-
Notifications
You must be signed in to change notification settings - Fork 233
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SERVFAIL handling with --all-servers #354
Labels
bug
Something isn't working
Comments
I also found same issue, tested on Hong Kong server
Quad9:
OpenDNS:
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently with
--all-servers
enabled, it seems like the fastest response is forwarded, even if that happens to be aSERVFAIL
, which is pretty bad for some use cases. ASERVFAIL
can indicate network problems, e.g. some DNS servers/proxies answer very quickly withSERVFAIL
, when their own upstream is dead (which I guess is correct and reasonable), in this case--all-servers
makes things even worse than using just a single server, because now if any upstream is dead, we're always failing.I suggest changing
SERVFAIL
handling to by default only forward it, if all upstream servers happen to respond withSERVFAIL
.In case someone brings DNSSEC as argument, maybe
SERVFAIL
s can optionally be forwarded immediately, if coming with an appropriate EDE error code (RFC 8914).(The
SERVFAIL
handling in fallback mode might be related: #257)The text was updated successfully, but these errors were encountered: