priming and dnskey

[T.Suzuki]

On Thu, 3 Aug 2017 09:08:52 +0200
"W.C.A. Wijngaards via Unbound-users" <unbound-users at unbound.net> wrote:

> Hi T.Suzuki,
> 
> Do you have prefetch-key enabled still?  It causes the DNSKEY to be
> prefetched.  If so, that would just be extra data in the cache, and not
> hamper KSK rollovers.

I do not enable any key configuration.

unbound 1.6.3 (FreeBSD 11.0-RELEASE pkg)

server:
	verbosity: 1
	interface: 127.0.0.2
	msg-cache-size: 8m
	rrset-cache-size: 8m
	access-control: 127.0.0.0/8 allow
	logfile: "unbound.log"
	log-queries: yes
	root-hints: "named.cache"
	private-address: 172.16.0.0/12
	private-address: 192.168.0.0/16
	unwanted-reply-threshold: 100000
	do-not-query-localhost: no
	# prefetch-key: no
	module-config: "iterator"
        # auto-trust-anchor-file: "/usr/local/etc/unbound/root.key"
        # trust-anchor-file: ""

python:
remote-control:
	control-enable: yes

# tshark -n port 53
Capturing on 'em0'
    1   0.000000 172.16.168.136 → 199.7.91.13  DNS 70 Standard query 0xca87 NS <Root> OPT
    2   0.015573  199.7.91.13 → 172.16.168.136 DNS 1139 Standard query response 0xca87 NS <Root> NS f.root-servers.net NS e.root-servers.net NS i.root-servers.net NS k.root-servers.net NS a.root-servers.net NS b.root-servers.net NS d.root-servers.net NS g.root-servers.net NS h.root-servers.net NS l.root-servers.net NS m.root-servers.net NS j.root-servers.net NS c.root-servers.net RRSIG A 198.41.0.4 A 192.228.79.201 A 192.33.4.12 A 199.7.91.13 A 192.203.230.10 A 192.5.5.241 A 192.112.36.4 A 198.97.190.53 A 192.36.148.17 A 192.58.128.30 A 193.0.14.129 A 199.7.83.42 A 202.12.27.33 AAAA 2001:503:ba3e::2:30 AAAA 2001:500:200::b AAAA 2001:500:2::c AAAA 2001:500:2d::d AAAA 2001:500:a8::e AAAA 2001:500:2f::f AAAA 2001:500:12::d0d AAAA 2001:500:1::53 AAAA 2001:7fe::53 AAAA 2001:503:c27::2:30 AAAA 2001:7fd::1 AAAA 2001:500:9f::42 AAAA 2001:dc3::35 OPT
    3   0.015879 172.16.168.136 → 198.41.0.4   DNS 70 Standard query 0x6795 DNSKEY <Root> OPT
    4   0.130131   198.41.0.4 → 172.16.168.136 DNS 1181 Standard query response 0x6795 DNSKEY <Root> DNSKEY DNSKEY DNSKEY RRSIG OPT


-- 
------------------------------------------------------------------------------
T.Suzuki