diff --git a/Makefile b/Makefile index 5c2f26a..62880b3 100644 --- a/Makefile +++ b/Makefile @@ -16,5 +16,8 @@ clean: $(REBAR) $(REBAR) clean test: $(REBAR) + $(REBAR) fmt --check $(REBAR) eunit skip_deps=true +format: $(REBAR) + $(REBAR) fmt diff --git a/rebar.config b/rebar.config index 5ec08c6..7747266 100644 --- a/rebar.config +++ b/rebar.config @@ -1,10 +1,22 @@ %%-*- mode: erlang -*- {cover_enabled, true}. -{erl_opts, [debug_info, fail_on_warning, - {parse_transform, lager_transform}]}. +{erl_opts, [ + debug_info, + fail_on_warning, + {parse_transform, lager_transform} +]}. {deps, [ - {lager, "3.9.2"}, - dns_erlang - ]}. + {lager, "3.9.2"}, + dns_erlang +]}. + +{project_plugins, [ + erlfmt +]}. + +{erlfmt, [ + write, + {print_width, 140} +]}. diff --git a/src/dnstest.app.src b/src/dnstest.app.src index d56146b..cc1f41d 100644 --- a/src/dnstest.app.src +++ b/src/dnstest.app.src @@ -1,13 +1,16 @@ -{application, dnstest, - [{description, "Conformance tests for DNS servers"}, - {vsn, git}, - {modules, [dnstest, - dnstest_app, - dnstest_harness]}, - {registered, [dnstest_harness]}, - {mod, { dnstest_app, []}}, - {applications, [kernel, - stdlib, - lager]}]}. - - +{application, dnstest, [ + {description, "Conformance tests for DNS servers"}, + {vsn, git}, + {modules, [ + dnstest, + dnstest_app, + dnstest_harness + ]}, + {registered, [dnstest_harness]}, + {mod, {dnstest_app, []}}, + {applications, [ + kernel, + stdlib, + lager + ]} +]}. diff --git a/src/dnstest.erl b/src/dnstest.erl index 8393e1e..9521a21 100644 --- a/src/dnstest.erl +++ b/src/dnstest.erl @@ -3,32 +3,32 @@ -export([start/0, stop/0, run/0, run/1]). start() -> - application:ensure_all_started(dnstest), - case init:get_plain_arguments() of - [] -> run([]); - Names -> run(Names) - end. + application:ensure_all_started(dnstest), + case init:get_plain_arguments() of + [] -> run([]); + Names -> run(Names) + end. stop() -> - application:stop(dnstest). + application:stop(dnstest). run() -> run([]). run(Name) when is_atom(Name) -> - run([atom_to_list(Name)]); + run([atom_to_list(Name)]); run([]) -> - dnstest_metrics:start(), - lager:info("Running all tests (#~p)", [dnstest_metrics:run_number()]), - DefinitionsModule = definitions_module(), - gen_server:cast(dnstest_harness, {run, DefinitionsModule:definitions()}); + dnstest_metrics:start(), + lager:info("Running all tests (#~p)", [dnstest_metrics:run_number()]), + DefinitionsModule = definitions_module(), + gen_server:cast(dnstest_harness, {run, DefinitionsModule:definitions()}); run(Names) -> - dnstest_metrics:start(), - lager:info("Running targeted tests: ~p (#~p)", [Names, dnstest_metrics:run_number()]), - DefinitionsModule = definitions_module(), - gen_server:cast(dnstest_harness, {run_target, DefinitionsModule:definitions(), Names}). + dnstest_metrics:start(), + lager:info("Running targeted tests: ~p (#~p)", [Names, dnstest_metrics:run_number()]), + DefinitionsModule = definitions_module(), + gen_server:cast(dnstest_harness, {run_target, DefinitionsModule:definitions(), Names}). definitions_module() -> - case application:get_env(dnstest, definitions) of - {ok, Module} -> Module; - _ -> dnstest_definitions - end. + case application:get_env(dnstest, definitions) of + {ok, Module} -> Module; + _ -> dnstest_definitions + end. diff --git a/src/dnstest_app.erl b/src/dnstest_app.erl index 98e56d3..d9c700b 100644 --- a/src/dnstest_app.erl +++ b/src/dnstest_app.erl @@ -5,9 +5,9 @@ -export([start/2, stop/1]). start(Type, Args) -> - lager:info("~p:start(~p, ~p)", [?MODULE, Type, Args]), - dnstest_sup:start_link(). + lager:info("~p:start(~p, ~p)", [?MODULE, Type, Args]), + dnstest_sup:start_link(). stop(State) -> - lager:info("~p:stop(~p)~n", [?MODULE, State]), - ok. + lager:info("~p:stop(~p)~n", [?MODULE, State]), + ok. diff --git a/src/dnstest_definitions.erl b/src/dnstest_definitions.erl index 6c588f3..46007f3 100644 --- a/src/dnstest_definitions.erl +++ b/src/dnstest_definitions.erl @@ -10,2613 +10,3302 @@ -export([erldns_definitions/0, erldns_dnssec_definitions/0]). definitions() -> - pdns_definitions() ++ erldns_definitions() ++ pdns_dnssec_definitions() ++ erldns_dnssec_definitions(). + pdns_definitions() ++ erldns_definitions() ++ pdns_dnssec_definitions() ++ erldns_dnssec_definitions(). erldns_definitions() -> - [ - {ns_zonecut, { - {question, {"child.zonecut.withzonecut.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.cutwithzonecut.com">>}}, - {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.cutwithzonecut.com">>}} - ]}, - {additional, []} - }}}}, - {ns_zonecut_child_cname, { - {question, {"cnamerecord.zonecut.withzonecut.com", ?DNS_TYPE_CNAME}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.cutwithzonecut.com">>}}, - {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.cutwithzonecut.com">>}} - ]}, - {additional, []} - }}}}, - {ns_recursion_breakout, { - {question, {"rns.example.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"rns.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"rns.example.com">>}} - ]}, - {additional, [ - {<<"rns.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1, 2, 3, 4}}} - ]} - }}}}, - - {ns_a_record, { - {question, {"ns1.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + [ + {ns_zonecut, { + {question, {"child.zonecut.withzonecut.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.cutwithzonecut.com">>}}, + {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.cutwithzonecut.com">>}} + ]}, + {additional, []} + }} + }}, + {ns_zonecut_child_cname, { + {question, {"cnamerecord.zonecut.withzonecut.com", ?DNS_TYPE_CNAME}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.cutwithzonecut.com">>}}, + {<<"zonecut.withzonecut.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.cutwithzonecut.com">>}} + ]}, + {additional, []} + }} + }}, + {ns_recursion_breakout, { + {question, {"rns.example.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"rns.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"rns.example.com">>}} + ]}, + {additional, [ + {<<"rns.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1, 2, 3, 4}}} + ]} + }} + }}, + + {ns_a_record, { + {question, {"ns1.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 1, 1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {ns_aaaa_record, { - {question, {"ns1.example.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ip = {8193,3512,34211,0,0,35374,880,29492}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {cname_case, { - {question, {"WWW.example.com", ?DNS_TYPE_CNAME}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {ns_aaaa_record, { + {question, {"ns1.example.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ + ip = {8193, 3512, 34211, 0, 0, 35374, 880, 29492} + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {cname_case, { + {question, {"WWW.example.com", ?DNS_TYPE_CNAME}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"WWW.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"outpost.example.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {cname_wildcard_cover, { - {question, {"www.cover.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"www.cover.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 3600, #dns_rrdata_cname{dname = <<"proxy.cover.wtest.com">>}}, - {<<"proxy.cover.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {1,2,3,4}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {caa_record, { - {question, {"caa.example.com", ?DNS_TYPE_CAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"caa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CAA, 3600, #dns_rrdata_caa{flags = 0, tag = <<"issue">>, value = <<"example.net">>}} - ]}, - {authority, []}, - {additional, []} - }} - }} - - ]. + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {cname_wildcard_cover, { + {question, {"www.cover.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"www.cover.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 3600, #dns_rrdata_cname{ + dname = <<"proxy.cover.wtest.com">> + }}, + {<<"proxy.cover.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {1, 2, 3, 4}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {caa_record, { + {question, {"caa.example.com", ?DNS_TYPE_CAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"caa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CAA, 3600, #dns_rrdata_caa{ + flags = 0, tag = <<"issue">>, value = <<"example.net">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }} + ]. erldns_dnssec_definitions() -> - [ - {dnssec_soa, { - {question, {"minimal-dnssec.com", ?DNS_TYPE_SOA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_ns, { - {question, {"minimal-dnssec.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ + [ + {dnssec_soa, { + {question, {"minimal-dnssec.com", ?DNS_TYPE_SOA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_ns, { + {question, {"minimal-dnssec.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.example.com">>}}, {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.example.com">>}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NS, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, [ - {<<"ns1.example.com">>,1,1,120,{dns_rrdata_a,{192,168,1,1}}}, - {<<"ns1.example.com">>,1,28,120,{dns_rrdata_aaaa,{8193,3512,34211,0,0,35374,880,29492}}}, - {<<"ns2.example.com">>,1,1,120,{dns_rrdata_a,{192,168,1,2}}} - ]} - }} - }}, - - {dnssec_a, { - {question, {"outpost.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,1}}}, - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_a_with_udp_payload_size, { - {question, {"outpost.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{udp_payload_size=1230, dnssec=true}]}, - {records, { - {answers, [ - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,1}}}, - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_cname, { - {question, {"www.example-dnssec.com", ?DNS_TYPE_CNAME}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"outpost.example-dnssec.com">>}}, - {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_follow_cname, { - {question, {"www.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"outpost.example-dnssec.com">>}}, - {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,1}}}, - {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_cds, { - {question, {"example-dnssec.com", ?DNS_TYPE_CDS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CDS, 120, #dns_rrdata_cds{keytag = 0, alg = 8, digest_type = 2, digest = <<67,21,167,173,9,174,11,235,166,204,49,4,187,205,136,0,14,215,150,136,127,28,77,82,10,58,96,141,113,91,114,202>>}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CDS, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = 1479123419, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_cdnskey, { - {question, {"example-dnssec.com", ?DNS_TYPE_CDNSKEY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CDNSKEY, 120, #dns_rrdata_cdnskey{flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = [14035071367807743739426074910541039401557049548824177782635168692110322779944732953326230489581646087318994485815085,2857869626825671253822589949192942192668066005877554975092236153549535798152277417905867675318438913507841], key_tag = 49016}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CDNSKEY, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - {dnssec_dnskey, { - {question, {"example-dnssec.com", ?DNS_TYPE_DNSKEY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DNSKEY, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % Ensure the correct NSEC result when the zone is present but the qname is not. - {nsec_name, { - {question, {"a.minimal-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, [ - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {additional, []} - }} - }}, - - % Ensure the correct NSEC result when the zone is present but the qname is not. - {nsec_name_mixed_case, { - {question, {"a.Minimal-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, [ - {<<"Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"a.Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - {<<"a.Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {additional, []} - }} - }}, - - % Ensure the correct NSEC result when the qname matches but the qtype does not. - {nsec_type, { - {question, {"minimal-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, [ - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"\000.minimal-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {additional, []} - }} - }}, - - % Ensure the correct NSEC result when zone is present but the qname is not, and the qtype is ANY. - {nsec_name_any, { - {question, {"a.minimal-dnssec.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, [ - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {additional, []} - }} - }}, - - % Ensure the correct NSEC result when the qname matches but the qtype does not. - {nsec_type_any, { - {question, {"minimal-dnssec.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NS, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, [ + {<<"ns1.example.com">>, 1, 1, 120, {dns_rrdata_a, {192, 168, 1, 1}}}, + {<<"ns1.example.com">>, 1, 28, 120, {dns_rrdata_aaaa, {8193, 3512, 34211, 0, 0, 35374, 880, 29492}}}, + {<<"ns2.example.com">>, 1, 1, 120, {dns_rrdata_a, {192, 168, 1, 2}}} + ]} + }} + }}, + + {dnssec_a, { + {question, {"outpost.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 1}}}, + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_A, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_a_with_udp_payload_size, { + {question, {"outpost.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{udp_payload_size = 1230, dnssec = true}]}, + {records, { + {answers, [ + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 1}}}, + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_A, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_cname, { + {question, {"www.example-dnssec.com", ?DNS_TYPE_CNAME}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"outpost.example-dnssec.com">> + }}, + {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_follow_cname, { + {question, {"www.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"outpost.example-dnssec.com">> + }}, + {<<"www.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 1}}}, + {<<"outpost.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_A, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_cds, { + {question, {"example-dnssec.com", ?DNS_TYPE_CDS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CDS, 120, #dns_rrdata_cds{ + keytag = 0, + alg = 8, + digest_type = 2, + digest = + <<67, 21, 167, 173, 9, 174, 11, 235, 166, 204, 49, 4, 187, 205, 136, 0, 14, 215, 150, 136, 127, 28, 77, 82, 10, + 58, 96, 141, 113, 91, 114, 202>> + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CDS, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = 1479123419, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_cdnskey, { + {question, {"example-dnssec.com", ?DNS_TYPE_CDNSKEY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CDNSKEY, 120, #dns_rrdata_cdnskey{ + flags = 256, + protocol = 3, + alg = ?DNS_ALG_RSASHA256, + public_key = [ + 14035071367807743739426074910541039401557049548824177782635168692110322779944732953326230489581646087318994485815085, + 2857869626825671253822589949192942192668066005877554975092236153549535798152277417905867675318438913507841 + ], + key_tag = 49016 + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CDNSKEY, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + {dnssec_dnskey, { + {question, {"example-dnssec.com", ?DNS_TYPE_DNSKEY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_DNSKEY, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % Ensure the correct NSEC result when the zone is present but the qname is not. + {nsec_name, { + {question, {"a.minimal-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, [ + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{ + next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC] + }}, + {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NSEC, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 86400, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + + % Ensure the correct NSEC result when the zone is present but the qname is not. + {nsec_name_mixed_case, { + {question, {"a.Minimal-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, [ + {<<"Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"a.Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{ + next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC] + }}, + {<<"a.Minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NSEC, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 86400, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + + % Ensure the correct NSEC result when the qname matches but the qtype does not. + {nsec_type, { + {question, {"minimal-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, [ + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{ + next_dname = <<"\000.minimal-dnssec.com">>, + types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY] + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NSEC, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 86400, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + + % Ensure the correct NSEC result when zone is present but the qname is not, and the qtype is ANY. + {nsec_name_any, { + {question, {"a.minimal-dnssec.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, [ + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{ + next_dname = <<"\000.a.minimal-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC] + }}, + {<<"a.minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NSEC, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 86400, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + + % Ensure the correct NSEC result when the qname matches but the qtype does not. + {nsec_type_any, { + {question, {"minimal-dnssec.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.example.com">>}}, {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.example.com">>}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DNSKEY, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NS, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, [ - {<<"ns1.example.com">>,1,1,120,{dns_rrdata_a,{192,168,1,1}}}, - {<<"ns1.example.com">>,1,28,120,{dns_rrdata_aaaa,{8193,3512,34211,0,0,35374,880,29492}}}, - {<<"ns2.example.com">>,1,1,120,{dns_rrdata_a,{192,168,1,2}}} - ]} - }} - }}, - - % Verify NSEC RR Type bitmap is correct - {nsec_rr_type_bitmap_wildcard, { - {question, {"nosuch.wildcard-aaaa.example-dnssec.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"nosuch.wildcard-aaaa.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"\000.nosuch.wildcard-aaaa.example-dnssec.com">>, types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_A]}}, - {<<"nosuch.wildcard-aaaa.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - - ]}, - {additional, []} - }} - }}, - {cname_to_nxdomain_dnssec, { - {question, {"nxd.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example-dnssec.com">>}}, - {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example-dnssec.com">>, rname = <<"ahu.example-dnssec.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {additional, []} - }} - }}, - - % Ensure wildcard chaining with DNSSEC works. - % In erldns the wildcard matched records are signed on the fly. - {cname_wildcard_chain_dnssec, { - {question, {"start.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w1.example-dnssec.com">>}}, - {<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w2.example-dnssec.com">>}}, - {<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 6, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w3.example-dnssec.com">>}}, - {<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 6, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w4.example-dnssec.com">>}}, - {<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 6, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w5.example-dnssec.com">>}}, - {<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 6, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - {<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1,2,3,5}}}, - {<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 6, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }} - ]. + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 120, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_DNSKEY, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NS, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"minimal-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"minimal-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, [ + {<<"ns1.example.com">>, 1, 1, 120, {dns_rrdata_a, {192, 168, 1, 1}}}, + {<<"ns1.example.com">>, 1, 28, 120, {dns_rrdata_aaaa, {8193, 3512, 34211, 0, 0, 35374, 880, 29492}}}, + {<<"ns2.example.com">>, 1, 1, 120, {dns_rrdata_a, {192, 168, 1, 2}}} + ]} + }} + }}, + + % Verify NSEC RR Type bitmap is correct + {nsec_rr_type_bitmap_wildcard, { + {question, {"nosuch.wildcard-aaaa.example-dnssec.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"nosuch.wildcard-aaaa.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{ + next_dname = <<"\000.nosuch.wildcard-aaaa.example-dnssec.com">>, + types = [?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_A] + }}, + {<<"nosuch.wildcard-aaaa.