Subject: [DNSOP] multiple responses after ietf100

From: [email-masked]
Date: Thu, 15 Mar 2018 08:55:24 +0900 (JST)

I evaluated current full-service resolver implementations that accept
additional resource records or not.

Tested resolvers: BIND 9, Unbound, Knot Resolver, PowerDNS recursor,
       		  Google Public DNS

Result:

  Knot resolver 2.0.0 and Unbound 1.7.0rc accept additional NSEC RRs
  (+ SOA RRs) in authority section and generate NODATA responses
  (a half of additional-answer scenario)

  PowerDNS recursor accepts additional A/AAAA in answer section
  (aaaa-for-free scenario)

  Other cases, additional resource records are ignored.

Details:
  https://indico.dns-oarc.net/event/28/session/11/contribution/46/material/slides/0.pdf

--
Kazunori Fujiwara, JPRS <[email-masked]>