Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 3 Nov 2020 17:41:04 +0000
From: Bartłomiej Palmowski <bart@...nt.com>
To: musl@...ts.openwall.com
Subject: EDNS0 support?

Hi,
we run alpine based docker images in AWS (inside our VPCs). Which
means that we're using dns servers provided by the AWS[1]. The problem
arises when we want to resolve a dns record that yields a large
response, for example:

$ nslookup eu.data.logs.insight.rapid7.com
Server:        10.11.12.13
Address:    10.11.12.13:53

Non-authoritative answer:
*** Can't find eu.data.logs.insight.rapid7.com: No answer

Non-authoritative answer:
*** Can't find eu.data.logs.insight.rapid7.com: No answer

According to what I managed to find out the reasons are as follows:
* edns0 is not advertise by the resolver
* there is no retry with TCP

Please advise on how we could reconfigure our images so that we're
able to resolve records with lots of RRs with a musl resolver.

1 - https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/DNSBehavior.html

-- 
*The information contained in this message is intended for the addressee 
only and may contain classified information. If you are not the addressee, 
please delete this message and notify the sender; you should not copy or 
distribute this message or disclose its contents to anyone. Any views or 
opinions expressed in this message are those of the individual(s) and not 
necessarily of the organization. No reliance may be placed on this message 
without written confirmation from an authorised representative of its 
contents. No guarantee is implied that this message or any attachment is 
virus free or has not been intercepted and amended.*

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.