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_NSEC, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + {cname_to_nxdomain_dnssec, { + {question, {"nxd.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"nxdomain.example-dnssec.com">> + }}, + {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example-dnssec.com">>, + rname = <<"ahu.example-dnssec.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_SOA, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 100000, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {additional, []} + }} + }}, + + % Ensure wildcard chaining with DNSSEC works. + % In erldns the wildcard matched records are signed on the fly. + {cname_wildcard_chain_dnssec, { + {question, {"start.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"x.y.z.w1.example-dnssec.com">> + }}, + {<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"x.y.z.w2.example-dnssec.com">> + }}, + {<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 6, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"x.y.z.w3.example-dnssec.com">> + }}, + {<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 6, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"x.y.z.w4.example-dnssec.com">> + }}, + {<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 6, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"x.y.z.w5.example-dnssec.com">> + }}, + {<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 6, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }}, + {<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1, 2, 3, 5}}}, + {<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_A, + alg = ?DNS_ALG_RSASHA256, + labels = 6, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }} + ]. pdns_dnssec_definitions() -> - [ - % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY - % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 1 nxd.example.com. IN NSEC 86400 outpost.example.com. CNAME RRSIG NSEC - % 1 nxd.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxdomain.example.com.', qtype=ANY - - %{any_nxdomain_dnssec, { - %{question, {"nxdomain.example-dnssec.com", ?DNS_TYPE_ANY}}, - %{header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"outpost.example.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}}}}, - - % 0 www.something.wtest.com. IN A 3600 4.3.2.1 - % 0 www.something.wtest.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] wtest.com. ... - % 1 a.something.wtest.com. IN NSEC 86400 wtest.com. A RRSIG NSEC - % 1 a.something.wtest.com. IN RRSIG 86400 NSEC 8 4 86400 [expiry] [inception] [keytag] wtest.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.something.wtest.com.', qtype=ANY - - %{any_wildcard_dnssec, { - %{question, {"www.something.wtest-dnssec.com", ?DNS_TYPE_ANY}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"www.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4,3,2,1}}}, - %{<<"www.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"wtest-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{authority, [ - %{<<"a.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"wtest-dnssec.com">>, types = [?DNS_TYPE_A, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"a.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 4, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"wtest-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}}, - - % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. - % 0 nxd.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY - % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 1 nxd.example.com. IN NSEC 86400 outpost.example.com. CNAME RRSIG NSEC - % 1 nxd.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxd.example.com.', qtype=A - - %{cname_to_nxdomain_dnssec, { - %{question, {"nxd.example-dnssec.com", ?DNS_TYPE_A}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example-dnssec.com">>}}, - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{authority, [ - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example-dnssec.com">>, rname = <<"ahu.example-dnssec.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"outpost.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}}, - - % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. - % 0 nxd.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxd.example.com.', qtype=ANY - - {cname_to_nxdomain_any_dnssec, { - {question, {"nxd.example-dnssec.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example-dnssec.com">>}}, - {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. - % 0 unauth.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='unauth.example.com.', qtype=ANY - - {cname_to_unauth_any_dnssec, { - {question, {"unauth.example-dnssec.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"no-idea.example.org">>}}, - {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. - % 0 unauth.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='unauth.example.com.', qtype=A - - {cname_to_unauth_dnssec, { - {question, {"unauth.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"no-idea.example.org">>}}, - {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 start.example.com. IN CNAME 120 x.y.z.w1.example.com. - % 0 start.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 0 x.y.z.w1.example.com. IN CNAME 120 x.y.z.w2.example.com. - % 0 x.y.z.w1.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 0 x.y.z.w2.example.com. IN CNAME 120 x.y.z.w3.example.com. - % 0 x.y.z.w2.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 0 x.y.z.w3.example.com. IN CNAME 120 x.y.z.w4.example.com. - % 0 x.y.z.w3.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 0 x.y.z.w4.example.com. IN CNAME 120 x.y.z.w5.example.com. - % 0 x.y.z.w4.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 0 x.y.z.w5.example.com. IN A 120 1.2.3.5 - % 0 x.y.z.w5.example.com. IN RRSIG 120 A 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 1 *.w1.example.com. IN NSEC 86400 *.w2.example.com. CNAME RRSIG NSEC - % 1 *.w1.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 1 *.w2.example.com. IN NSEC 86400 *.w3.example.com. CNAME RRSIG NSEC - % 1 *.w2.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 1 *.w3.example.com. IN NSEC 86400 *.w4.example.com. CNAME RRSIG NSEC - % 1 *.w3.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 1 *.w4.example.com. IN NSEC 86400 *.w5.example.com. CNAME RRSIG NSEC - % 1 *.w4.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 1 *.w5.example.com. IN NSEC 86400 www.example.com. A RRSIG NSEC - % 1 *.w5.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='start.example.com.', qtype=A - - %{cname_wildcard_chain_dnssec, { - %{question, {"start.example-dnssec.com", ?DNS_TYPE_A}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w1.example-dnssec.com">>}}, - %{<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w2.example-dnssec.com">>}}, - %{<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w3.example-dnssec.com">>}}, - %{<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w4.example-dnssec.com">>}}, - %{<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w5.example-dnssec.com">>}}, - %{<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1,2,3,5}}}, - %{<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{authority, [ - %%{<<"*.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w2.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %%{<<"*.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %%{<<"*.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w3.exaexample-dnssecle.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %%{<<"*.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %%{<<"*.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w4.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %%{<<"*.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %%{<<"*.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w5.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %%{<<"*.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %%{<<"*.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"www.example-dnssec.com">>, types = [?DNS_TYPE_A, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %%{<<"*.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}}, - - % 0 example.com. IN DNSKEY 86400 256 3 8 ... - % 0 example.com. IN DNSKEY 86400 257 3 8 ... - % 0 example.com. IN RRSIG 86400 DNSKEY 8 2 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=DNSKEY - - {direct_dnskey_dnssec, { - {question, {"example-dnssec.com", ?DNS_TYPE_DNSKEY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE}}, - {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DNSKEY, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 2 . IN OPT 32768 - % Rcode: 5, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='example.com.', qtype=RRSIG - % erldns rejects direct RRSIG queries - - {direct_rrsig, { - {question, {"example-dnssec.com", ?DNS_TYPE_RRSIG}}, - {header, #dns_message{rc=?DNS_RCODE_REFUSED, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, []}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 double.example.com. IN A 120 192.168.5.1 - % 0 double.example.com. IN RRSIG 120 A 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='double.example.com.', qtype=A - - {double_dnssec, { - {question, {"double.example-dnssec.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {additional, [#dns_optrr{dnssec=true}]}, - {records, { - {answers, [ - {<<"double.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,5,1}}}, - {<<"double.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - ]}, - {authority, []}, - {additional, []} - }} - }} - - % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY - % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=DS - - %{ds_at_apex_noerror_dnssec, { - %{question, {"example-dnssec.com", ?DNS_TYPE_DS}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example-dnssec.com">>, rname = <<"ahu.example-dnssec.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, - %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}} - - % 0 secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7 - % 0 secure-delegated.dnssec-parent.com. IN RRSIG 3600 DS 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=DS - - %{ds_at_both_sides_dnssec, { - %{question, {"secure-delegated.dnssec-parent.com", ?DNS_TYPE_DS}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"secure-delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DS, 3600, #dns_rrdata_ds{keytag = 54319, alg = 8, digest_type = 2, digest = hex_to_bin(<<"a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7">>)}}, - %{<<"secure-delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DS, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"dnssec-parent.com">>, signature = ?TEST_REPLACE}} - %]}, - %{authority, []}, - %{additional, []} - %}} - %}}, - - % This test tries to resolve a DS question at a secure delegation. - % It was written specifically to verify that we do not sign NS records - % at secure delegations. - - % 0 dsdelegation.example.com. IN DS 120 28129 8 1 caf1eaaecdabe7616670788f9022454bf5fd9fda - % 0 dsdelegation.example.com. IN RRSIG 120 DS 8 3 120 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='dsdelegation.example.com.', qtype=DS - - %{ds_at_secure_delegation, { - %{question, {"dsdelegation.example-dnssec.com", ?DNS_TYPE_DS}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"dsdelegation.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DS, 120, #dns_rrdata_ds{keytag = 28129, alg = 8, digest_type = 1, digest = hex_to_bin(<<"CAF1EAAECDABE7616670788F9022454BF5FD9FDA">>)}}, - %{<<"dsdelegation.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DS, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} - %]}, - %{authority, []}, - %{additional, []} - %}} - %}} - - % This test tries to resolve a DS question at an unsecure delegation. - - % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 1 usa.example.com. IN NSEC 86400 *.w1.example.com. NS RRSIG NSEC - % 1 usa.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='usa.example.com.', qtype=DS - - %{ds_at_unsecure_delegation, { - %{question, {"usa.example.com", ?DNS_TYPE_DS}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, - %{<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w1.example.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}} - - % 1 delegated.dnssec-parent.com. IN NSEC 86400 ns1.dnssec-parent.com. NS RRSIG NSEC - % 1 delegated.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ... - % 1 dnssec-parent.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ... - % 1 dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='delegated.dnssec-parent.com.', qtype=DS - - %{ds_at_unsecure_zone_cut, { - %{question, {"delegated.dnssec-parent.com", ?DNS_TYPE_DS}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, - - %{<<"delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"ns1.dnssec-parent.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"dnssec-parent.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}} - - - % TODO: ds_inside_delegation - - % 1 blah.test.com. IN NSEC 86400 b.c.test.com. NS RRSIG NSEC - % 1 blah.test.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] test.com. ... - % 1 test.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] test.com. ... - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='c.test.com.', qtype=ANY - - % Currently broken in erl-dns because the TTL in the RRSIG is 3600 instead of 84600 - - %{ent_any_dnssec, { - %{question, {"c.test-dnssec.com", ?DNS_TYPE_ANY}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test-dnssec.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"test.com">>, signature = ?TEST_REPLACE}}, - %{<<"blah.test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"b.c.test-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, - %{<<"blah.test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"test-dnssec.com">>, signature = ?TEST_REPLACE}} - %]}, - %{additional, []} - %}} - %}} - - % Minimal zone (only NS records) Make sure existent hosts without proper type - % generates a correct NSEC denial. - - % 1 minimal.com. IN NSEC 86400 minimal.com. NS SOA RRSIG NSEC DNSKEY - - %{minimal_noerror, { - %{question, {<<"minimal.com">>, ?DNS_TYPE_TXT}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"mimimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, - %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal.com">>, signature = ?TEST_REPLACE}}, - %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"minimal.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}} - %]}, - %{authority, []}, - %{additional, []} - %}} - %}} - - % Minimal zone (only NS records) Make sure non-existent hosts generates a correct - % NSEC denial. - - % 1 minimal.com. IN NSEC 86400 minimal.com. NS SOA RRSIG NSEC DNSKEY - - %{minimal_nxdomain, { - %{question, {<<"a.minimal.com">>, ?DNS_TYPE_A}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - %{additional, [#dns_optrr{dnssec=true}]}, - %{records, { - %{answers, [ - %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"minimal.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}} - %]}, - %{authority, []}, - %{additional, []} - %}} - %}} - - % This tests determines if multi-segment NSEC records work. - - % 0 hightype.example.com. IN NSEC 86400 host-0.example.com. A RRSIG NSEC TYPE65534 - % 0 hightype.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='hightype.example.com.', qtype=NSEC - - % TODO: nsec-bitmap - - - % TODO: nsec-glue-at-delegation - % TODO: nsec-glue - % TODO: nsec-middle - % TODO: nsec-wildcard - % TODO: nsec-wraparound - % TODO: nsec-wrong-type-at-apex - % TODO: nsec-wrong-type - % TODO: nsecx-mode2-wildcard-nodata - % TODO: nsecx-mode3-wildcard - % TODO: nxdomain-below-nonempty-terminal - % TODO: nxdomain-for-unknown-record - - % TODO: second-level-nxdomain - % TODO: secure-delegation-ds-ns - % TODO: secure-delegation - % TODO: space-name - - % TODO: two-level-nxdomain - % TODO: underscore-sorting - - % TODO: uppercase-nsec - - ]. + [ + % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY + % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 1 nxd.example.com. IN NSEC 86400 outpost.example.com. CNAME RRSIG NSEC + % 1 nxd.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxdomain.example.com.', qtype=ANY + + %{any_nxdomain_dnssec, { + %{question, {"nxdomain.example-dnssec.com", ?DNS_TYPE_ANY}}, + %{header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"outpost.example.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}}}}, + + % 0 www.something.wtest.com. IN A 3600 4.3.2.1 + % 0 www.something.wtest.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] wtest.com. ... + % 1 a.something.wtest.com. IN NSEC 86400 wtest.com. A RRSIG NSEC + % 1 a.something.wtest.com. IN RRSIG 86400 NSEC 8 4 86400 [expiry] [inception] [keytag] wtest.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.something.wtest.com.', qtype=ANY + + %{any_wildcard_dnssec, { + %{question, {"www.something.wtest-dnssec.com", ?DNS_TYPE_ANY}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"www.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4,3,2,1}}}, + %{<<"www.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"wtest-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{authority, [ + %{<<"a.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"wtest-dnssec.com">>, types = [?DNS_TYPE_A, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"a.something.wtest-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 4, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"wtest-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}}, + + % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. + % 0 nxd.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY + % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 1 nxd.example.com. IN NSEC 86400 outpost.example.com. CNAME RRSIG NSEC + % 1 nxd.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxd.example.com.', qtype=A + + %{cname_to_nxdomain_dnssec, { + %{question, {"nxd.example-dnssec.com", ?DNS_TYPE_A}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example-dnssec.com">>}}, + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{authority, [ + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example-dnssec.com">>, rname = <<"ahu.example-dnssec.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"outpost.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}}, + + % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. + % 0 nxd.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxd.example.com.', qtype=ANY + + {cname_to_nxdomain_any_dnssec, { + {question, {"nxd.example-dnssec.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"nxdomain.example-dnssec.com">> + }}, + {<<"nxd.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. + % 0 unauth.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='unauth.example.com.', qtype=ANY + + {cname_to_unauth_any_dnssec, { + {question, {"unauth.example-dnssec.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"no-idea.example.org">> + }}, + {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. + % 0 unauth.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='unauth.example.com.', qtype=A + + {cname_to_unauth_dnssec, { + {question, {"unauth.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"no-idea.example.org">> + }}, + {<<"unauth.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_CNAME, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 start.example.com. IN CNAME 120 x.y.z.w1.example.com. + % 0 start.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 0 x.y.z.w1.example.com. IN CNAME 120 x.y.z.w2.example.com. + % 0 x.y.z.w1.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 0 x.y.z.w2.example.com. IN CNAME 120 x.y.z.w3.example.com. + % 0 x.y.z.w2.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 0 x.y.z.w3.example.com. IN CNAME 120 x.y.z.w4.example.com. + % 0 x.y.z.w3.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 0 x.y.z.w4.example.com. IN CNAME 120 x.y.z.w5.example.com. + % 0 x.y.z.w4.example.com. IN RRSIG 120 CNAME 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 0 x.y.z.w5.example.com. IN A 120 1.2.3.5 + % 0 x.y.z.w5.example.com. IN RRSIG 120 A 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 1 *.w1.example.com. IN NSEC 86400 *.w2.example.com. CNAME RRSIG NSEC + % 1 *.w1.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 1 *.w2.example.com. IN NSEC 86400 *.w3.example.com. CNAME RRSIG NSEC + % 1 *.w2.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 1 *.w3.example.com. IN NSEC 86400 *.w4.example.com. CNAME RRSIG NSEC + % 1 *.w3.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 1 *.w4.example.com. IN NSEC 86400 *.w5.example.com. CNAME RRSIG NSEC + % 1 *.w4.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 1 *.w5.example.com. IN NSEC 86400 www.example.com. A RRSIG NSEC + % 1 *.w5.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='start.example.com.', qtype=A + + %{cname_wildcard_chain_dnssec, { + %{question, {"start.example-dnssec.com", ?DNS_TYPE_A}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w1.example-dnssec.com">>}}, + %{<<"start.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w2.example-dnssec.com">>}}, + %{<<"x.y.z.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w3.example-dnssec.com">>}}, + %{<<"x.y.z.