub-prime documentation to include the
> fallback behavior is necessary.
> 
> Thanks for looking at this,
> 
> -- Aaron

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=NqgA
-----END PGP SIGNATURE-----