[Unbound-users] EDNS client subnet tests

Yuri Schaeffer yuri at nlnetlabs.nl
Fri May 1 08:17:37 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> What parameters are available to configure in subnetcache module?

send-client-subnet: <IP address>
Send client source address to this authority. Append /num to indicate
a classless delegation netblock, for example like 10.2.3.4/24 or
2001::11/64. Can be given multiple  times. Authorities not listed will
not** receive edns-subnet information.

client-subnet-opcode: <number>
Specify positive integer smaller than 65536. Defaults to 8.

max-client-subnet-ipv6: <number>
Specifies the maximum prefix length of the client source address we
are willing to expose to third parties for IPv6. Defaults to 64.

max-client-subnet-ipv4: <number>
Specifies the maximum prefix length of the client source address we
are willing to expose to third parties for IPv4. Defaults to 24.


** Unless the client query includes the option.

//Yuri
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlVDNqEACgkQI3PTR4mhavhpoACdHoGwvzR/NLxZjFlYoS7kaFUT
BPgAoJ++p5cZL03WzEqLMrShFzvtu84L
=dS2C
-----END PGP SIGNATURE-----



More information about the Unbound-users mailing list