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w4.example-dnssec.com">>}}, + %{<<"x.y.z.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w5.example-dnssec.com">>}}, + %{<<"x.y.z.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_CNAME, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1,2,3,5}}}, + %{<<"x.y.z.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_A, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{authority, [ + %%{<<"*.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w2.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %%{<<"*.w1.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %%{<<"*.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w3.exaexample-dnssecle.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %%{<<"*.w2.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %%{<<"*.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w4.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %%{<<"*.w3.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %%{<<"*.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w5.example-dnssec.com">>, types = [?DNS_TYPE_CNAME, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %%{<<"*.w4.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %%{<<"*.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"www.example-dnssec.com">>, types = [?DNS_TYPE_A, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %%{<<"*.w5.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}}, + + % 0 example.com. IN DNSKEY 86400 256 3 8 ... + % 0 example.com. IN DNSKEY 86400 257 3 8 ... + % 0 example.com. IN RRSIG 86400 DNSKEY 8 2 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=DNSKEY + + {direct_dnskey_dnssec, { + {question, {"example-dnssec.com", ?DNS_TYPE_DNSKEY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 257, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DNSKEY, 120, #dns_rrdata_dnskey{ + flags = 256, protocol = 3, alg = ?DNS_ALG_RSASHA256, public_key = ?TEST_REPLACE, key_tag = ?TEST_REPLACE + }}, + {<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_DNSKEY, + alg = ?DNS_ALG_RSASHA256, + labels = 2, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 2 . IN OPT 32768 + % Rcode: 5, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='example.com.', qtype=RRSIG + % erldns rejects direct RRSIG queries + + {direct_rrsig, { + {question, {"example-dnssec.com", ?DNS_TYPE_RRSIG}}, + {header, #dns_message{rc = ?DNS_RCODE_REFUSED, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, []}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 double.example.com. IN A 120 192.168.5.1 + % 0 double.example.com. IN RRSIG 120 A 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='double.example.com.', qtype=A + + {double_dnssec, { + {question, {"double.example-dnssec.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {additional, [#dns_optrr{dnssec = true}]}, + {records, { + {answers, [ + {<<"double.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 5, 1}}}, + {<<"double.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{ + type_covered = ?DNS_TYPE_A, + alg = ?DNS_ALG_RSASHA256, + labels = 3, + original_ttl = 120, + expiration = ?TEST_REPLACE, + inception = ?TEST_REPLACE, + key_tag = ?TEST_REPLACE, + signers_name = <<"example-dnssec.com">>, + signature = ?TEST_REPLACE + }} + ]}, + {authority, []}, + {additional, []} + }} + }} + + % 1 example.com. IN NSEC 86400 double.example.com. NS SOA MX RRSIG NSEC DNSKEY + % 1 example.com. IN RRSIG 86400 NSEC 8 2 86400 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=DS + + %{ds_at_apex_noerror_dnssec, { + %{question, {"example-dnssec.com", ?DNS_TYPE_DS}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example-dnssec.com">>, rname = <<"ahu.example-dnssec.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"double.example-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_MX, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}}, + %{<<"example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}} + + % 0 secure-delegated.dnssec-parent.com. IN DS 3600 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7 + % 0 secure-delegated.dnssec-parent.com. IN RRSIG 3600 DS 8 3 3600 [expiry] [inception] [keytag] dnssec-parent.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=DS + + %{ds_at_both_sides_dnssec, { + %{question, {"secure-delegated.dnssec-parent.com", ?DNS_TYPE_DS}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"secure-delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DS, 3600, #dns_rrdata_ds{keytag = 54319, alg = 8, digest_type = 2, digest = hex_to_bin(<<"a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7">>)}}, + %{<<"secure-delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DS, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"dnssec-parent.com">>, signature = ?TEST_REPLACE}} + %]}, + %{authority, []}, + %{additional, []} + %}} + %}}, + + % This test tries to resolve a DS question at a secure delegation. + % It was written specifically to verify that we do not sign NS records + % at secure delegations. + + % 0 dsdelegation.example.com. IN DS 120 28129 8 1 caf1eaaecdabe7616670788f9022454bf5fd9fda + % 0 dsdelegation.example.com. IN RRSIG 120 DS 8 3 120 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='dsdelegation.example.com.', qtype=DS + + %{ds_at_secure_delegation, { + %{question, {"dsdelegation.example-dnssec.com", ?DNS_TYPE_DS}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"dsdelegation.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_DS, 120, #dns_rrdata_ds{keytag = 28129, alg = 8, digest_type = 1, digest = hex_to_bin(<<"CAF1EAAECDABE7616670788F9022454BF5FD9FDA">>)}}, + %{<<"dsdelegation.example-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 120, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_DS, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 120, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} + %]}, + %{authority, []}, + %{additional, []} + %}} + %}} + + % This test tries to resolve a DS question at an unsecure delegation. + + % 1 example.com. IN RRSIG 86400 SOA 8 2 100000 [expiry] [inception] [keytag] example.com. ... + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 1 usa.example.com. IN NSEC 86400 *.w1.example.com. NS RRSIG NSEC + % 1 usa.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='usa.example.com.', qtype=DS + + %{ds_at_unsecure_delegation, { + %{question, {"usa.example.com", ?DNS_TYPE_DS}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 100000, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, + %{<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"*.w1.example.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}} + + % 1 delegated.dnssec-parent.com. IN NSEC 86400 ns1.dnssec-parent.com. NS RRSIG NSEC + % 1 delegated.dnssec-parent.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] dnssec-parent.com. ... + % 1 dnssec-parent.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] dnssec-parent.com. ... + % 1 dnssec-parent.com. IN SOA 3600 ns1.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='delegated.dnssec-parent.com.', qtype=DS + + %{ds_at_unsecure_zone_cut, { + %{question, {"delegated.dnssec-parent.com", ?DNS_TYPE_DS}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 3600, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"example.com">>, signature = ?TEST_REPLACE}}, + + %{<<"delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"ns1.dnssec-parent.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"delegated.dnssec-parent.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"dnssec-parent.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}} + + % TODO: ds_inside_delegation + + % 1 blah.test.com. IN NSEC 86400 b.c.test.com. NS RRSIG NSEC + % 1 blah.test.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] test.com. ... + % 1 test.com. IN RRSIG 3600 SOA 8 2 3600 [expiry] [inception] [keytag] test.com. ... + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='c.test.com.', qtype=ANY + + % Currently broken in erl-dns because the TTL in the RRSIG is 3600 instead of 84600 + + %{ent_any_dnssec, { + %{question, {"c.test-dnssec.com", ?DNS_TYPE_ANY}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test-dnssec.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"test.com">>, signature = ?TEST_REPLACE}}, + %{<<"blah.test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"b.c.test-dnssec.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC]}}, + %{<<"blah.test-dnssec.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_NSEC, alg = ?DNS_ALG_RSASHA256, labels = 3, original_ttl = 86400, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"test-dnssec.com">>, signature = ?TEST_REPLACE}} + %]}, + %{additional, []} + %}} + %}} + + % Minimal zone (only NS records) Make sure existent hosts without proper type + % generates a correct NSEC denial. + + % 1 minimal.com. IN NSEC 86400 minimal.com. NS SOA RRSIG NSEC DNSKEY + + %{minimal_noerror, { + %{question, {<<"minimal.com">>, ?DNS_TYPE_TXT}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"mimimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}}, + %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RRSIG, 86400, #dns_rrdata_rrsig{type_covered = ?DNS_TYPE_SOA, alg = ?DNS_ALG_RSASHA256, labels = 2, original_ttl = 3600, expiration = ?TEST_REPLACE, inception = ?TEST_REPLACE, key_tag = ?TEST_REPLACE, signers_name = <<"minimal.com">>, signature = ?TEST_REPLACE}}, + %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"minimal.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}} + %]}, + %{authority, []}, + %{additional, []} + %}} + %}} + + % Minimal zone (only NS records) Make sure non-existent hosts generates a correct + % NSEC denial. + + % 1 minimal.com. IN NSEC 86400 minimal.com. NS SOA RRSIG NSEC DNSKEY + + %{minimal_nxdomain, { + %{question, {<<"a.minimal.com">>, ?DNS_TYPE_A}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, + %{additional, [#dns_optrr{dnssec=true}]}, + %{records, { + %{answers, [ + %{<<"minimal.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NSEC, 86400, #dns_rrdata_nsec{next_dname = <<"minimal.com">>, types = [?DNS_TYPE_NS, ?DNS_TYPE_SOA, ?DNS_TYPE_RRSIG, ?DNS_TYPE_NSEC, ?DNS_TYPE_DNSKEY]}} + %]}, + %{authority, []}, + %{additional, []} + %}} + %}} + + % This tests determines if multi-segment NSEC records work. + + % 0 hightype.example.com. IN NSEC 86400 host-0.example.com. A RRSIG NSEC TYPE65534 + % 0 hightype.example.com. IN RRSIG 86400 NSEC 8 3 86400 [expiry] [inception] [keytag] example.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='hightype.example.com.', qtype=NSEC + + % TODO: nsec-bitmap + + % TODO: nsec-glue-at-delegation + % TODO: nsec-glue + % TODO: nsec-middle + % TODO: nsec-wildcard + % TODO: nsec-wraparound + % TODO: nsec-wrong-type-at-apex + % TODO: nsec-wrong-type + % TODO: nsecx-mode2-wildcard-nodata + % TODO: nsecx-mode3-wildcard + % TODO: nxdomain-below-nonempty-terminal + % TODO: nxdomain-for-unknown-record + + % TODO: second-level-nxdomain + % TODO: secure-delegation-ds-ns + % TODO: secure-delegation + % TODO: space-name + + % TODO: two-level-nxdomain + % TODO: underscore-sorting + + % TODO: uppercase-nsec + ]. pdns_definitions() -> - [ - - % 0 aland.test.com. IN TXT 3600 "\195\133LAND ISLANDS" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='aland.test.com.', qtype=TXT - - {'8_bit_txt', { - {question, {"aland.test.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + [ + % 0 aland.test.com. IN TXT 3600 "\195\133LAND ISLANDS" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='aland.test.com.', qtype=TXT + + {'8_bit_txt', { + {question, {"aland.test.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"aland.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 3600, #dns_rrdata_txt{txt = [<<"ÅLAND ISLANDS"/utf8>>]}} - ]}, - {authority, []}, - {additional, []} - }}}}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxdomain.example.com.', qtype=ANY - - {any_nxdomain, { - {question, {"nxdomain.example.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }}}}, - - % 0 example.com. IN MX 120 10 smtp-servers.example.com. - % 0 example.com. IN MX 120 15 smtp-servers.test.com. - % 0 example.com. IN NS 120 ns1.example.com. - % 0 example.com. IN NS 120 ns2.example.com. - % 0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 0 - % 2 ns1.example.com. IN A 120 192.168.1.1 - % 2 ns1.example.com. IN AAAA 120 2001:0db8:85a3:0000:0000:8a2e:0370:7334 - % 2 ns2.example.com. IN A 120 192.168.1.2 - % 2 smtp-servers.example.com. IN A 120 192.168.0.2 - % 2 smtp-servers.example.com. IN A 120 192.168.0.3 - % 2 smtp-servers.example.com. IN A 120 192.168.0.4 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=ANY - - {any_query, { - {question, {"example.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{preference=10, exchange = <<"smtp-servers.example.com">>}}, - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{preference=15, exchange = <<"smtp-servers.test.com">>}}, + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxdomain.example.com.', qtype=ANY + + {any_nxdomain, { + {question, {"nxdomain.example.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NXDOMAIN, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 example.com. IN MX 120 10 smtp-servers.example.com. + % 0 example.com. IN MX 120 15 smtp-servers.test.com. + % 0 example.com. IN NS 120 ns1.example.com. + % 0 example.com. IN NS 120 ns2.example.com. + % 0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 0 + % 2 ns1.example.com. IN A 120 192.168.1.1 + % 2 ns1.example.com. IN AAAA 120 2001:0db8:85a3:0000:0000:8a2e:0370:7334 + % 2 ns2.example.com. IN A 120 192.168.1.2 + % 2 smtp-servers.example.com. IN A 120 192.168.0.2 + % 2 smtp-servers.example.com. IN A 120 192.168.0.3 + % 2 smtp-servers.example.com. IN A 120 192.168.0.4 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=ANY + + {any_query, { + {question, {"example.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + preference = 10, exchange = <<"smtp-servers.example.com">> + }}, + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + preference = 15, exchange = <<"smtp-servers.test.com">> + }}, {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.example.com">>}}, {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.example.com">>}}, - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 100000, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {authority, []}, - {additional, [ - %{<<".">>, ?DNS_CLASS_IN, ?DNS_TYPE_OPT, 0}, - {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,1,1}}}, - {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ip = {8193,3512,34211,0,0,35374,880,29492}}}, - {<<"ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,1,2}}}, - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,2}}}, - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,3}}}, - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,4}}} - ]} - }}}}, - - % 0 www.something.wtest.com. IN A 3600 4.3.2.1 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.something.wtest.com.', qtype=ANY - - {any_wildcard, { - {question, {"www.something.wtest.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"www.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4,3,2,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % Test for A query for test.com in test.com. Should return an AA nodata, since - % there is no A record there. - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='test.com.', qtype=A - - {apex_level_a_but_no_a, { - {question, {"test.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % Test for A query for wtest.com in wtest.com. Should return an AA A record. - - % 0 wtest.com. IN A 3600 9.9.9.9 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='wtest.com.', qtype=A - - {apex_level_a, { - {question, {"wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {9,9,9,9}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % Test for NS query for test.com IN NS blah.test.com at APEX level. Should - % return AA. - - % 0 test.com. IN NS 3600 ns1.test.com. - % 0 test.com. IN NS 3600 ns2.test.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='test.com.', qtype=NS - - {apex_level_ns, { - {question, {"test.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 100000, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {authority, []}, + {additional, [ + %{<<".">>, ?DNS_CLASS_IN, ?DNS_TYPE_OPT, 0}, + {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 1, 1}}}, + {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ + ip = {8193, 3512, 34211, 0, 0, 35374, 880, 29492} + }}, + {<<"ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 1, 2}}}, + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 2}}}, + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 3}}}, + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 4}}} + ]} + }} + }}, + + % 0 www.something.wtest.com. IN A 3600 4.3.2.1 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.something.wtest.com.', qtype=ANY + + {any_wildcard, { + {question, {"www.something.wtest.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"www.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4, 3, 2, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % Test for A query for test.com in test.com. Should return an AA nodata, since + % there is no A record there. + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='test.com.', qtype=A + + {apex_level_a_but_no_a, { + {question, {"test.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.test.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % Test for A query for wtest.com in wtest.com. Should return an AA A record. + + % 0 wtest.com. IN A 3600 9.9.9.9 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='wtest.com.', qtype=A + + {apex_level_a, { + {question, {"wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {9, 9, 9, 9}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % Test for NS query for test.com IN NS blah.test.com at APEX level. Should + % return AA. + + % 0 test.com. IN NS 3600 ns1.test.com. + % 0 test.com. IN NS 3600 ns2.test.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='test.com.', qtype=NS + + {apex_level_ns, { + {question, {"test.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"ns1.test.com">>}}, {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"ns2.test.com">>}} - ]}, - {authority, []}, - {additional, [ - {<<"ns1.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {1,1,1,1}}}, - {<<"ns2.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {2,2,2,2}}} - ]} - }} - }}, - - % 0 outpost.example.com. IN A 120 192.168.2.1 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='outpost.example.com.', qtype=A - - {basic_a_resolution, { - {question, {"outpost.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"outpost.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 ipv6.example.com. IN AAAA 120 2001:6a8:0:1:210:4bff:fe4b:4c61 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='ipv6.example.com.', qtype=AAAA - - {basic_aaaa_resolution, { - {question, {"ipv6.example.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"ipv6.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ip = {8193,1704,0,1,528,19455,65099,19553}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 hwinfo.example.com. IN HINFO 120 "abc" "def" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='hwinfo.example.com.', qtype=HINFO - - {basic_hinfo, { - {question, {"hwinfo.example.com", ?DNS_TYPE_HINFO}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, [ + {<<"ns1.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {1, 1, 1, 1}}}, + {<<"ns2.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {2, 2, 2, 2}}} + ]} + }} + }}, + + % 0 outpost.example.com. IN A 120 192.168.2.1 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='outpost.example.com.', qtype=A + + {basic_a_resolution, { + {question, {"outpost.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"outpost.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 ipv6.example.com. IN AAAA 120 2001:6a8:0:1:210:4bff:fe4b:4c61 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='ipv6.example.com.', qtype=AAAA + + {basic_aaaa_resolution, { + {question, {"ipv6.example.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"ipv6.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ + ip = {8193, 1704, 0, 1, 528, 19455, 65099, 19553} + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 hwinfo.example.com. IN HINFO 120 "abc" "def" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='hwinfo.example.com.', qtype=HINFO + + {basic_hinfo, { + {question, {"hwinfo.example.com", ?DNS_TYPE_HINFO}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"hwinfo.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_HINFO, 120, #dns_rrdata_hinfo{cpu = <<"abc">>, os = <<"def">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 location.example.com. IN LOC 120 51 56 0.123 N 5 54 0.000 E 4.00m 1.00m 10000.00m 10.00m - % 0 location.example.com. IN LOC 120 51 56 1.456 S 5 54 0.000 E 4.00m 2.00m 10000.00m 10.00m - % 0 location.example.com. IN LOC 120 51 56 2.789 N 5 54 0.000 W 4.00m 3.00m 10000.00m 10.00m - % 0 location.example.com. IN LOC 120 51 56 3.012 S 5 54 0.000 W 4.00m 4.00m 10000.00m 10.00m - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='location.example.com.', qtype=LOC - - %{basic_loc, { - %{question, {"location.example.com", ?DNS_TYPE_LOC}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{records, { - %{answers, [ - %{<<"location.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_LOC, 120, #dns_rrdata_loc{lat="51 56 0.123 N", lon="5 54 0.000 E", alt="4.00", size="1.00", horiz="10000.00", vert="10.00"}} - %]}, - %{authority, []}, - %{additional, []} - %}} - %}}, - - % 0 example.com. IN NS 120 ns1.example.com. - % 0 example.com. IN NS 120 ns2.example.com. - % 2 ns1.example.com. IN A 120 192.168.1.1 - % 2 ns1.example.com. IN AAAA 120 2001:0db8:85a3:0000:0000:8a2e:0370:7334 - % 2 ns2.example.com. IN A 120 192.168.1.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=NS - - {basic_ns_resolution, { - {question, {"example.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 location.example.com. IN LOC 120 51 56 0.123 N 5 54 0.000 E 4.00m 1.00m 10000.00m 10.00m + % 0 location.example.com. IN LOC 120 51 56 1.456 S 5 54 0.000 E 4.00m 2.00m 10000.00m 10.00m + % 0 location.example.com. IN LOC 120 51 56 2.789 N 5 54 0.000 W 4.00m 3.00m 10000.00m 10.00m + % 0 location.example.com. IN LOC 120 51 56 3.012 S 5 54 0.000 W 4.00m 4.00m 10000.00m 10.00m + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='location.example.com.', qtype=LOC + + %{basic_loc, { + %{question, {"location.example.com", ?DNS_TYPE_LOC}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{records, { + %{answers, [ + %{<<"location.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_LOC, 120, #dns_rrdata_loc{lat="51 56 0.123 N", lon="5 54 0.000 E", alt="4.00", size="1.00", horiz="10000.00", vert="10.00"}} + %]}, + %{authority, []}, + %{additional, []} + %}} + %}}, + + % 0 example.com. IN NS 120 ns1.example.com. + % 0 example.com. IN NS 120 ns2.example.com. + % 2 ns1.example.com. IN A 120 192.168.1.1 + % 2 ns1.example.com. IN AAAA 120 2001:0db8:85a3:0000:0000:8a2e:0370:7334 + % 2 ns2.example.com. IN A 120 192.168.1.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=NS + + {basic_ns_resolution, { + {question, {"example.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.example.com">>}}, {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.example.com">>}} - ]}, - {authority, []}, - {additional, [ - {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,1,1}}}, - {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ip = {8193,3512,34211,0,0,35374,880,29492}}}, - {<<"ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,1,2}}} - ]} - }} - }}, - - % 0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=SOA - - {basic_soa_resolution, { - {question, {"example.com", ?DNS_TYPE_SOA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 100000, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 _ldap._tcp.dc.test.com. IN SRV 3600 0 100 389 server2.example.net. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='_ldap._tcp.dc.test.com.', qtype=SRV - - {basic_srv_resolution, { - {question, {"_ldap._tcp.dc.test.com", ?DNS_TYPE_SRV}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"_ldap._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{priority=0, weight=100, port=389, target= <<"server2.example.net">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 text.example.com. IN TXT 120 "Hi, this is some text" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='text.example.com.', qtype=TXT - - {basic_txt_resolution, { - {question, {"text.example.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, [ + {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 1, 1}}}, + {<<"ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_AAAA, 120, #dns_rrdata_aaaa{ + ip = {8193, 3512, 34211, 0, 0, 35374, 880, 29492} + }}, + {<<"ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 1, 2}}} + ]} + }} + }}, + + % 0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=SOA + + {basic_soa_resolution, { + {question, {"example.com", ?DNS_TYPE_SOA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 100000, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 _ldap._tcp.dc.test.com. IN SRV 3600 0 100 389 server2.example.net. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='_ldap._tcp.dc.test.com.', qtype=SRV + + {basic_srv_resolution, { + {question, {"_ldap._tcp.dc.test.com", ?DNS_TYPE_SRV}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"_ldap._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{ + priority = 0, weight = 100, port = 389, target = <<"server2.example.net">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 text.example.com. IN TXT 120 "Hi, this is some text" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='text.example.com.', qtype=TXT + + {basic_txt_resolution, { + {question, {"text.example.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"text.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{txt = [<<"Hi, this is some text">>]}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % If a CNAME wildcard is present, but there is also a direct hit for the qname - % but not for the qtype, a NODATA response should ensue. This test runs at the - % root of the domain (the 'apex') - - % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='secure.wtest.com.', qtype=A - - {cname_and_wildcard_at_root, { - {question, {"secure.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.wtest.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % If a CNAME wildcard is present, but it points to a record that - % does not have the requested type, a CNAME should be emitted plus a SOA to - % indicate no match with the right record - - % 0 yo.test.test.com. IN CNAME 3600 server1.test.com. - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='yo.test.test.com.', qtype=AAAA - - {cname_and_wildcard_but_no_correct_type, { - {question, {"yo.test.test.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % If a CNAME wildcard is present, but there is also a direct hit for the qname + % but not for the qtype, a NODATA response should ensue. This test runs at the + % root of the domain (the 'apex') + + % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='secure.wtest.com.', qtype=A + + {cname_and_wildcard_at_root, { + {question, {"secure.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.wtest.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % If a CNAME wildcard is present, but it points to a record that + % does not have the requested type, a CNAME should be emitted plus a SOA to + % indicate no match with the right record + + % 0 yo.test.test.com. IN CNAME 3600 server1.test.com. + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='yo.test.test.com.', qtype=AAAA + + {cname_and_wildcard_but_no_correct_type, { + {question, {"yo.test.test.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"yo.test.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 3600, #dns_rrdata_cname{dname = <<"server1.test.com">>}} - ]}, - {authority, [ - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % If a CNAME wildcard is present, but there is also a direct hit for the qname - % but not for the qtype, a NODATA response should ensue. - % - % In this case www.test.test.com is an A record, but the query is for an MX. - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.test.test.com.', qtype=MX - - {cname_and_wildcard, { - {question, {"www.test.test.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % Tries to resolve the AAAA for www.example.com, which is a CNAME to - % outpost.example.com, which has an A record, but no AAAA record. Should show - % CNAME and SOA. - - % 0 www.example.com. IN CNAME 120 outpost.example.com. - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.example.com.', qtype=AAAA - - {cname_but_no_correct_type, { - {question, {"www.example.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.test.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % If a CNAME wildcard is present, but there is also a direct hit for the qname + % but not for the qtype, a NODATA response should ensue. + % + % In this case www.test.test.com is an A record, but the query is for an MX. + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.test.test.com.', qtype=MX + + {cname_and_wildcard, { + {question, {"www.test.test.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.test.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % Tries to resolve the AAAA for www.example.com, which is a CNAME to + % outpost.example.com, which has an A record, but no AAAA record. Should show + % CNAME and SOA. + + % 0 www.example.com. IN CNAME 120 outpost.example.com. + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.example.com.', qtype=AAAA + + {cname_but_no_correct_type, { + {question, {"www.example.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"www.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"outpost.example.com">>}} - ]}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 0 loop1.example.com. IN CNAME 120 loop2.example.com. - % 0 loop2.example.com. IN CNAME 120 loop3.example.com. - % 0 loop3.example.com. IN CNAME 120 loop1.example.com. - % Rcode: 2, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='loop1.example.com.', qtype=A - - {cname_loop_breakout, { - {question, {"loop1.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_SERVFAIL, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 loop1.example.com. IN CNAME 120 loop2.example.com. + % 0 loop2.example.com. IN CNAME 120 loop3.example.com. + % 0 loop3.example.com. IN CNAME 120 loop1.example.com. + % Rcode: 2, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='loop1.example.com.', qtype=A + + {cname_loop_breakout, { + {question, {"loop1.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_SERVFAIL, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"loop1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"loop2.example.com">>}}, {<<"loop2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"loop3.example.com">>}}, {<<"loop3.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"loop1.example.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % ANY query for a CNAME to a local NXDOMAIN. - - % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxd.example.com.', qtype=ANY - - {cname_to_nxdomain_any, { - {question, {"nxd.example.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % ANY query for a CNAME to a local NXDOMAIN. + + % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxd.example.com.', qtype=ANY + + {cname_to_nxdomain_any, { + {question, {"nxd.example.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"nxd.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % CNAME to a local NXDOMAIN. - - % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='nxd.example.com.', qtype=A - - {cname_to_nxdomain, { - {question, {"nxd.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % CNAME to a local NXDOMAIN. + + % 0 nxd.example.com. IN CNAME 120 nxdomain.example.com. + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='nxd.example.com.', qtype=A + + {cname_to_nxdomain, { + {question, {"nxd.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"nxd.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"nxdomain.example.com">>}} - ]}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 0 server1.example.com. IN CNAME 120 server1.france.example.com. - % 1 france.example.com. IN NS 120 ns1.otherprovider.net. - % 1 france.example.com. IN NS 120 ns2.otherprovider.net. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='server1.example.com.', qtype=A - - {cname_to_referral, { - {question, {"server1.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"server1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"server1.france.example.com">>}} - ]}, - {authority, [ - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} - ]}, - {additional, []} - }} - }}, - - % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. - % 1 . IN NS 518400 a.root-servers.net. - % 1 . IN NS 518400 b.root-servers.net. - % 1 . IN NS 518400 c.root-servers.net. - % 1 . IN NS 518400 d.root-servers.net. - % 1 . IN NS 518400 e.root-servers.net. - % 1 . IN NS 518400 f.root-servers.net. - % 1 . IN NS 518400 g.root-servers.net. - % 1 . IN NS 518400 h.root-servers.net. - % 1 . IN NS 518400 i.root-servers.net. - % 1 . IN NS 518400 j.root-servers.net. - % 1 . IN NS 518400 k.root-servers.net. - % 1 . IN NS 518400 l.root-servers.net. - % 1 . IN NS 518400 m.root-servers.net. - % 2 . IN OPT 32768 - % 2 a.root-servers.net. IN A 3600000 198.41.0.4 - % 2 b.root-servers.net. IN A 3600000 192.228.79.201 - % 2 c.root-servers.net. IN A 3600000 192.33.4.12 - % 2 d.root-servers.net. IN A 3600000 128.8.10.90 - % 2 e.root-servers.net. IN A 3600000 192.203.230.10 - % 2 f.root-servers.net. IN A 3600000 192.5.5.241 - % 2 g.root-servers.net. IN A 3600000 192.112.36.4 - % 2 h.root-servers.net. IN A 3600000 128.63.2.53 - % 2 i.root-servers.net. IN A 3600000 192.36.148.17 - % 2 j.root-servers.net. IN A 3600000 192.58.128.30 - % 2 k.root-servers.net. IN A 3600000 193.0.14.129 - % 2 l.root-servers.net. IN A 3600000 198.32.64.12 - % 2 m.root-servers.net. IN A 3600000 202.12.27.33 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='unauth.example.com.', qtype=ANY - - {cname_to_unauth_any, { - {question, {"unauth.example.com", ?DNS_TYPE_ANY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 server1.example.com. IN CNAME 120 server1.france.example.com. + % 1 france.example.com. IN NS 120 ns1.otherprovider.net. + % 1 france.example.com. IN NS 120 ns2.otherprovider.net. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='server1.example.com.', qtype=A + + {cname_to_referral, { + {question, {"server1.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"server1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"server1.france.example.com">> + }} + ]}, + {authority, [ + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} + ]}, + {additional, []} + }} + }}, + + % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. + % 1 . IN NS 518400 a.root-servers.net. + % 1 . IN NS 518400 b.root-servers.net. + % 1 . IN NS 518400 c.root-servers.net. + % 1 . IN NS 518400 d.root-servers.net. + % 1 . IN NS 518400 e.root-servers.net. + % 1 . IN NS 518400 f.root-servers.net. + % 1 . IN NS 518400 g.root-servers.net. + % 1 . IN NS 518400 h.root-servers.net. + % 1 . IN NS 518400 i.root-servers.net. + % 1 . IN NS 518400 j.root-servers.net. + % 1 . IN NS 518400 k.root-servers.net. + % 1 . IN NS 518400 l.root-servers.net. + % 1 . IN NS 518400 m.root-servers.net. + % 2 . IN OPT 32768 + % 2 a.root-servers.net. IN A 3600000 198.41.0.4 + % 2 b.root-servers.net. IN A 3600000 192.228.79.201 + % 2 c.root-servers.net. IN A 3600000 192.33.4.12 + % 2 d.root-servers.net. IN A 3600000 128.8.10.90 + % 2 e.root-servers.net. IN A 3600000 192.203.230.10 + % 2 f.root-servers.net. IN A 3600000 192.5.5.241 + % 2 g.root-servers.net. IN A 3600000 192.112.36.4 + % 2 h.root-servers.net. IN A 3600000 128.63.2.53 + % 2 i.root-servers.net. IN A 3600000 192.36.148.17 + % 2 j.root-servers.net. IN A 3600000 192.58.128.30 + % 2 k.root-servers.net. IN A 3600000 193.0.14.129 + % 2 l.root-servers.net. IN A 3600000 198.32.64.12 + % 2 m.root-servers.net. IN A 3600000 202.12.27.33 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='unauth.example.com.', qtype=ANY + + {cname_to_unauth_any, { + {question, {"unauth.example.com", ?DNS_TYPE_ANY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"unauth.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"no-idea.example.org">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. - % 1 . IN NS 518400 a.root-servers.net. - % 1 . IN NS 518400 b.root-servers.net. - % 1 . IN NS 518400 c.root-servers.net. - % 1 . IN NS 518400 d.root-servers.net. - % 1 . IN NS 518400 e.root-servers.net. - % 1 . IN NS 518400 f.root-servers.net. - % 1 . IN NS 518400 g.root-servers.net. - % 1 . IN NS 518400 h.root-servers.net. - % 1 . IN NS 518400 i.root-servers.net. - % 1 . IN NS 518400 j.root-servers.net. - % 1 . IN NS 518400 k.root-servers.net. - % 1 . IN NS 518400 l.root-servers.net. - % 1 . IN NS 518400 m.root-servers.net. - % 2 . IN OPT 32768 - % 2 a.root-servers.net. IN A 3600000 198.41.0.4 - % 2 b.root-servers.net. IN A 3600000 192.228.79.201 - % 2 c.root-servers.net. IN A 3600000 192.33.4.12 - % 2 d.root-servers.net. IN A 3600000 128.8.10.90 - % 2 e.root-servers.net. IN A 3600000 192.203.230.10 - % 2 f.root-servers.net. IN A 3600000 192.5.5.241 - % 2 g.root-servers.net. IN A 3600000 192.112.36.4 - % 2 h.root-servers.net. IN A 3600000 128.63.2.53 - % 2 i.root-servers.net. IN A 3600000 192.36.148.17 - % 2 j.root-servers.net. IN A 3600000 192.58.128.30 - % 2 k.root-servers.net. IN A 3600000 193.0.14.129 - % 2 l.root-servers.net. IN A 3600000 198.32.64.12 - % 2 m.root-servers.net. IN A 3600000 202.12.27.33 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='unauth.example.com.', qtype=A - - {cname_to_unauth, { - {question, {"unauth.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 unauth.example.com. IN CNAME 120 no-idea.example.org. + % 1 . IN NS 518400 a.root-servers.net. + % 1 . IN NS 518400 b.root-servers.net. + % 1 . IN NS 518400 c.root-servers.net. + % 1 . IN NS 518400 d.root-servers.net. + % 1 . IN NS 518400 e.root-servers.net. + % 1 . IN NS 518400 f.root-servers.net. + % 1 . IN NS 518400 g.root-servers.net. + % 1 . IN NS 518400 h.root-servers.net. + % 1 . IN NS 518400 i.root-servers.net. + % 1 . IN NS 518400 j.root-servers.net. + % 1 . IN NS 518400 k.root-servers.net. + % 1 . IN NS 518400 l.root-servers.net. + % 1 . IN NS 518400 m.root-servers.net. + % 2 . IN OPT 32768 + % 2 a.root-servers.net. IN A 3600000 198.41.0.4 + % 2 b.root-servers.net. IN A 3600000 192.228.79.201 + % 2 c.root-servers.net. IN A 3600000 192.33.4.12 + % 2 d.root-servers.net. IN A 3600000 128.8.10.90 + % 2 e.root-servers.net. IN A 3600000 192.203.230.10 + % 2 f.root-servers.net. IN A 3600000 192.5.5.241 + % 2 g.root-servers.net. IN A 3600000 192.112.36.4 + % 2 h.root-servers.net. IN A 3600000 128.63.2.53 + % 2 i.root-servers.net. IN A 3600000 192.36.148.17 + % 2 j.root-servers.net. IN A 3600000 192.58.128.30 + % 2 k.root-servers.net. IN A 3600000 193.0.14.129 + % 2 l.root-servers.net. IN A 3600000 198.32.64.12 + % 2 m.root-servers.net. IN A 3600000 202.12.27.33 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='unauth.example.com.', qtype=A + + {cname_to_unauth, { + {question, {"unauth.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"unauth.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"no-idea.example.org">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % A five-long CNAME chain involving wildcards at every step - - % 0 start.example.com. IN CNAME 120 x.y.z.w1.example.com. - % 0 x.y.z.w1.example.com. IN CNAME 120 x.y.z.w2.example.com. - % 0 x.y.z.w2.example.com. IN CNAME 120 x.y.z.w3.example.com. - % 0 x.y.z.w3.example.com. IN CNAME 120 x.y.z.w4.example.com. - % 0 x.y.z.w4.example.com. IN CNAME 120 x.y.z.w5.example.com. - % 0 x.y.z.w5.example.com. IN A 120 1.2.3.5 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='start.example.com.', qtype=A - - {cname_wildcard_chain, { - {question, {"start.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % A five-long CNAME chain involving wildcards at every step + + % 0 start.example.com. IN CNAME 120 x.y.z.w1.example.com. + % 0 x.y.z.w1.example.com. IN CNAME 120 x.y.z.w2.example.com. + % 0 x.y.z.w2.example.com. IN CNAME 120 x.y.z.w3.example.com. + % 0 x.y.z.w3.example.com. IN CNAME 120 x.y.z.w4.example.com. + % 0 x.y.z.w4.example.com. IN CNAME 120 x.y.z.w5.example.com. + % 0 x.y.z.w5.example.com. IN A 120 1.2.3.5 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='start.example.com.', qtype=A + + {cname_wildcard_chain, { + {question, {"start.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"start.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w1.example.com">>}}, {<<"x.y.z.w1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w2.example.com">>}}, {<<"x.y.z.w2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w3.example.com">>}}, {<<"x.y.z.w3.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w4.example.com">>}}, {<<"x.y.z.w4.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"x.y.z.w5.example.com">>}}, - {<<"x.y.z.w5.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1,2,3,5}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % If we CNAME to another locally-hosted domain, return only the CNAME. Resolvers - % will take care of further resolution. - - % 0 semi-external.example.com. IN CNAME 120 bla.something.wtest.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='semi-external.example.com.', qtype=A - - {cross_domain_cname_to_wildcard, { - {question, {"semi-external.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"semi-external.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"bla.something.wtest.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=DNSKEY - - {direct_dnskey, { - {question, {"example.com", ?DNS_TYPE_DNSKEY}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 0 www.something.wtest.com. IN A 3600 4.3.2.1 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.something.wtest.com.', qtype=A - - {direct_wildcard, { - {question, {"www.something.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"www.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4,3,2,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 _double._tcp.dc.test.com. IN SRV 3600 0 100 389 server1.test.com. - % 0 _double._tcp.dc.test.com. IN SRV 3600 1 100 389 server1.test.com. - % 2 server1.test.com. IN A 3600 1.2.3.4 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='_double._tcp.dc.test.com.', qtype=SRV - - {double_srv, { - {question, {"_double._tcp.dc.test.com", ?DNS_TYPE_SRV}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"_double._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{priority=0, weight=100, port=389, target = <<"server1.test.com">>}}, - {<<"_double._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{priority=1, weight=100, port=389, target = <<"server1.test.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 double.example.com. IN A 120 192.168.5.1 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='double.example.com.', qtype=A - - {double, { - {question, {"double.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"double.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,5,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=DS - - {ds_at_apex_noerror, { - {question, {"example.com", ?DNS_TYPE_DS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='c.test.com.', qtype=ANY - - %{ent_any, { - %{question, {"c.test.com", ?DNS_TYPE_ANY}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - %]}, - %{additional, []} - %}} - %}}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='sub.host.sub.example.com.', qtype=A - - % The record name is host.*.sub.example.com, however erldns only supports wildcards in the left-most position. - - %{ent_asterisk, { - %{question, {"sub.host.sub.example.com", ?DNS_TYPE_A}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - %]}, - %{additional, []} - %}} - %}}, - - % TODO: ent_axfr - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='b.c.test.com.', qtype=TXT - - {ent_rr_enclosed_in_ent, { - {question, {"b.c.test.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='c.test.com.', qtype=SOA - - %{ent_soa, { - %{question, {"c.test.com", ?DNS_TYPE_SOA}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - %]}, - %{additional, []} - %}} - %}}, - - % 0 something.a.b.c.test.com. IN A 3600 8.7.6.5 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='something.a.b.c.test.com.', qtype=A - - {ent_wildcard_below_ent, { - {question, {"something.a.b.c.test.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"something.a.b.c.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {8,7,6,5}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='c.test.com.', qtype=A - - %{ent, { - %{question, {"c.test.com", ?DNS_TYPE_A}}, - %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - %{records, { - %{answers, []}, - %{authority, [ - %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - %]}, - %{additional, []} - %}} - %}}, - - % 4 TXT records with 0 to 3 backslashes before a semicolon. - - % 0 text0.example.com. IN TXT 120 "k=rsa; p=one" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='text0.example.com.', qtype=TXT - - {escaped_txt_1, { - {question, {"text0.example.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + {<<"x.y.z.w5.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {1, 2, 3, 5}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % If we CNAME to another locally-hosted domain, return only the CNAME. Resolvers + % will take care of further resolution. + + % 0 semi-external.example.com. IN CNAME 120 bla.something.wtest.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='semi-external.example.com.', qtype=A + + {cross_domain_cname_to_wildcard, { + {question, {"semi-external.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"semi-external.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{ + dname = <<"bla.something.wtest.com">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=DNSKEY + + {direct_dnskey, { + {question, {"example.com", ?DNS_TYPE_DNSKEY}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 www.something.wtest.com. IN A 3600 4.3.2.1 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.something.wtest.com.', qtype=A + + {direct_wildcard, { + {question, {"www.something.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"www.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4, 3, 2, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 _double._tcp.dc.test.com. IN SRV 3600 0 100 389 server1.test.com. + % 0 _double._tcp.dc.test.com. IN SRV 3600 1 100 389 server1.test.com. + % 2 server1.test.com. IN A 3600 1.2.3.4 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='_double._tcp.dc.test.com.', qtype=SRV + + {double_srv, { + {question, {"_double._tcp.dc.test.com", ?DNS_TYPE_SRV}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"_double._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{ + priority = 0, weight = 100, port = 389, target = <<"server1.test.com">> + }}, + {<<"_double._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{ + priority = 1, weight = 100, port = 389, target = <<"server1.test.com">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 double.example.com. IN A 120 192.168.5.1 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='double.example.com.', qtype=A + + {double, { + {question, {"double.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"double.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 5, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=DS + + {ds_at_apex_noerror, { + {question, {"example.com", ?DNS_TYPE_DS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='c.test.com.', qtype=ANY + + %{ent_any, { + %{question, {"c.test.com", ?DNS_TYPE_ANY}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} + %]}, + %{additional, []} + %}} + %}}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='sub.host.sub.example.com.', qtype=A + + % The record name is host.*.sub.example.com, however erldns only supports wildcards in the left-most position. + + %{ent_asterisk, { + %{question, {"sub.host.sub.example.com", ?DNS_TYPE_A}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} + %]}, + %{additional, []} + %}} + %}}, + + % TODO: ent_axfr + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='b.c.test.com.', qtype=TXT + + {ent_rr_enclosed_in_ent, { + {question, {"b.c.test.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.test.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='c.test.com.', qtype=SOA + + %{ent_soa, { + %{question, {"c.test.com", ?DNS_TYPE_SOA}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} + %]}, + %{additional, []} + %}} + %}}, + + % 0 something.a.b.c.test.com. IN A 3600 8.7.6.5 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='something.a.b.c.test.com.', qtype=A + + {ent_wildcard_below_ent, { + {question, {"something.a.b.c.test.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"something.a.b.c.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {8, 7, 6, 5}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='c.test.com.', qtype=A + + %{ent, { + %{question, {"c.test.com", ?DNS_TYPE_A}}, + %{header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, + %{records, { + %{answers, []}, + %{authority, [ + %{<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} + %]}, + %{additional, []} + %}} + %}}, + + % 4 TXT records with 0 to 3 backslashes before a semicolon. + + % 0 text0.example.com. IN TXT 120 "k=rsa; p=one" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='text0.example.com.', qtype=TXT + + {escaped_txt_1, { + {question, {"text0.example.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"text0.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{txt = [<<"k=rsa; p=one">>]}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % A series of CNAME pointers can lead to an outside reference, which should be - % passed in the Answer section. PowerDNS sends an unauthoritative NOERROR, - % bind sends a SERVFAIL. - - % 0 external.example.com. IN CNAME 120 somewhere.else.net. - % 1 . IN NS 518400 a.root-servers.net. - % 1 . IN NS 518400 b.root-servers.net. - % 1 . IN NS 518400 c.root-servers.net. - % 1 . IN NS 518400 d.root-servers.net. - % 1 . IN NS 518400 e.root-servers.net. - % 1 . IN NS 518400 f.root-servers.net. - % 1 . IN NS 518400 g.root-servers.net. - % 1 . IN NS 518400 h.root-servers.net. - % 1 . IN NS 518400 i.root-servers.net. - % 1 . IN NS 518400 j.root-servers.net. - % 1 . IN NS 518400 k.root-servers.net. - % 1 . IN NS 518400 l.root-servers.net. - % 1 . IN NS 518400 m.root-servers.net. - % 2 a.root-servers.net. IN A 3600000 198.41.0.4 - % 2 b.root-servers.net. IN A 3600000 192.228.79.201 - % 2 c.root-servers.net. IN A 3600000 192.33.4.12 - % 2 d.root-servers.net. IN A 3600000 128.8.10.90 - % 2 e.root-servers.net. IN A 3600000 192.203.230.10 - % 2 f.root-servers.net. IN A 3600000 192.5.5.241 - % 2 g.root-servers.net. IN A 3600000 192.112.36.4 - % 2 h.root-servers.net. IN A 3600000 128.63.2.53 - % 2 i.root-servers.net. IN A 3600000 192.36.148.17 - % 2 j.root-servers.net. IN A 3600000 192.58.128.30 - % 2 k.root-servers.net. IN A 3600000 193.0.14.129 - % 2 l.root-servers.net. IN A 3600000 198.32.64.12 - % 2 m.root-servers.net. IN A 3600000 202.12.27.33 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='external.example.com.', qtype=A - - {external_cname_pointer, { - {question, {"external.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % A series of CNAME pointers can lead to an outside reference, which should be + % passed in the Answer section. PowerDNS sends an unauthoritative NOERROR, + % bind sends a SERVFAIL. + + % 0 external.example.com. IN CNAME 120 somewhere.else.net. + % 1 . IN NS 518400 a.root-servers.net. + % 1 . IN NS 518400 b.root-servers.net. + % 1 . IN NS 518400 c.root-servers.net. + % 1 . IN NS 518400 d.root-servers.net. + % 1 . IN NS 518400 e.root-servers.net. + % 1 . IN NS 518400 f.root-servers.net. + % 1 . IN NS 518400 g.root-servers.net. + % 1 . IN NS 518400 h.root-servers.net. + % 1 . IN NS 518400 i.root-servers.net. + % 1 . IN NS 518400 j.root-servers.net. + % 1 . IN NS 518400 k.root-servers.net. + % 1 . IN NS 518400 l.root-servers.net. + % 1 . IN NS 518400 m.root-servers.net. + % 2 a.root-servers.net. IN A 3600000 198.41.0.4 + % 2 b.root-servers.net. IN A 3600000 192.228.79.201 + % 2 c.root-servers.net. IN A 3600000 192.33.4.12 + % 2 d.root-servers.net. IN A 3600000 128.8.10.90 + % 2 e.root-servers.net. IN A 3600000 192.203.230.10 + % 2 f.root-servers.net. IN A 3600000 192.5.5.241 + % 2 g.root-servers.net. IN A 3600000 192.112.36.4 + % 2 h.root-servers.net. IN A 3600000 128.63.2.53 + % 2 i.root-servers.net. IN A 3600000 192.36.148.17 + % 2 j.root-servers.net. IN A 3600000 192.58.128.30 + % 2 k.root-servers.net. IN A 3600000 193.0.14.129 + % 2 l.root-servers.net. IN A 3600000 198.32.64.12 + % 2 m.root-servers.net. IN A 3600000 202.12.27.33 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='external.example.com.', qtype=A + + {external_cname_pointer, { + {question, {"external.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"external.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"somewhere.else.net">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 www.a.b.c.d.e.something.wtest.com. IN A 3600 4.3.2.1 - % 0 www.a.b.c.d.e.something.wtest.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] wtest.com. ... - % 1 a.something.wtest.com. IN NSEC 86400 wtest.com. A RRSIG NSEC - % 1 a.something.wtest.com. IN RRSIG 86400 NSEC 8 4 86400 [expiry] [inception] [keytag] wtest.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.a.b.c.d.e.something.wtest.com.', qtype=A - - {five_levels_wildcard_one_below_apex, { - {question, {"www.a.b.c.d.e.something.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"www.a.b.c.d.e.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4,3,2,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 www.a.b.c.d.e.wtest.com. IN A 3600 6.7.8.9 - % 0 www.a.b.c.d.e.wtest.com. IN RRSIG 3600 A 8 7 3600 [expiry] [inception] [keytag] wtest.com. ... - % 1 *.a.b.c.d.e.wtest.com. IN NSEC 86400 ns1.wtest.com. A RRSIG NSEC - % 1 *.a.b.c.d.e.wtest.com. IN RRSIG 86400 NSEC 8 7 86400 [expiry] [inception] [keytag] wtest.com. ... - % 2 . IN OPT 32768 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.a.b.c.d.e.wtest.com.', qtype=A - - {five_levels_wildcard, { - {question, {"www.a.b.c.d.e.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"www.a.b.c.d.e.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {6,7,8,9}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % Verify that asking for A of a glue record returns a referral. - - % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. - % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. - % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 - % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='usa-ns2.usa.example.com.', qtype=A - - {glue_record, { - {question, {"usa-ns2.usa.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} - ]}, - {additional, [ - {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,1}}}, - {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,2}}} - ]} - }} - }}, - - % When something.example.com is delegated to NS records that reside *within* - % something.example.com, glue is needed. The IP addresses of the relevant NS - % records should then be provided in the additional section. - - % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. - % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. - % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 - % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='www.usa.example.com.', qtype=A - - {glue_referral, { - {question, {"www.usa.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} - ]}, - {additional, [ - {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,1}}}, - {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,2}}} - ]} - }} - }}, - - % 1 italy.example.com. IN NS 120 italy-ns1.example.com. - % 1 italy.example.com. IN NS 120 italy-ns2.example.com. - % 2 italy-ns1.example.com. IN A 120 192.168.5.1 - % 2 italy-ns2.example.com. IN A 120 192.168.5.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='www.italy.example.com.', qtype=A - - {internal_referral, { - {question, {"www.italy.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"italy.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"italy-ns1.example.com">>}}, - {<<"italy.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"italy-ns2.example.com">>}} - ]}, - {additional, [ - {<<"italy-ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,5,1}}}, - {<<"italy-ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,5,2}}} - ]} - }} - }}, - - {internal_referral_glue, { - {question, {"italy-ns1.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"italy-ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,5,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.test.com.', qtype=TXT - - {long_name, { - {question, {"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.test.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.test.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 0 start1.example.com. IN CNAME 120 start2.example.com. - % 0 start2.example.com. IN CNAME 120 start3.example.com. - % 0 start3.example.com. IN CNAME 120 start4.example.com. - % 0 start4.example.com. IN A 120 192.168.2.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='start1.example.com.', qtype=A - - {multi_step_cname_resolution, { - {question, {"start1.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 www.a.b.c.d.e.something.wtest.com. IN A 3600 4.3.2.1 + % 0 www.a.b.c.d.e.something.wtest.com. IN RRSIG 3600 A 8 3 3600 [expiry] [inception] [keytag] wtest.com. ... + % 1 a.something.wtest.com. IN NSEC 86400 wtest.com. A RRSIG NSEC + % 1 a.something.wtest.com. IN RRSIG 86400 NSEC 8 4 86400 [expiry] [inception] [keytag] wtest.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.a.b.c.d.e.something.wtest.com.', qtype=A + + {five_levels_wildcard_one_below_apex, { + {question, {"www.a.b.c.d.e.something.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"www.a.b.c.d.e.something.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {4, 3, 2, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 www.a.b.c.d.e.wtest.com. IN A 3600 6.7.8.9 + % 0 www.a.b.c.d.e.wtest.com. IN RRSIG 3600 A 8 7 3600 [expiry] [inception] [keytag] wtest.com. ... + % 1 *.a.b.c.d.e.wtest.com. IN NSEC 86400 ns1.wtest.com. A RRSIG NSEC + % 1 *.a.b.c.d.e.wtest.com. IN RRSIG 86400 NSEC 8 7 86400 [expiry] [inception] [keytag] wtest.com. ... + % 2 . IN OPT 32768 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.a.b.c.d.e.wtest.com.', qtype=A + + {five_levels_wildcard, { + {question, {"www.a.b.c.d.e.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"www.a.b.c.d.e.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {6, 7, 8, 9}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % Verify that asking for A of a glue record returns a referral. + + % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. + % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. + % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 + % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='usa-ns2.usa.example.com.', qtype=A + + {glue_record, { + {question, {"usa-ns2.usa.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} + ]}, + {additional, [ + {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 1}}}, + {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 2}}} + ]} + }} + }}, + + % When something.example.com is delegated to NS records that reside *within* + % something.example.com, glue is needed. The IP addresses of the relevant NS + % records should then be provided in the additional section. + + % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. + % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. + % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 + % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='www.usa.example.com.', qtype=A + + {glue_referral, { + {question, {"www.usa.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} + ]}, + {additional, [ + {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 1}}}, + {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 2}}} + ]} + }} + }}, + + % 1 italy.example.com. IN NS 120 italy-ns1.example.com. + % 1 italy.example.com. IN NS 120 italy-ns2.example.com. + % 2 italy-ns1.example.com. IN A 120 192.168.5.1 + % 2 italy-ns2.example.com. IN A 120 192.168.5.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='www.italy.example.com.', qtype=A + + {internal_referral, { + {question, {"www.italy.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"italy.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"italy-ns1.example.com">>}}, + {<<"italy.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"italy-ns2.example.com">>}} + ]}, + {additional, [ + {<<"italy-ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 5, 1}}}, + {<<"italy-ns2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 5, 2}}} + ]} + }} + }}, + + {internal_referral_glue, { + {question, {"italy-ns1.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"italy-ns1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 5, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 test.com. IN SOA 3600 ns1.test.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.test.com.', qtype=TXT + + {long_name, { + {question, + {"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.test.com", + ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NXDOMAIN, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.test.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 start1.example.com. IN CNAME 120 start2.example.com. + % 0 start2.example.com. IN CNAME 120 start3.example.com. + % 0 start3.example.com. IN CNAME 120 start4.example.com. + % 0 start4.example.com. IN A 120 192.168.2.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='start1.example.com.', qtype=A + + {multi_step_cname_resolution, { + {question, {"start1.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"start1.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"start2.example.com">>}}, {<<"start2.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"start3.example.com">>}}, {<<"start3.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"start4.example.com">>}}, - {<<"start4.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,2}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 escapedtext.example.com. IN TXT 120 "begin" "the \"middle\" p\\art" "the end" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='escapedtext.example.com.', qtype=TXT - - {multi_txt_escape_resolution, { - {question, {"escapedtext.example.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"escapedtext.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{txt = [<<"begin">>,<<"the \"middle\" p\\art">>, <<"the end">>]}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 multitext.example.com. IN TXT 120 "text part one" "text part two" "text part three" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='multitext.example.com.', qtype=TXT - - {multi_txt_resolution, { - {question, {"multitext.example.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"multitext.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{txt = [<<"text part one">>,<<"text part two">>, <<"text part three">>]}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % Example.com has two MX records, one of which is out-of-bailiwick and should - % not receive additional processing. The other is internal to the zone and has - % three A records, which should all be in the additional section. For - % additional difficulty, the question contains an odd CaSe. - - % 0 exAmplE.com. IN MX 120 10 smtp-servers.exAmplE.com. - % 0 exAmplE.com. IN MX 120 15 smtp-servers.test.com. - % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.2 - % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.3 - % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.4 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='exAmplE.com.', qtype=MX - - {mx_case_sensitivity_with_ap, { - {question, {"exAmplE.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"smtp-servers.exAmplE.com">>, preference = 10}}, - {<<"exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"smtp-servers.test.com">>, preference = 15}} - ]}, - {authority, []}, - {additional, [ - {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,2}}}, - {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,3}}}, - {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,4}}} - ]} - }} - }}, - - % MX records cannot point to CNAMEs, according to the RFC. Yet when this - % happens, a nameserver should not fall over, but let the mailserver process - % the CNAME further (all do, even qmail). - - % 0 mail.example.com. IN MX 120 25 smtp1.example.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='mail.example.com.', qtype=MX - - {mx_to_cname, { - {question, {"mail.example.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"mail.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"smtp1.example.com">>, preference = 25}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 0 example.com. IN MX 120 10 smtp-servers.example.com. - % 0 example.com. IN MX 120 15 smtp-servers.test.com. - % 2 smtp-servers.example.com. IN A 120 192.168.0.2 - % 2 smtp-servers.example.com. IN A 120 192.168.0.3 - % 2 smtp-servers.example.com. IN A 120 192.168.0.4 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='example.com.', qtype=MX - - {mx_with_simple_additional_processing, { - {question, {"example.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"smtp-servers.example.com">>, preference = 10}}, - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"smtp-servers.test.com">>, preference = 15}} - ]}, - {authority, []}, - {additional, [ - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,2}}}, - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,3}}}, - {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,0,4}}} - ]} - }} - }}, - - % 0 enum.test.com. IN NAPTR 3600 100 50 "u" "e2u+sip" "" testuser.domain.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='enum.test.com.', qtype=NAPTR - - {naptr, { - {question, {"enum.test.com", ?DNS_TYPE_NAPTR}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"enum.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NAPTR, 3600, #dns_rrdata_naptr{order = 100, preference = 50, flags = <<"u">>, services = <<"e2u+sip">>, regexp = <<>>, replacement = <<"testuser.domain.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='ns2.example.com.', qtype=AAAA - - {non_existing_record_other_types_exist_ns, { - {question, {"ns2.example.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='outpost.example.com.', qtype=AAAA - - {non_existing_record_other_types_exist, { - {question, {"outpost.example.com", ?DNS_TYPE_AAAA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % Verify that asking for NS at a delegation point returns a referral. - - % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. - % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. - % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 - % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='usa.example.com.', qtype=NS - - {ns_at_delegation, { - {question, {"usa.example.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, - {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} - ]}, - {additional, [ - {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,1}}}, - {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,4,2}}} - ]} - }} - }}, - - % 1 blah.test.com. IN NS 3600 blah.test.com. - % 2 blah.test.com. IN A 3600 192.168.6.1 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='blah.test.com.', qtype=MX - - {ns_with_identical_glue, { - {question, {"blah.test.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"blah.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"blah.test.com">>}} - ]}, - {additional, [ - {<<"blah.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {192,168,6,1}}} - ]} - }} - }}, - - % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='no-such-host.example.com.', qtype=A - - {nx_domain_for_unknown_record, { - {question, {"no-such-host.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{mname = <<"ns1.example.com">>, rname = <<"ahu.example.com">>, serial=2000081501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % If there is a more-specific subtree that matches part of a name, - % a less-specific wildcard cannot match it. - - % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.a.something.wtest.com.', qtype=A - - {obscured_wildcard, { - {question, {"www.a.something.wtest.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NXDOMAIN, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.wtest.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }}, - - % 0 outpost.example.com. IN A 120 192.168.2.1 - % 0 www.example.com. IN CNAME 120 outpost.example.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.example.com.', qtype=A - - {one_step_cname_resolution, { - {question, {"www.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + {<<"start4.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 2}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 escapedtext.example.com. IN TXT 120 "begin" "the \"middle\" p\\art" "the end" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='escapedtext.example.com.', qtype=TXT + + {multi_txt_escape_resolution, { + {question, {"escapedtext.example.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"escapedtext.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{ + txt = [<<"begin">>, <<"the \"middle\" p\\art">>, <<"the end">>] + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 multitext.example.com. IN TXT 120 "text part one" "text part two" "text part three" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='multitext.example.com.', qtype=TXT + + {multi_txt_resolution, { + {question, {"multitext.example.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"multitext.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 120, #dns_rrdata_txt{ + txt = [<<"text part one">>, <<"text part two">>, <<"text part three">>] + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % Example.com has two MX records, one of which is out-of-bailiwick and should + % not receive additional processing. The other is internal to the zone and has + % three A records, which should all be in the additional section. For + % additional difficulty, the question contains an odd CaSe. + + % 0 exAmplE.com. IN MX 120 10 smtp-servers.exAmplE.com. + % 0 exAmplE.com. IN MX 120 15 smtp-servers.test.com. + % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.2 + % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.3 + % 2 smtp-servers.exAmplE.com. IN A 120 192.168.0.4 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='exAmplE.com.', qtype=MX + + {mx_case_sensitivity_with_ap, { + {question, {"exAmplE.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"smtp-servers.exAmplE.com">>, preference = 10 + }}, + {<<"exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"smtp-servers.test.com">>, preference = 15 + }} + ]}, + {authority, []}, + {additional, [ + {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 2}}}, + {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 3}}}, + {<<"smtp-servers.exAmplE.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 4}}} + ]} + }} + }}, + + % MX records cannot point to CNAMEs, according to the RFC. Yet when this + % happens, a nameserver should not fall over, but let the mailserver process + % the CNAME further (all do, even qmail). + + % 0 mail.example.com. IN MX 120 25 smtp1.example.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='mail.example.com.', qtype=MX + + {mx_to_cname, { + {question, {"mail.example.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"mail.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"smtp1.example.com">>, preference = 25 + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 example.com. IN MX 120 10 smtp-servers.example.com. + % 0 example.com. IN MX 120 15 smtp-servers.test.com. + % 2 smtp-servers.example.com. IN A 120 192.168.0.2 + % 2 smtp-servers.example.com. IN A 120 192.168.0.3 + % 2 smtp-servers.example.com. IN A 120 192.168.0.4 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='example.com.', qtype=MX + + {mx_with_simple_additional_processing, { + {question, {"example.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"smtp-servers.example.com">>, preference = 10 + }}, + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"smtp-servers.test.com">>, preference = 15 + }} + ]}, + {authority, []}, + {additional, [ + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 2}}}, + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 3}}}, + {<<"smtp-servers.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 0, 4}}} + ]} + }} + }}, + + % 0 enum.test.com. IN NAPTR 3600 100 50 "u" "e2u+sip" "" testuser.domain.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='enum.test.com.', qtype=NAPTR + + {naptr, { + {question, {"enum.test.com", ?DNS_TYPE_NAPTR}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"enum.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NAPTR, 3600, #dns_rrdata_naptr{ + order = 100, + preference = 50, + flags = <<"u">>, + services = <<"e2u+sip">>, + regexp = <<>>, + replacement = <<"testuser.domain.com">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='ns2.example.com.', qtype=AAAA + + {non_existing_record_other_types_exist_ns, { + {question, {"ns2.example.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='outpost.example.com.', qtype=AAAA + + {non_existing_record_other_types_exist, { + {question, {"outpost.example.com", ?DNS_TYPE_AAAA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % Verify that asking for NS at a delegation point returns a referral. + + % 1 usa.example.com. IN NS 120 usa-ns1.usa.example.com. + % 1 usa.example.com. IN NS 120 usa-ns2.usa.example.com. + % 2 usa-ns1.usa.example.com. IN A 120 192.168.4.1 + % 2 usa-ns2.usa.example.com. IN A 120 192.168.4.2 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='usa.example.com.', qtype=NS + + {ns_at_delegation, { + {question, {"usa.example.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns1.usa.example.com">>}}, + {<<"usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"usa-ns2.usa.example.com">>}} + ]}, + {additional, [ + {<<"usa-ns1.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 1}}}, + {<<"usa-ns2.usa.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 4, 2}}} + ]} + }} + }}, + + % 1 blah.test.com. IN NS 3600 blah.test.com. + % 2 blah.test.com. IN A 3600 192.168.6.1 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='blah.test.com.', qtype=MX + + {ns_with_identical_glue, { + {question, {"blah.test.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"blah.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"blah.test.com">>}} + ]}, + {additional, [ + {<<"blah.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {192, 168, 6, 1}}} + ]} + }} + }}, + + % 1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='no-such-host.example.com.', qtype=A + + {nx_domain_for_unknown_record, { + {question, {"no-such-host.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NXDOMAIN, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 86400, #dns_rrdata_soa{ + mname = <<"ns1.example.com">>, + rname = <<"ahu.example.com">>, + serial = 2000081501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % If there is a more-specific subtree that matches part of a name, + % a less-specific wildcard cannot match it. + + % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 3, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.a.something.wtest.com.', qtype=A + + {obscured_wildcard, { + {question, {"www.a.something.wtest.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NXDOMAIN, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.wtest.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }}, + + % 0 outpost.example.com. IN A 120 192.168.2.1 + % 0 www.example.com. IN CNAME 120 outpost.example.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.example.com.', qtype=A + + {one_step_cname_resolution, { + {question, {"www.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"www.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 120, #dns_rrdata_cname{dname = <<"outpost.example.com">>}}, - {<<"outpost.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,2,1}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 france.example.com. IN NS 120 ns1.otherprovider.net. - % 1 france.example.com. IN NS 120 ns2.otherprovider.net. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='www.france.example.com.', qtype=A - - {out_of_baliwick_referral, { - {question, {"www.france.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} - ]}, - {additional, []} - }} - }}, - - % DNS employs label compression to fit big answers in a small packet. This - % test performs a query that without proper compression would not fit. - - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.1 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.10 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.11 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.12 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.13 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.14 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.15 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.16 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.17 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.18 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.19 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.2 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.20 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.21 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.22 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.23 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.24 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.25 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.3 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.4 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.5 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.6 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.7 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.8 - % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.9 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='toomuchinfo-a.example.com.', qtype=A - - {pretty_big_packet, { - {question, {"toomuchinfo-a.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,1}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,2}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,3}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,4}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,5}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,6}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,7}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,8}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,9}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,10}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,11}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,12}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,13}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,14}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,15}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,16}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,17}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,18}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,19}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,20}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,21}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,22}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,23}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,24}}}, - {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,25}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % This test makes sure an CNAME record pointing at the root works - - % 0 toroot.test.com. IN CNAME 3600 . - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='toroot.test.com.', qtype=CNAME - - {root_cname, { - {question, {"toroot.test.com", ?DNS_TYPE_CNAME}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + {<<"outpost.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 2, 1}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 france.example.com. IN NS 120 ns1.otherprovider.net. + % 1 france.example.com. IN NS 120 ns2.otherprovider.net. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='www.france.example.com.', qtype=A + + {out_of_baliwick_referral, { + {question, {"www.france.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} + ]}, + {additional, []} + }} + }}, + + % DNS employs label compression to fit big answers in a small packet. This + % test performs a query that without proper compression would not fit. + + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.1 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.10 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.11 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.12 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.13 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.14 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.15 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.16 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.17 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.18 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.19 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.2 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.20 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.21 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.22 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.23 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.24 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.25 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.3 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.4 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.5 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.6 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.7 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.8 + % 0 toomuchinfo-a.example.com. IN A 120 192.168.99.9 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='toomuchinfo-a.example.com.', qtype=A + + {pretty_big_packet, { + {question, {"toomuchinfo-a.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 1}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 2}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 3}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 4}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 5}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 6}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 7}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 8}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 9}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 10}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 11}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 12}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 13}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 14}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 15}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 16}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 17}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 18}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 19}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 20}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 21}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 22}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 23}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 24}}}, + {<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 25}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % This test makes sure an CNAME record pointing at the root works + + % 0 toroot.test.com. IN CNAME 3600 . + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='toroot.test.com.', qtype=CNAME + + {root_cname, { + {question, {"toroot.test.com", ?DNS_TYPE_CNAME}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"toroot.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_CNAME, 3600, #dns_rrdata_cname{dname = <<"">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % This test makes sure an MX record pointing at the root works - - % 0 test.com. IN MX 3600 10 . - % 0 test.com. IN MX 3600 15 smtp-servers.test.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='test.com.', qtype=MX - - {root_mx, { - {question, {"test.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % This test makes sure an MX record pointing at the root works + + % 0 test.com. IN MX 3600 10 . + % 0 test.com. IN MX 3600 15 smtp-servers.test.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='test.com.', qtype=MX + + {root_mx, { + {question, {"test.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 3600, #dns_rrdata_mx{exchange = <<"">>, preference = 10}}, - {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 3600, #dns_rrdata_mx{exchange = <<"smtp-servers.test.com">>, preference = 15}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - - % This test makes sure an NS record pointing at the root works - - % 0 wtest.com. IN NS 3600 . - % 0 wtest.com. IN NS 3600 ns1.wtest.com. - % 2 ns1.wtest.com. IN A 3600 2.3.4.5 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='wtest.com.', qtype=NS - - {root_ns, { - {question, {"wtest.com", ?DNS_TYPE_NS}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ + {<<"test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 3600, #dns_rrdata_mx{ + exchange = <<"smtp-servers.test.com">>, preference = 15 + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % This test makes sure an NS record pointing at the root works + + % 0 wtest.com. IN NS 3600 . + % 0 wtest.com. IN NS 3600 ns1.wtest.com. + % 2 ns1.wtest.com. IN A 3600 2.3.4.5 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='wtest.com.', qtype=NS + + {root_ns, { + {question, {"wtest.com", ?DNS_TYPE_NS}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"">>}}, {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"ns1.wtest.com">>}} - ]}, - {authority, []}, - {additional, [ - {<<"ns1.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {2,3,4,5}}} - ]} - }} - }}, - - - % This test makes sure an SRV record pointing at the root works - - % 0 _root._tcp.dc.test.com. IN SRV 3600 0 0 0 . - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='_root._tcp.dc.test.com.', qtype=SRV - - {root_srv, { - {question, {"_root._tcp.dc.test.com", ?DNS_TYPE_SRV}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"_root._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{priority=0, weight=0, port=0, target= <<"">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - - - % 0 server1.test.com. IN RP 3600 ahu.ds9a.nl. counter.test.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='server1.test.com.', qtype=RP - - {rp, { - {question, {"server1.test.com", ?DNS_TYPE_RP}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"server1.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RP, 3600, #dns_rrdata_rp{mbox = <<"ahu.ds9a.nl">>, txt = <<"counter.test.com">>}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % A referral with the same name as the NS record itself, but now for a SOA - % record. - - % 1 france.example.com. IN NS 120 ns1.otherprovider.net. - % 1 france.example.com. IN NS 120 ns2.otherprovider.net. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='france.example.com.', qtype=SOA - - {same_level_referral_soa, { - {question, {"france.example.com", ?DNS_TYPE_SOA}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} - ]}, - {additional, []} - }} - }}, - - % 1 france.example.com. IN NS 120 ns1.otherprovider.net. - % 1 france.example.com. IN NS 120 ns2.otherprovider.net. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='france.example.com.', qtype=A - - {same_level_referral, { - {question, {"france.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, - {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} - ]}, - {additional, []} - }} - }}, - - % UDP dns packets can only be 512 bytes long - when they are longer, they need - % to get truncated, and have the 'TC' bit set, to inform the client that they - % need to requery over TCP. This query however does not need truncation, since - % the information that causes things to go over limit is 'additional'. - - % 0 together-too-much.example.com. IN MX 120 25 toomuchinfo-a.example.com. - % 0 together-too-much.example.com. IN MX 120 25 toomuchinfo-b.example.com. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='together-too-much.example.com.', qtype=MX - - {too_big_for_udp_query_no_truncate_additional, { - {question, {"together-too-much.example.com", ?DNS_TYPE_MX}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"together-too-much.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"toomuchinfo-a.example.com">>, preference = 25}}, - {<<"together-too-much.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{exchange = <<"toomuchinfo-b.example.com">>, preference = 25}} - ]}, - {authority, []}, - {additional, [ - % In our case we just don't send any additionals if the packet is too large, since it is a performance - % enhancement only. - - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,1}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,2}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,3}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,4}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,5}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,6}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,7}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,8}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,9}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,10}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,11}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,12}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,13}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,14}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,15}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,16}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,17}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,18}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,19}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,20}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,21}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,22}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,23}}}, - %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,24}}} - ]} - }} - }}, - - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. - % Rcode: 0, RD: 0, QR: 1, TC: 1, AA: 1, opcode: 0 - % Reply to question for qname='toomuchinfo-b.example.com.', qtype=A - - {too_big_for_udp_query, { - {question, {"toomuchinfo-b.example.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=true, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,26}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,27}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,28}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,29}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,30}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,31}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,32}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,33}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,34}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,35}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,36}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,37}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,38}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,39}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,40}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,41}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,42}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,43}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,44}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,45}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,46}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,47}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,48}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,49}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,50}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,51}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,52}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,53}}}, - {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,54}}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % When asked for a domain for which a nameserver is not authoritative, it - % should return with an empty no-error packet, and drop the AA bit - - % 1 . IN NS 518400 a.root-servers.net. - % 1 . IN NS 518400 b.root-servers.net. - % 1 . IN NS 518400 c.root-servers.net. - % 1 . IN NS 518400 d.root-servers.net. - % 1 . IN NS 518400 e.root-servers.net. - % 1 . IN NS 518400 f.root-servers.net. - % 1 . IN NS 518400 g.root-servers.net. - % 1 . IN NS 518400 h.root-servers.net. - % 1 . IN NS 518400 i.root-servers.net. - % 1 . IN NS 518400 j.root-servers.net. - % 1 . IN NS 518400 k.root-servers.net. - % 1 . IN NS 518400 l.root-servers.net. - % 1 . IN NS 518400 m.root-servers.net. - % 2 a.root-servers.net. IN A 3600000 198.41.0.4 - % 2 b.root-servers.net. IN A 3600000 192.228.79.201 - % 2 c.root-servers.net. IN A 3600000 192.33.4.12 - % 2 d.root-servers.net. IN A 3600000 128.8.10.90 - % 2 e.root-servers.net. IN A 3600000 192.203.230.10 - % 2 f.root-servers.net. IN A 3600000 192.5.5.241 - % 2 g.root-servers.net. IN A 3600000 192.112.36.4 - % 2 h.root-servers.net. IN A 3600000 128.63.2.53 - % 2 i.root-servers.net. IN A 3600000 192.36.148.17 - % 2 j.root-servers.net. IN A 3600000 192.58.128.30 - % 2 k.root-servers.net. IN A 3600000 193.0.14.129 - % 2 l.root-servers.net. IN A 3600000 198.32.64.12 - % 2 m.root-servers.net. IN A 3600000 202.12.27.33 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='this.domain.is.not.in.powerdns.', qtype=A - - {unknown_domain, { - {question, {"this.domain.is.not.in.the.server", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_REFUSED, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, []}, - {additional, []} - }} - }}, - - % This test tries to resolve a TXT record that is directly available in - % the database, but is longer than 255 characters. This requires splitting. - - % 0 very-long-txt.test.com. IN TXT 3600 "A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you" " won't believe how long!" - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='very-long-txt.test.com.', qtype=TXT - - {very_long_text, { - {question, {"very-long-txt.test.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, [ - {<<"very-long-txt.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 3600, #dns_rrdata_txt{txt = [<<"A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you">>, <<" won't believe how long!">>]}} - ]}, - {authority, []}, - {additional, []} - }} - }}, - - % 1 sub.test.test.com. IN NS 3600 ns-test.example.net.test.com. - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 - % Reply to question for qname='www.sub.test.test.com.', qtype=A - - {wildcard_overlaps_delegation, { - {question, {"www.sub.test.test.com", ?DNS_TYPE_A}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=false, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"sub.test.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"ns-test.example.net.test.com">>}} - ]}, - {additional, []} - }} - }}, - - % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 - % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 - % Reply to question for qname='www.something.wtest.com.', qtype=TXT - - {wrong_type_wildcard, { - {question, {"www.something.wtest.com", ?DNS_TYPE_TXT}}, - {header, #dns_message{rc=?DNS_RCODE_NOERROR, rd=false, qr=true, tc=false, aa=true, oc=?DNS_OPCODE_QUERY}}, - {records, { - {answers, []}, - {authority, [ - {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{mname = <<"ns1.wtest.com">>, rname = <<"ahu.example.com">>, serial=2005092501, refresh=28800, retry=7200, expire=604800, minimum = 86400}} - ]}, - {additional, []} - }} - }} - - ]. + ]}, + {authority, []}, + {additional, [ + {<<"ns1.wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 3600, #dns_rrdata_a{ip = {2, 3, 4, 5}}} + ]} + }} + }}, + + % This test makes sure an SRV record pointing at the root works + + % 0 _root._tcp.dc.test.com. IN SRV 3600 0 0 0 . + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='_root._tcp.dc.test.com.', qtype=SRV + + {root_srv, { + {question, {"_root._tcp.dc.test.com", ?DNS_TYPE_SRV}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"_root._tcp.dc.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SRV, 3600, #dns_rrdata_srv{ + priority = 0, weight = 0, port = 0, target = <<"">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 0 server1.test.com. IN RP 3600 ahu.ds9a.nl. counter.test.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='server1.test.com.', qtype=RP + + {rp, { + {question, {"server1.test.com", ?DNS_TYPE_RP}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"server1.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_RP, 3600, #dns_rrdata_rp{ + mbox = <<"ahu.ds9a.nl">>, txt = <<"counter.test.com">> + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % A referral with the same name as the NS record itself, but now for a SOA + % record. + + % 1 france.example.com. IN NS 120 ns1.otherprovider.net. + % 1 france.example.com. IN NS 120 ns2.otherprovider.net. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='france.example.com.', qtype=SOA + + {same_level_referral_soa, { + {question, {"france.example.com", ?DNS_TYPE_SOA}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} + ]}, + {additional, []} + }} + }}, + + % 1 france.example.com. IN NS 120 ns1.otherprovider.net. + % 1 france.example.com. IN NS 120 ns2.otherprovider.net. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='france.example.com.', qtype=A + + {same_level_referral, { + {question, {"france.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns1.otherprovider.net">>}}, + {<<"france.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 120, #dns_rrdata_ns{dname = <<"ns2.otherprovider.net">>}} + ]}, + {additional, []} + }} + }}, + + % UDP dns packets can only be 512 bytes long - when they are longer, they need + % to get truncated, and have the 'TC' bit set, to inform the client that they + % need to requery over TCP. This query however does not need truncation, since + % the information that causes things to go over limit is 'additional'. + + % 0 together-too-much.example.com. IN MX 120 25 toomuchinfo-a.example.com. + % 0 together-too-much.example.com. IN MX 120 25 toomuchinfo-b.example.com. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % 2 toomuchinfo-X.example.com. IN A 120 192.168.99. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='together-too-much.example.com.', qtype=MX + + {too_big_for_udp_query_no_truncate_additional, { + {question, {"together-too-much.example.com", ?DNS_TYPE_MX}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"together-too-much.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"toomuchinfo-a.example.com">>, preference = 25 + }}, + {<<"together-too-much.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_MX, 120, #dns_rrdata_mx{ + exchange = <<"toomuchinfo-b.example.com">>, preference = 25 + }} + ]}, + {authority, []}, + {additional, [ + % In our case we just don't send any additionals if the packet is too large, since it is a performance + % enhancement only. + + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,1}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,2}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,3}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,4}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,5}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,6}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,7}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,8}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,9}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,10}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,11}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,12}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,13}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,14}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,15}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,16}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,17}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,18}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,19}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,20}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,21}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,22}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,23}}}, + %{<<"toomuchinfo-a.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192,168,99,24}}} + ]} + }} + }}, + + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % 0 toomuchinfo-b.example.com. IN A 120 192.168.99. + % Rcode: 0, RD: 0, QR: 1, TC: 1, AA: 1, opcode: 0 + % Reply to question for qname='toomuchinfo-b.example.com.', qtype=A + + {too_big_for_udp_query, { + {question, {"toomuchinfo-b.example.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = true, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 26}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 27}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 28}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 29}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 30}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 31}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 32}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 33}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 34}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 35}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 36}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 37}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 38}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 39}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 40}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 41}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 42}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 43}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 44}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 45}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 46}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 47}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 48}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 49}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 50}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 51}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 52}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 53}}}, + {<<"toomuchinfo-b.example.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_A, 120, #dns_rrdata_a{ip = {192, 168, 99, 54}}} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % When asked for a domain for which a nameserver is not authoritative, it + % should return with an empty no-error packet, and drop the AA bit + + % 1 . IN NS 518400 a.root-servers.net. + % 1 . IN NS 518400 b.root-servers.net. + % 1 . IN NS 518400 c.root-servers.net. + % 1 . IN NS 518400 d.root-servers.net. + % 1 . IN NS 518400 e.root-servers.net. + % 1 . IN NS 518400 f.root-servers.net. + % 1 . IN NS 518400 g.root-servers.net. + % 1 . IN NS 518400 h.root-servers.net. + % 1 . IN NS 518400 i.root-servers.net. + % 1 . IN NS 518400 j.root-servers.net. + % 1 . IN NS 518400 k.root-servers.net. + % 1 . IN NS 518400 l.root-servers.net. + % 1 . IN NS 518400 m.root-servers.net. + % 2 a.root-servers.net. IN A 3600000 198.41.0.4 + % 2 b.root-servers.net. IN A 3600000 192.228.79.201 + % 2 c.root-servers.net. IN A 3600000 192.33.4.12 + % 2 d.root-servers.net. IN A 3600000 128.8.10.90 + % 2 e.root-servers.net. IN A 3600000 192.203.230.10 + % 2 f.root-servers.net. IN A 3600000 192.5.5.241 + % 2 g.root-servers.net. IN A 3600000 192.112.36.4 + % 2 h.root-servers.net. IN A 3600000 128.63.2.53 + % 2 i.root-servers.net. IN A 3600000 192.36.148.17 + % 2 j.root-servers.net. IN A 3600000 192.58.128.30 + % 2 k.root-servers.net. IN A 3600000 193.0.14.129 + % 2 l.root-servers.net. IN A 3600000 198.32.64.12 + % 2 m.root-servers.net. IN A 3600000 202.12.27.33 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='this.domain.is.not.in.powerdns.', qtype=A + + {unknown_domain, { + {question, {"this.domain.is.not.in.the.server", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_REFUSED, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, []}, + {additional, []} + }} + }}, + + % This test tries to resolve a TXT record that is directly available in + % the database, but is longer than 255 characters. This requires splitting. + + % 0 very-long-txt.test.com. IN TXT 3600 "A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you" " won't believe how long!" + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='very-long-txt.test.com.', qtype=TXT + + {very_long_text, { + {question, {"very-long-txt.test.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, [ + {<<"very-long-txt.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_TXT, 3600, #dns_rrdata_txt{ + txt = [ + <<"A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you won't believe how long. A very long TXT record! boy you">>, + <<" won't believe how long!">> + ] + }} + ]}, + {authority, []}, + {additional, []} + }} + }}, + + % 1 sub.test.test.com. IN NS 3600 ns-test.example.net.test.com. + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 0, opcode: 0 + % Reply to question for qname='www.sub.test.test.com.', qtype=A + + {wildcard_overlaps_delegation, { + {question, {"www.sub.test.test.com", ?DNS_TYPE_A}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = false, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"sub.test.test.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_NS, 3600, #dns_rrdata_ns{dname = <<"ns-test.example.net.test.com">>}} + ]}, + {additional, []} + }} + }}, + + % 1 wtest.com. IN SOA 3600 ns1.wtest.com. ahu.example.com. 2005092501 28800 7200 604800 86400 + % Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 + % Reply to question for qname='www.something.wtest.com.', qtype=TXT + + {wrong_type_wildcard, { + {question, {"www.something.wtest.com", ?DNS_TYPE_TXT}}, + {header, #dns_message{rc = ?DNS_RCODE_NOERROR, rd = false, qr = true, tc = false, aa = true, oc = ?DNS_OPCODE_QUERY}}, + {records, { + {answers, []}, + {authority, [ + {<<"wtest.com">>, ?DNS_CLASS_IN, ?DNS_TYPE_SOA, 3600, #dns_rrdata_soa{ + mname = <<"ns1.wtest.com">>, + rname = <<"ahu.example.com">>, + serial = 2005092501, + refresh = 28800, + retry = 7200, + expire = 604800, + minimum = 86400 + }} + ]}, + {additional, []} + }} + }} + ]. %hex_to_bin(Bin) when is_binary(Bin) -> %Fun = fun(A, B) -> diff --git a/src/dnstest_harness.erl b/src/dnstest_harness.erl index dfd50bc..147a07a 100644 --- a/src/dnstest_harness.erl +++ b/src/dnstest_harness.erl @@ -7,13 +7,14 @@ -export([start_link/0]). % Gen server hooks --export([init/1, +-export([ + init/1, handle_call/3, handle_cast/2, handle_info/2, terminate/2, code_change/3 - ]). +]). % Internal API -export([send_request/3]). @@ -21,235 +22,242 @@ -record(state, {}). -define(SERVER, ?MODULE). --define(DEFAULT_IPV4_ADDRESS, {127,0,0,1}). --define(DEFAULT_IPV6_ADDRESS, {0,0,0,0,0,0,0,1}). +-define(DEFAULT_IPV4_ADDRESS, {127, 0, 0, 1}). +-define(DEFAULT_IPV6_ADDRESS, {0, 0, 0, 0, 0, 0, 0, 1}). -define(DEFAULT_PORT, 53). % Public API %% Start the gen server. start_link() -> - lager:info("Starting ~p process", [?MODULE]), - gen_server:start_link({local, ?SERVER}, ?MODULE, [], []). + lager:info("Starting ~p process", [?MODULE]), + gen_server:start_link({local, ?SERVER}, ?MODULE, [], []). init([]) -> - {ok, #state{}}. + {ok, #state{}}. handle_call(_Message, _From, State) -> - {reply, ok, State}. + {reply, ok, State}. handle_cast({run, Definition}, State) -> - TestResults = run(Definition), - dnstest_reporter:report(TestResults), - dnstest_metrics:slowest(), - {noreply, State}; + TestResults = run(Definition), + dnstest_reporter:report(TestResults), + dnstest_metrics:slowest(), + {noreply, State}; handle_cast({run_target, Definition, Names}, State) -> - TestResults = run(Definition, Names), - dnstest_reporter:report(TestResults), - dnstest_metrics:display(Names), - {noreply, State}. + TestResults = run(Definition, Names), + dnstest_reporter:report(TestResults), + dnstest_metrics:display(Names), + {noreply, State}. handle_info(Message, State) -> - lager:info("handle_info(~p)", [Message]), - {noreply, State}. + lager:info("handle_info(~p)", [Message]), + {noreply, State}. terminate(Reason, _State) -> - lager:info("terminate(~p)", [Reason]), - ok. + lager:info("terminate(~p)", [Reason]), + ok. code_change(PreviousVersion, State, Extra) -> - lager:info("code_change(~p, ~p)", [PreviousVersion, Extra]), - {ok, State}. + lager:info("code_change(~p, ~p)", [PreviousVersion, Extra]), + {ok, State}. %% Internal API measure(Name, FunctionName, Args) when is_list(Args) -> - {T, R} = timer:tc(?MODULE, FunctionName, Args), - dnstest_metrics:insert(Name, T), - R; -measure(Name, FunctionName, Arg) -> measure(Name, FunctionName, [Arg]). + {T, R} = timer:tc(?MODULE, FunctionName, Args), + dnstest_metrics:insert(Name, T), + R; +measure(Name, FunctionName, Arg) -> + measure(Name, FunctionName, [Arg]). % Run the test with the given definition. run(Definition) -> run(Definition, [], []). run(Definition, Names) -> run(Definition, Names, []). -run([], _, TestResults) -> TestResults; -run([{Name, Conditions}|Rest], Names, TestResults) -> - case length(Names) of - 0 -> run(Rest, Names, TestResults ++ run_test(Name, Conditions)); - _ -> - case lists:member(atom_to_list(Name), Names) of - true -> run(Rest, Names, TestResults ++ run_test(Name, Conditions)); - false -> run(Rest, Names, TestResults) - end - end. +run([], _, TestResults) -> + TestResults; +run([{Name, Conditions} | Rest], Names, TestResults) -> + case length(Names) of + 0 -> + run(Rest, Names, TestResults ++ run_test(Name, Conditions)); + _ -> + case lists:member(atom_to_list(Name), Names) of + true -> run(Rest, Names, TestResults ++ run_test(Name, Conditions)); + false -> run(Rest, Names, TestResults) + end + end. run_test(Name, {{question, {Qname, Qtype}}, {header, ExpectedHeader}, {records, ExpectedRecords}}) -> - run_test(Name, {{question, {Qname, Qtype}}, {header, ExpectedHeader}, {additional, []}, {records, ExpectedRecords}}); + run_test(Name, {{question, {Qname, Qtype}}, {header, ExpectedHeader}, {additional, []}, {records, ExpectedRecords}}); run_test(Name, Conditions) -> - lager:info("Running test ~p", [Name]), + lager:info("Running test ~p", [Name]), - {{question, {Qname, Qtype}}, {header, ExpectedHeader}, {additional, Additional}, {records, ExpectedRecords}} = Conditions, - {{answers, ExpectedAnswers}, {authority, ExpectedAuthority}, {additional, ExpectedAdditional}} = ExpectedRecords, + {{question, {Qname, Qtype}}, {header, ExpectedHeader}, {additional, Additional}, {records, ExpectedRecords}} = Conditions, + {{answers, ExpectedAnswers}, {authority, ExpectedAuthority}, {additional, ExpectedAdditional}} = ExpectedRecords, - lager:debug("Sending to host ~p and port ~p", [host(), port()]), + lager:debug("Sending to host ~p and port ~p", [host(), port()]), - % Run the test - {ok, Response} = measure(Name, send_request, [Qname, Qtype, Additional]), - lager:debug("Response: ~p", [Response]), + % Run the test + {ok, Response} = measure(Name, send_request, [Qname, Qtype, Additional]), + lager:debug("Response: ~p", [Response]), - % Check the results - Results = [ - test_header(ExpectedHeader, Response), - test_records(ExpectedAnswers, Response#dns_message.answers, answers), - test_records(ExpectedAuthority, Response#dns_message.authority, authority), - test_records(ExpectedAdditional, Response#dns_message.additional, additional) - ], + % Check the results + Results = [ + test_header(ExpectedHeader, Response), + test_records(ExpectedAnswers, Response#dns_message.answers, answers), + test_records(ExpectedAuthority, Response#dns_message.authority, authority), + test_records(ExpectedAdditional, Response#dns_message.additional, additional) + ], - [{Name, Results}]. + [{Name, Results}]. send_request(Qname, Qtype, Additional) -> - Questions = [#dns_query{name=Qname, type=Qtype}], - Message = #dns_message{rd = false, qc=1, adc=1, questions=Questions, additional=Additional}, - send_udp_query(Message, host(), port()). + Questions = [#dns_query{name = Qname, type = Qtype}], + Message = #dns_message{rd = false, qc = 1, adc = 1, questions = Questions, additional = Additional}, + send_udp_query(Message, host(), port()). % Test expected answers against actual answers. test_records(ExpectedRecords, ActualRecords, SectionType) -> - ActualRecordsSorted = lists:sort(lists:map(record_to_tuple_function(), lists:filter(dns_rr_filter(), ActualRecords))), - ExpectedRecordsSorted = lists:sort(lists:map(fill_data_function(ActualRecordsSorted), ExpectedRecords)), - - case ExpectedRecordsSorted =:= ActualRecordsSorted of - false -> - lager:info("Expected ~p: ~w", [SectionType, ExpectedRecordsSorted]), - lager:info("Actual ~p: ~w", [SectionType, ActualRecordsSorted]), - false; - true -> true - end. + ActualRecordsSorted = lists:sort(lists:map(record_to_tuple_function(), lists:filter(dns_rr_filter(), ActualRecords))), + ExpectedRecordsSorted = lists:sort(lists:map(fill_data_function(ActualRecordsSorted), ExpectedRecords)), + + case ExpectedRecordsSorted =:= ActualRecordsSorted of + false -> + lager:info("Expected ~p: ~w", [SectionType, ExpectedRecordsSorted]), + lager:info("Actual ~p: ~w", [SectionType, ActualRecordsSorted]), + false; + true -> + true + end. % Test expected header values against actual header values. test_header(ExpectedHeader, Response) -> - ActualHeader = #dns_message{ - id=ExpectedHeader#dns_message.id, - rc=Response#dns_message.rc, - rd=Response#dns_message.rd, - qr=Response#dns_message.qr, - tc=Response#dns_message.tc, - aa=Response#dns_message.aa, - oc=Response#dns_message.oc - }, - case ExpectedHeader =:= ActualHeader of - false -> - lager:info("Expected header: ~p", [ExpectedHeader]), - lager:info("Actual header: ~p", [ActualHeader]), - false; - true -> true - end. + ActualHeader = #dns_message{ + id = ExpectedHeader#dns_message.id, + rc = Response#dns_message.rc, + rd = Response#dns_message.rd, + qr = Response#dns_message.qr, + tc = Response#dns_message.tc, + aa = Response#dns_message.aa, + oc = Response#dns_message.oc + }, + case ExpectedHeader =:= ActualHeader of + false -> + lager:info("Expected header: ~p", [ExpectedHeader]), + lager:info("Actual header: ~p", [ActualHeader]), + false; + true -> + true + end. % Send the message to the given host:port via UDP. send_udp_query(Message, Host, Port) -> - Packet = dns:encode_message(Message), - lager:debug("Sending UDP query to ~p", [Host]), - {ok, Socket} = gen_udp:open(0, [binary, {active, false}]), - gen_udp:send(Socket, Host, Port, Packet), - QueryResponse = case gen_udp:recv(Socket, 65535, 6000) of - {ok, {Host, _Port, Reply}} -> {ok, dns:decode_message(Reply)}; - {error, Error} -> {error, Error, {server, {Host, Port}}}; - Response -> Response - end, - gen_udp:close(Socket), - QueryResponse. + Packet = dns:encode_message(Message), + lager:debug("Sending UDP query to ~p", [Host]), + {ok, Socket} = gen_udp:open(0, [binary, {active, false}]), + gen_udp:send(Socket, Host, Port, Packet), + QueryResponse = + case gen_udp:recv(Socket, 65535, 6000) of + {ok, {Host, _Port, Reply}} -> {ok, dns:decode_message(Reply)}; + {error, Error} -> {error, Error, {server, {Host, Port}}}; + Response -> Response + end, + gen_udp:close(Socket), + QueryResponse. host() -> - host(inet4). + host(inet4). host(Key) when (Key =:= inet4) or (Key =:= inet6) -> - case application:get_env(dnstest, Key) of - {ok, Host} -> parse_address(Host); - _ -> default_address(Key) - end. + case application:get_env(dnstest, Key) of + {ok, Host} -> parse_address(Host); + _ -> default_address(Key) + end. default_address(inet4) -> - ?DEFAULT_IPV4_ADDRESS; + ?DEFAULT_IPV4_ADDRESS; default_address(inet6) -> - ?DEFAULT_IPV6_ADDRESS. + ?DEFAULT_IPV6_ADDRESS. port() -> - case application:get_env(dnstest, port) of - {ok, Port} -> Port; - _ -> ?DEFAULT_PORT - end. + case application:get_env(dnstest, port) of + {ok, Port} -> Port; + _ -> ?DEFAULT_PORT + end. parse_address(Address) when is_list(Address) -> - {ok, Tuple} = inet_parse:address(Address), - Tuple; -parse_address(Address) -> Address. - + {ok, Tuple} = inet_parse:address(Address), + Tuple; +parse_address(Address) -> + Address. fill_data(ExpectedName, ExpectedRRData, ActualRecords) when is_record(ExpectedRRData, dns_rrdata_rrsig) -> - %lager:info("Expected RRData: ~p", [ExpectedRRData]), - TypeCovered = ExpectedRRData#dns_rrdata_rrsig.type_covered, - RRSigSet = lists:filter(rrsig_filter(ExpectedName, TypeCovered), ActualRecords), - update_rrsig(ExpectedRRData, RRSigSet); - + %lager:info("Expected RRData: ~p", [ExpectedRRData]), + TypeCovered = ExpectedRRData#dns_rrdata_rrsig.type_covered, + RRSigSet = lists:filter(rrsig_filter(ExpectedName, TypeCovered), ActualRecords), + update_rrsig(ExpectedRRData, RRSigSet); fill_data(ExpectedName, ExpectedRRData, ActualRecords) when is_record(ExpectedRRData, dns_rrdata_dnskey) -> - Flags = ExpectedRRData#dns_rrdata_dnskey.flags, - DNSKeySet = lists:filter(dnskey_filter(ExpectedName, Flags), ActualRecords), - update_dnskey(ExpectedRRData, DNSKeySet); - -fill_data(_, Data, _) -> Data. - - - -update_rrsig(ExpectedRRData, []) -> ExpectedRRData; -update_rrsig(ExpectedRRData, [{_, _, _, _, Data}|_]) -> - ExpectedRRData#dns_rrdata_rrsig{expiration = Data#dns_rrdata_rrsig.expiration, - inception = Data#dns_rrdata_rrsig.inception, - key_tag = Data#dns_rrdata_rrsig.key_tag, - signature = Data#dns_rrdata_rrsig.signature - }. - -update_dnskey(ExpectedRRData, []) -> ExpectedRRData; -update_dnskey(ExpectedRRData, [{_, _, _, _, Data}|_]) -> - ExpectedRRData#dns_rrdata_dnskey{ - key_tag = Data#dns_rrdata_dnskey.key_tag, - public_key = Data#dns_rrdata_dnskey.public_key - }. - + Flags = ExpectedRRData#dns_rrdata_dnskey.flags, + DNSKeySet = lists:filter(dnskey_filter(ExpectedName, Flags), ActualRecords), + update_dnskey(ExpectedRRData, DNSKeySet); +fill_data(_, Data, _) -> + Data. + +update_rrsig(ExpectedRRData, []) -> + ExpectedRRData; +update_rrsig(ExpectedRRData, [{_, _, _, _, Data} | _]) -> + ExpectedRRData#dns_rrdata_rrsig{ + expiration = Data#dns_rrdata_rrsig.expiration, + inception = Data#dns_rrdata_rrsig.inception, + key_tag = Data#dns_rrdata_rrsig.key_tag, + signature = Data#dns_rrdata_rrsig.signature + }. + +update_dnskey(ExpectedRRData, []) -> + ExpectedRRData; +update_dnskey(ExpectedRRData, [{_, _, _, _, Data} | _]) -> + ExpectedRRData#dns_rrdata_dnskey{ + key_tag = Data#dns_rrdata_dnskey.key_tag, + public_key = Data#dns_rrdata_dnskey.public_key + }. record_to_tuple_function() -> - fun({dns_rr, Name, Class, Type, TTL, Data}) -> - {Name, Class, Type, TTL, Data} - end. + fun({dns_rr, Name, Class, Type, TTL, Data}) -> + {Name, Class, Type, TTL, Data} + end. fill_data_function(ActualRecordsSorted) -> - fun({Name, Class, Type, TTL, Data}) -> - {Name, Class, Type, TTL, fill_data(Name, Data, ActualRecordsSorted)} - end. + fun({Name, Class, Type, TTL, Data}) -> + {Name, Class, Type, TTL, fill_data(Name, Data, ActualRecordsSorted)} + end. dns_rr_filter() -> - fun(R) -> - case R of - #dns_rr{} -> true; - _ -> false - end - end. + fun(R) -> + case R of + #dns_rr{} -> true; + _ -> false + end + end. rrsig_filter(ExpectedName, TypeCovered) -> - fun({Name, _, _, _, RRData}) -> - case {Name, RRData} of - {ExpectedName, #dns_rrdata_rrsig{type_covered = TypeCovered}} -> - %lager:info("RRData: ~p", [RRData]), - true; - _ -> false - end - end. + fun({Name, _, _, _, RRData}) -> + case {Name, RRData} of + {ExpectedName, #dns_rrdata_rrsig{type_covered = TypeCovered}} -> + %lager:info("RRData: ~p", [RRData]), + true; + _ -> + false + end + end. dnskey_filter(ExpectedName, Flags) -> - fun({Name, _, _, _, RRData}) -> - case {Name, RRData} of - {ExpectedName, #dns_rrdata_dnskey{flags = Flags}} -> - %lager:info("RRData: ~p", [RRData]), - true; - _ -> false - end - end. + fun({Name, _, _, _, RRData}) -> + case {Name, RRData} of + {ExpectedName, #dns_rrdata_dnskey{flags = Flags}} -> + %lager:info("RRData: ~p", [RRData]), + true; + _ -> + false + end + end. diff --git a/src/dnstest_metrics.erl b/src/dnstest_metrics.erl index 2bc1337..1e72c5d 100644 --- a/src/dnstest_metrics.erl +++ b/src/dnstest_metrics.erl @@ -6,104 +6,104 @@ -export([start_link/0, start/0, run_number/0, insert/2, clear/0, display/0, display/1, slowest/0]). % Gen server hooks --export([init/1, - handle_call/3, - handle_cast/2, - handle_info/2, - terminate/2, - code_change/3 - ]). +-export([ + init/1, + handle_call/3, + handle_cast/2, + handle_info/2, + terminate/2, + code_change/3 +]). -define(SERVER, ?MODULE). --record(state, {run_number = 0, data=[]}). +-record(state, {run_number = 0, data = []}). % Public API start_link() -> - gen_server:start_link({local, ?SERVER}, ?MODULE, [], []). + gen_server:start_link({local, ?SERVER}, ?MODULE, [], []). %% Marks the start of a test run. This will increment a counter %% so that tests run together can be displayed together. start() -> - gen_server:call(?SERVER, {start}). + gen_server:call(?SERVER, {start}). %% Get the current run number. run_number() -> - gen_server:call(?SERVER, {run_number}). + gen_server:call(?SERVER, {run_number}). insert(Name, Time) -> - gen_server:cast(?SERVER, {insert, Name, Time}). + gen_server:cast(?SERVER, {insert, Name, Time}). clear() -> - gen_server:cast(?SERVER, {clear}). + gen_server:cast(?SERVER, {clear}). display() -> - gen_server:call(?SERVER, {display}). + gen_server:call(?SERVER, {display}). display(Names) -> - gen_server:call(?SERVER, {display, Names}). + gen_server:call(?SERVER, {display, Names}). slowest() -> - gen_server:call(?SERVER, {display, slowest}). + gen_server:call(?SERVER, {display, slowest}). % Gen server functions init(_) -> - {ok, #state{}}. + {ok, #state{}}. handle_call({start}, _From, State) -> - {reply, ok, State#state{run_number = State#state.run_number + 1}}; - + {reply, ok, State#state{run_number = State#state.run_number + 1}}; handle_call({run_number}, _From, State) -> - {reply, State#state.run_number, State}; - -handle_call({insert, Name, Time}, _From, State) -> - {reply, ok, State#state{data = State#state.data ++ [{Name, Time}]}}; - + {reply, State#state.run_number, State}; +handle_call({insert, Name, Time}, _From, State) -> + {reply, ok, State#state{data = State#state.data ++ [{Name, Time}]}}; handle_call({display}, _From, State) -> - display_list(State#state.data), - {reply, ok, State}; - + display_list(State#state.data), + {reply, ok, State}; handle_call({display, Names}, _From, State) when is_list(Names) -> - display_list(lists:filter( - fun({Name, _}) -> - lists:member(atom_to_list(Name), Names) - end, State#state.data)), - {reply, ok, State}; - + display_list( + lists:filter( + fun({Name, _}) -> + lists:member(atom_to_list(Name), Names) + end, + State#state.data + ) + ), + {reply, ok, State}; handle_call({display, slowest}, _From, State) -> - display_list(lists:sort(fun({_, A}, {_, B}) -> A > B end, State#state.data)), - {reply, ok, State}. - + display_list(lists:sort(fun({_, A}, {_, B}) -> A > B end, State#state.data)), + {reply, ok, State}. handle_cast({insert, Name, Time}, State) -> - {noreply, State#state{data = State#state.data ++ [{Name, Time}]}}; + {noreply, State#state{data = State#state.data ++ [{Name, Time}]}}; handle_cast({clear}, State) -> - {noreply, State#state{data = []}}; + {noreply, State#state{data = []}}; handle_cast({display}, State) -> - display_list(State#state.data), - {noreply, State}; + display_list(State#state.data), + {noreply, State}; handle_cast({display, Names}, State) when is_list(Names) -> - display_list(lists:filter(fun({Name, _}) -> lists:member(Name, Names) end, State#state.data)), - {reply, ok, State}; + display_list(lists:filter(fun({Name, _}) -> lists:member(Name, Names) end, State#state.data)), + {reply, ok, State}; handle_cast({display, slowest}, State) -> - Sorted = lists:sort(fun({_, A}, {_, B}) -> A > B end, State#state.data), - display_list(Sorted), - {noreply, State}. - + Sorted = lists:sort(fun({_, A}, {_, B}) -> A > B end, State#state.data), + display_list(Sorted), + {noreply, State}. handle_info(_Message, State) -> - {noreply, State}. + {noreply, State}. terminate(_Reason, _State) -> - ok. + ok. code_change(_PreviousVersion, State, _Extra) -> - {ok, State}. + {ok, State}. % Internal API -display_list(Results) -> - io:format("--- Query Times ---~n"), - lists:foreach(fun({Name, T}) -> - io:format("~p: ~p ms~n", [Name, T / 1000]) - end, Results). - +display_list(Results) -> + io:format("--- Query Times ---~n"), + lists:foreach( + fun({Name, T}) -> + io:format("~p: ~p ms~n", [Name, T / 1000]) + end, + Results + ). diff --git a/src/dnstest_reporter.erl b/src/dnstest_reporter.erl index 908d6e1..b0a57e2 100644 --- a/src/dnstest_reporter.erl +++ b/src/dnstest_reporter.erl @@ -3,10 +3,12 @@ -export([report/1]). report(TestResults) -> - PassFail = lists:map( - fun({Name, Result}) -> - [Name, lists:all(fun(R) -> R end, Result)] - end, TestResults), - {Pass, Fail} = lists:partition(fun([_, Result]) -> Result end, PassFail), - lager:info("~p Passed, ~p Failed", [length(Pass), length(Fail)]), - lists:foreach(fun(R) -> lager:info("~p: ~p", R) end, Fail). + PassFail = lists:map( + fun({Name, Result}) -> + [Name, lists:all(fun(R) -> R end, Result)] + end, + TestResults + ), + {Pass, Fail} = lists:partition(fun([_, Result]) -> Result end, PassFail), + lager:info("~p Passed, ~p Failed", [length(Pass), length(Fail)]), + lists:foreach(fun(R) -> lager:info("~p: ~p", R) end, Fail). diff --git a/src/dnstest_sup.erl b/src/dnstest_sup.erl index adbbe89..cbd45c3 100644 --- a/src/dnstest_sup.erl +++ b/src/dnstest_sup.erl @@ -11,12 +11,12 @@ %% Public API start_link() -> - supervisor:start_link({local, ?SUPERVISOR}, ?MODULE, []). + supervisor:start_link({local, ?SUPERVISOR}, ?MODULE, []). init(_Args) -> - lager:info("Supervisor is starting procs"), - Procs = [ - {dnstest_harness, {dnstest_harness, start_link, []}, permanent, 5000, worker, [dnstest_harness]}, - {dnstest_metrics, {dnstest_metrics, start_link, []}, permanent, 5000, worker, [dnstest_metrics]} - ], - {ok, {{one_for_one, 5, 10}, Procs}}. + lager:info("Supervisor is starting procs"), + Procs = [ + {dnstest_harness, {dnstest_harness, start_link, []}, permanent, 5000, worker, [dnstest_harness]}, + {dnstest_metrics, {dnstest_metrics, start_link, []}, permanent, 5000, worker, [dnstest_metrics]} + ], + {ok, {{one_for_one, 5, 10}, Procs}}.